Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: BAwIDLH90uYd43Z5aK/CmjavG3+kr5JplereLT1d3tw=
Subject key identifier: 25:5C:EC:80:4A:C4:7E:79:64:12:58:FD:5E:6E:F4:EA:24:F6:55:8D
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 0199FD3400B07D45900B28C6E1E6742025EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: OpOZFoQQINHjlmyUz74pYACef3UluAHucSVpESqkxW0=)
2: LiDek8ukAeDalnCmjHOSOx8ybkY.roa (hash: XaMtoZ+RB8cq+ljNgiN30o7Aneys4CKgmujbsMdFNUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:00:b0:7d:45:90:0b:28:c6:e1:e6:74:20:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=255cec804ac47e79641258fd5e6ef4ea24f6558d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:18:1d:5a:3e:b6:f5:dd:43:9c:d4:14:36:38:
fd:94:e0:31:ec:c9:78:34:4b:cb:b1:2d:60:b4:64:
f7:90:4b:29:f9:8b:7f:ec:43:9d:8f:b5:b7:df:f2:
9f:7e:d1:3c:09:3e:b2:6d:ea:01:34:1d:22:3c:be:
66:d8:08:95:28:33:13:83:3d:7c:e7:8f:3b:43:54:
71:3e:9b:08:1d:43:84:60:ae:19:5a:f4:49:79:1d:
ae:80:c8:e2:ea:84:41:89:b4:34:bd:7a:f2:d8:cc:
49:11:6b:f5:01:52:52:df:6d:43:09:5d:86:8a:ed:
83:cb:9c:59:b2:e7:e3:80:e6:83:78:d6:07:c5:e1:
f5:10:29:95:db:72:c1:ea:d1:41:e5:9f:aa:da:31:
e6:5e:45:d6:ea:c7:7d:10:85:6c:e4:37:18:49:ff:
ec:94:c1:b7:a4:5c:85:db:39:6f:d9:88:fd:87:ae:
2f:fe:ff:0f:c7:54:29:28:09:78:e3:37:5a:1f:31:
9c:9d:30:37:0d:f6:45:79:09:66:ef:e8:e3:b1:6c:
e7:2b:8c:62:c1:be:87:f4:2c:f7:d1:86:7a:3b:09:
27:0b:ec:53:7e:be:bf:4b:1d:18:4b:22:ce:02:97:
84:8c:52:de:6b:0f:47:01:ee:ca:a2:1c:9a:94:d1:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:EC:80:4A:C4:7E:79:64:12:58:FD:5E:6E:F4:EA:24:F6:55:8D
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:b6:e5:a8:91:a9:cf:e6:99:5c:91:94:a4:78:ac:a6:ab:
bc:46:a2:2e:3d:a5:9b:5a:04:b4:23:d9:87:3d:32:1a:fc:c3:
00:8f:28:99:b0:b1:9f:97:17:7e:5b:1f:ad:db:bb:ca:92:65:
c9:cd:36:5c:5e:78:a4:fd:af:e0:13:e3:89:9b:41:9f:cd:04:
ac:a2:67:8c:de:ab:f7:4d:5b:7f:3a:d3:04:c5:6b:2b:98:79:
55:3d:af:63:e3:0f:21:ab:5b:9c:f8:89:bc:63:f3:74:d5:0a:
68:90:c1:87:fa:74:b1:c6:4f:06:c2:68:f7:85:c0:c3:12:c1:
52:c8:6d:52:38:f8:96:43:15:2f:db:96:fc:0f:7d:cf:7e:3f:
56:3d:c7:29:8f:60:89:e3:2d:80:8a:24:4b:b4:ec:9b:4a:42:
e3:12:24:92:5b:b7:fc:5f:15:96:b2:2a:45:05:46:47:18:16:
81:80:a4:8e:74:e7:66:02:ee:33:56:bd:20:fc:cb:64:a2:e7:
53:58:94:81:d1:31:d0:d1:8d:40:0f:24:47:c3:be:0e:74:8f:
b7:fc:7e:35:9e:aa:25:98:30:88:85:1b:63:50:73:7a:a3:81:
10:29:f2:fd:de:05:63:80:d4:a9:83:fd:a9:f0:eb:e0:56:ef:
41:65:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:39 2025 by rpki-client