
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: EIWzbi9PtLXgW2Xk27VhkLXupsbSPHIkzTF/fiXnrgI=
Subject key identifier: D2:18:8B:24:C2:05:2E:9F:47:52:77:65:A8:3B:B7:EE:99:72:59:A4
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 0199FDD9C4F3B905991BD3B2C123A07C9302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 081A
Signing time: Sun 19 Oct 2025 19:02:11 +0000
Manifest this update: Sun 19 Oct 2025 19:02:11 +0000
Manifest next update: Mon 20 Oct 2025 19:02:11 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: TyV60K3dvLna1EHiOmE3+ZKN3tvYHCjDo6QTru/kIuo=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c4:f3:b9:05:99:1b:d3:b2:c1:23:a0:7c:93:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Oct 19 19:02:11 2025 GMT
Not After : Oct 20 19:02:11 2025 GMT
Subject: CN=d2188b24c2052e9f47527765a83bb7ee997259a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ae:47:a8:d3:88:68:66:ed:af:5d:b8:d7:b1:
ee:a2:be:de:3e:8d:e9:15:39:68:69:67:39:2a:03:
5e:7f:b7:8e:5b:fa:59:3b:75:c5:5b:c0:f4:10:7a:
b7:fa:c4:45:4e:39:f5:b1:2c:bb:61:82:15:b5:29:
e7:0e:0a:a1:4d:77:15:1f:51:13:6c:53:44:d5:5b:
6e:f1:78:c7:93:f7:94:93:9d:09:5e:5d:3f:9e:f3:
7a:98:5c:90:1f:68:a1:97:b2:9d:e5:2c:d9:7d:6d:
0e:ed:fa:66:a9:6d:67:3e:e6:8c:fe:6c:66:b3:bf:
b2:4d:32:e5:41:e5:80:d1:42:8b:f7:4c:0b:6a:70:
8b:35:9b:d7:a5:57:13:7d:34:2e:5c:ea:03:53:76:
5f:15:42:12:cf:ea:53:4c:45:44:70:e5:38:35:1d:
54:2e:7c:30:c5:78:5d:51:69:15:b6:8c:d8:64:75:
01:75:b4:e7:17:2e:62:0f:09:2f:3b:f7:fc:a2:51:
38:c8:02:c9:23:f1:7f:7e:cc:09:15:5e:8f:8d:d9:
9b:08:2a:9b:32:1c:4f:74:03:26:97:5b:55:99:8d:
c0:67:92:1c:ab:48:40:62:a6:4c:dc:7b:df:5f:ed:
6c:cb:3d:fa:d9:b1:a6:c3:6e:d5:bf:13:7a:1b:75:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:18:8B:24:C2:05:2E:9F:47:52:77:65:A8:3B:B7:EE:99:72:59:A4
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:32:51:e4:af:c1:b3:eb:c1:4f:d9:1a:fd:11:c3:71:f9:
f5:b3:47:31:8e:a6:5c:ea:de:69:d7:df:19:c6:1f:65:3c:fa:
69:cb:73:61:c0:b9:c9:73:ba:c0:8d:9d:0c:ab:14:13:9b:59:
0b:88:50:c3:e8:70:b3:34:f6:01:ad:f2:9b:92:ba:cc:3f:9c:
56:9a:ab:01:8a:d2:01:c7:3c:6e:dd:53:39:c0:28:15:dc:ff:
0c:df:ac:b8:d2:4e:2f:78:62:10:ab:33:9e:1a:4b:94:6c:f2:
23:b0:2d:73:93:86:e2:3f:ef:99:bc:65:21:c1:a4:73:65:c3:
dd:ce:62:58:7a:88:6f:bf:f0:96:6b:d9:fa:df:c5:8f:4f:d0:
f4:50:57:e7:16:68:80:c8:56:96:20:a4:08:c1:52:c1:02:fd:
fb:ac:78:fc:c0:86:df:39:59:37:94:54:6f:b9:72:fa:52:75:
43:a6:fe:fa:86:90:47:ef:1b:4e:5b:38:8c:6c:99:e4:d6:81:
c7:b0:87:5c:03:72:72:9f:62:e5:51:92:e6:4f:d0:ca:a2:2d:
60:bd:18:1c:f0:be:af:2d:9c:68:09:46:e8:d9:e8:a4:61:28:
69:16:4e:55:f3:93:54:6f:64:42:df:29:1c:84:e0:f3:f8:c5:
a2:88:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:16 2025 by rpki-client