Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File: _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier: YRX4lFzwvBtnq+SsuKhcB+i+mbLTplSg09hidkPULmA=
Subject key identifier: 3E:B5:29:39:49:E1:AA:49:0C:E5:D6:9F:15:ED:61:29:F8:38:94:E7
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer: /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial: 0199FCFD5A0981926ACB2D749B7C89722C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number: 1085
Signing time: Sun 19 Oct 2025 15:01:25 +0000
Manifest this update: Sun 19 Oct 2025 15:01:25 +0000
Manifest next update: Mon 20 Oct 2025 15:01:25 +0000
Files and hashes: 1: EpQcDDhQK8-WOhYfBO3A-z572b8.roa (hash: tX6xd7XfEe5I+QgttvkH+DOkKR0i0R1ahT4BEMwpPug=)
2: KV_nG_kmH633ZUe-9L97LnA29yw.roa (hash: sb05Z/GuWAjUIqo0R3Yca51uKGMc6MwqIkHeJF92vO8=)
3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: DDKIuCUbFdbmwn4a1+jd2LOQsgm9o3R6KNjQ5Yy5SNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5a:09:81:92:6a:cb:2d:74:9b:7c:89:72:2c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Validity
Not Before: Oct 19 15:01:25 2025 GMT
Not After : Oct 20 15:01:25 2025 GMT
Subject: CN=3eb5293949e1aa490ce5d69f15ed6129f83894e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:9c:79:38:51:ec:79:df:d4:bd:ec:72:af:
60:ea:c8:63:a3:fb:4e:d1:c9:04:4a:10:8c:6d:c1:
61:38:b5:f4:9f:75:cb:8f:38:d4:64:8d:02:67:97:
04:14:ed:80:a7:5c:12:b2:e7:df:f0:d5:6f:e4:6f:
b5:4f:76:ae:25:8c:73:92:ef:2c:99:bd:20:af:1a:
7e:93:e1:2f:e2:93:13:2a:d7:67:37:ca:3d:5b:16:
25:33:ee:6f:41:c1:24:5a:6e:17:9a:a6:f2:1b:e8:
44:8a:01:9a:2e:c5:b5:21:e7:be:14:fc:a1:a5:5e:
f5:c4:96:35:f8:1a:74:e8:8a:7e:ec:23:d0:c4:f6:
25:ea:a4:d5:35:71:c1:34:63:78:bd:53:17:ca:56:
73:70:5c:10:12:7f:9b:8e:3c:4b:96:6d:2e:32:81:
a7:05:cc:93:20:53:10:88:44:5c:d2:72:27:32:23:
8c:4a:29:55:b0:68:f3:7e:f0:68:b5:7a:9a:b9:a7:
42:3f:01:88:d5:5e:44:9d:91:67:b7:5a:92:18:90:
ac:43:b9:69:06:05:af:13:c0:d5:7e:9e:a9:9c:ac:
20:f5:d2:33:a3:9b:98:2a:f6:57:85:77:3f:58:f0:
60:81:e5:c0:0b:fd:07:6d:0c:6f:f7:86:74:03:41:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:29:39:49:E1:AA:49:0C:E5:D6:9F:15:ED:61:29:F8:38:94:E7
X509v3 Authority Key Identifier:
keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:45:43:d6:27:83:af:7a:02:62:22:76:50:3d:79:22:36:5d:
57:a3:ba:f3:55:6f:41:85:ae:71:85:dc:e3:b3:27:9a:d6:05:
ad:eb:fd:af:be:77:b4:3d:b3:15:3f:b2:32:4e:66:97:b3:47:
09:2b:b4:eb:31:0e:4f:ab:86:d6:fd:be:9a:35:89:3a:88:19:
53:98:7e:98:45:e3:b1:e2:70:da:61:e5:3f:ee:b6:67:0b:48:
07:22:e2:1b:98:e3:f4:db:ce:06:d6:f8:20:f9:12:ff:c9:c7:
c4:ef:57:ba:a2:d2:b3:18:08:f8:de:dd:26:81:0e:58:e0:57:
af:b8:fc:54:6f:4a:e3:b5:6c:8c:43:40:98:79:8f:a8:0a:a3:
21:4b:b6:b5:1f:24:3e:f7:74:8e:94:df:68:cb:76:19:9d:2a:
3e:d3:e7:bd:04:98:0d:87:49:88:f8:03:a6:51:6c:7d:ed:7c:
86:01:40:c5:e3:33:87:74:19:3c:7b:ba:cf:2f:17:ec:30:db:
61:b4:30:79:6f:51:78:7a:c3:4a:82:d3:20:0e:7a:ba:29:63:
7e:d1:08:82:ae:76:96:43:b4:59:0b:78:60:27:97:a1:32:11:
6c:21:1c:17:80:c2:21:67:f6:6a:eb:10:b3:ad:7f:29:38:38:
2d:88:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:47 2025 by rpki-client