
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: LOuONWFZCN1MyywrFHu4S3XBAU7jhLaricyi9z6/vuk=
Subject key identifier: BD:4E:DA:90:E4:E9:7B:10:6D:FA:22:44:8C:E6:00:07:C0:11:7D:3B
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0199FC590849004C527E8FD00B95EA6D7DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: XQkmgnTLZ4rz9/yRen67JkNVOUW4IK/op0412Vih4ow=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:08:49:00:4c:52:7e:8f:d0:0b:95:ea:6d:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=bd4eda90e4e97b106dfa22448ce60007c0117d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:45:f3:f3:21:10:d5:ce:62:2d:65:92:81:
54:81:24:e3:c0:f3:26:42:ff:7a:ed:88:77:d6:fb:
d0:a7:b3:cc:61:e2:c7:c7:2d:d2:09:af:25:7c:4d:
3b:fc:e3:f2:2c:25:cd:f5:4c:e8:f4:48:1f:51:6e:
f1:ac:c5:a1:22:86:92:07:15:14:5a:9a:c2:49:ff:
9f:72:87:db:ea:fd:3a:c3:cd:2c:94:0c:b8:51:d5:
94:3d:c1:f7:0e:a9:7f:5c:5f:a1:08:7a:0d:73:2f:
e0:27:de:72:49:06:6c:e9:b6:0b:a8:bf:5d:94:fa:
26:d9:65:71:46:a4:4a:52:71:13:ac:ed:e4:67:60:
4b:76:5f:8d:e3:54:ff:08:49:37:36:1f:7c:0f:23:
88:e5:23:0a:2d:8a:4a:4c:f3:92:a8:bc:8e:03:c5:
83:ff:bf:5a:0d:82:00:95:85:0c:cd:12:a4:87:f0:
32:7c:1e:ed:8c:10:a6:fb:a1:8e:8e:2b:54:b6:9f:
bb:00:b0:0a:f1:fb:23:1b:64:ca:5d:c9:e8:a3:0d:
c5:09:77:0d:a8:11:8e:b6:c4:ab:01:0b:75:70:ac:
0d:fd:0f:b0:7e:a2:7f:e1:6c:f6:35:1e:8a:77:79:
bc:30:1a:30:5e:dd:f5:3a:f0:93:20:33:3c:3a:36:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:DA:90:E4:E9:7B:10:6D:FA:22:44:8C:E6:00:07:C0:11:7D:3B
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:e7:0f:76:1f:f3:a1:28:5a:72:40:b1:17:33:6f:af:68:
d3:ed:1e:d4:dd:b8:cf:e7:04:47:2c:7d:b9:c2:1e:a0:b5:b6:
f7:00:70:85:f2:4f:a2:c8:b7:39:4d:52:b9:45:79:f3:57:21:
9b:2f:ff:08:3b:84:b9:60:cc:54:3a:36:4f:8b:5f:09:a4:3f:
4f:c0:93:2d:84:7c:22:bd:9f:be:1b:70:2d:12:24:40:00:44:
9d:f3:f3:93:ef:93:54:4d:6a:9f:23:35:c1:b2:8f:0f:f1:9d:
86:5d:f6:13:7d:14:b5:6a:2a:96:45:80:38:a2:eb:fc:46:1c:
d2:a5:f4:78:d4:b3:1b:e2:3b:88:82:d1:f4:26:a9:46:9e:cc:
fc:48:63:89:29:57:62:63:2a:bf:56:4c:b5:b8:66:df:28:07:
cc:b5:31:46:fa:b1:57:9c:b4:42:4e:56:e5:9c:93:20:4d:e4:
ec:85:b1:75:58:3a:85:0f:a5:04:c6:66:4e:c6:d7:4e:d7:32:
61:25:98:2a:fa:56:0f:51:57:a3:bd:c9:bf:42:80:18:37:19:
e2:ac:ac:b5:80:b4:0f:1c:4f:89:5d:aa:fa:4c:fd:94:50:55:
cb:9c:33:4b:06:aa:ce:59:bd:45:34:4c:f5:7c:28:43:66:e8:
7b:e4:16:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:12 2025 by rpki-client