Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
File: 1-sCJqc1qA3W65JnMBqTKowcbXUw.mft (raw, json)
Hash identifier: XnNjDMRsMyXqxdB6uh/yx1e7iltpryER2oBRm0f29ec=
Subject key identifier: 70:E8:21:05:F2:C9:EA:92:FD:29:E8:06:32:89:95:CA:C6:2A:87:45
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 0199FBEBF43EFD92447A8A7A5F541195FC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: 1-sCJqc1qA3W65JnMBqTKowcbXUw.crl (hash: FFHBPLA2Kx+eFoIUKMvOcMmqGAvT74lcoGh+VMqdstg=)
2: 9Gc0nLgQOtGtRNM7UIaRIs_ONW8.roa (hash: 7XUr33w/Uy5ddx5EoTNZGUbNED5TJtOlZQk+2e6Mxi8=)
3: wfH5z_Bg4z7tHe6fq0H-30TIL34.roa (hash: VmP56mLP1KsPx5GBmYqlZvdPkuhp1r337TX7Q50d+Qg=)
4: yj2XO7X6nmMUvJxwQor2eoTB-gs.roa (hash: SDht8xJ05XM4bxvOhysfN3ceB8zgniuYHVUq4tgjt6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:3e:fd:92:44:7a:8a:7a:5f:54:11:95:fc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=70e82105f2c9ea92fd29e806328995cac62a8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:1a:d7:91:c6:87:04:53:8b:1e:fb:e3:92:
b2:fe:c3:43:8f:70:d4:2a:b0:ef:cd:e9:14:6b:63:
0c:15:6d:3e:21:64:1c:f2:dc:e9:a7:85:d1:ad:52:
12:09:bd:67:ee:29:5e:5d:f3:3b:41:22:5f:a1:77:
b9:a0:cf:37:66:0b:4e:e1:7e:95:bd:19:39:ea:b5:
18:28:35:e0:af:46:ff:74:b0:43:35:bd:ed:c3:1f:
e2:78:d6:0c:39:d0:f7:05:66:09:bf:8a:36:9f:73:
00:37:ec:67:d4:24:c1:aa:3a:67:f7:b1:a5:3f:0c:
cc:10:03:20:f7:c3:ea:b6:53:7e:cb:2c:0f:13:28:
43:2c:e4:55:a1:46:03:38:b3:55:33:e6:c0:7e:17:
ce:8b:08:44:ef:a0:c8:8c:b7:c6:2a:2d:bd:ff:3e:
7d:7b:24:a0:38:b1:e5:48:2d:68:16:6d:15:35:7d:
41:30:0b:05:6d:6f:a7:1d:a7:ce:61:c4:dc:6d:19:
ed:cf:1e:0b:bc:b5:7d:34:c1:b8:7f:47:f8:c4:50:
c0:3f:e9:31:82:34:e4:51:3e:e7:24:6f:55:e4:b2:
67:76:36:28:b0:ef:3f:6b:8f:b7:11:b1:d7:57:de:
5a:8a:3c:b6:59:4d:a5:0a:f8:60:9f:13:0a:7c:a6:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:21:05:F2:C9:EA:92:FD:29:E8:06:32:89:95:CA:C6:2A:87:45
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ab:83:c3:f5:2d:3c:d1:28:af:27:4e:93:d4:10:ab:76:cc:
1f:59:a7:c4:c1:c6:7f:90:2d:2f:f6:ee:4e:c4:4d:4d:91:c4:
88:fd:6e:da:a2:cc:6d:83:a0:99:0a:3e:f3:96:ac:9a:fc:d0:
73:6e:4e:25:ae:a5:4e:58:d3:29:87:de:5d:e5:d7:90:3f:71:
e7:f9:5d:e2:2d:e7:6f:0c:bf:ca:bf:56:0c:c7:ea:1e:61:ec:
e3:7e:2d:93:98:46:fb:53:9c:23:b2:16:3a:d4:33:80:b7:c5:
02:ca:ee:d9:4f:c2:65:70:5e:1e:e0:08:58:7e:55:42:e0:ae:
1a:83:5d:e0:66:40:04:38:a7:f5:b9:59:7a:96:e6:43:2b:fa:
4b:95:02:47:c0:6c:29:4c:fc:45:7d:bb:47:cd:96:90:7c:60:
d0:19:54:3d:99:ee:6e:5c:f9:61:17:87:ca:11:78:4e:0c:29:
89:fc:d2:1e:5c:73:3b:08:44:08:c7:19:df:08:de:78:4d:cc:
48:e5:33:bb:a6:19:5c:56:9a:8a:af:db:92:62:23:50:27:25:
b7:3e:62:a4:c4:b0:25:8f:ed:66:85:a7:6d:67:bc:06:2a:a8:
3e:12:ea:0f:ec:3b:7b:ce:c6:77:de:30:9e:e6:92:99:62:9f:
72:c1:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:22 2025 by rpki-client