Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: 0fpEeKx4s+1xTMgU6B3GB7TZqXy3AENy5SKFHGlfpkU=
Subject key identifier: 80:56:3C:3D:D1:06:CB:77:2B:DE:BA:3E:A5:C0:C4:60:69:EB:EA:31
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 0199FBEC42E91D3BF0B0BCDC66825E03CF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:03:08 +0000
Manifest this update: Sun 19 Oct 2025 10:03:08 +0000
Manifest next update: Mon 20 Oct 2025 10:03:08 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: Xkll/cCw1rc5kCUvY7pBQCiBKXz8EKRGxuVbwC2isgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:42:e9:1d:3b:f0:b0:bc:dc:66:82:5e:03:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Oct 19 10:03:08 2025 GMT
Not After : Oct 20 10:03:08 2025 GMT
Subject: CN=80563c3dd106cb772bdeba3ea5c0c46069ebea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:76:c1:f5:7d:11:e6:ed:e7:a9:98:c5:ba:e7:
aa:50:7a:86:0c:57:1a:f2:de:34:d2:f8:43:8e:5f:
26:ef:95:31:24:b7:2d:39:31:38:31:9f:ff:c1:cc:
fe:43:86:42:9e:cc:bf:c5:12:e6:ec:d1:44:44:55:
a7:67:fe:03:6c:ec:05:96:1c:4f:72:aa:7b:4e:9c:
78:7d:b6:5b:ac:0b:39:2f:f1:e4:89:69:74:ec:0b:
09:a9:37:77:eb:1b:1c:20:ff:d2:b8:e0:5d:66:25:
97:2b:2b:2b:6f:72:f7:52:bb:be:63:3b:e9:91:90:
ca:92:17:6e:de:c9:fb:c5:97:f4:47:a8:69:5b:90:
4b:63:35:85:ed:33:2d:18:ce:04:d3:0c:2b:ad:89:
47:88:7e:dd:01:81:f5:53:fc:5a:ac:1f:ac:27:55:
cc:d7:de:4c:96:06:b6:4b:38:79:5d:68:92:a2:fa:
9a:54:34:e0:04:de:e2:cd:b7:01:9a:a6:96:94:6c:
a0:52:02:e9:e2:3b:3d:27:29:72:96:a1:a8:3d:79:
82:72:8a:41:65:c7:25:24:1d:61:0f:88:59:dc:7a:
75:9c:82:f9:4d:63:67:b3:98:33:5e:e0:14:e5:6a:
2a:8d:e9:90:4e:0e:1a:ad:86:b8:c6:2f:e3:52:ce:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:56:3C:3D:D1:06:CB:77:2B:DE:BA:3E:A5:C0:C4:60:69:EB:EA:31
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:51:74:af:74:65:a4:10:6a:f2:4a:65:5e:38:59:28:0a:4b:
4a:48:63:88:d8:d8:e0:30:cb:13:6d:57:ba:e4:e4:90:99:25:
9a:2d:a3:6f:5c:6a:44:7e:c0:6f:5c:88:8d:8c:d2:e6:bf:80:
f3:a3:a4:c9:d7:a0:27:79:c5:ae:82:4e:4e:a6:38:9d:58:89:
af:cb:b9:23:e6:7e:49:3a:59:80:13:f7:41:1c:28:8f:d2:41:
00:8d:51:10:1c:d4:08:e4:d1:c2:84:3a:30:20:c6:66:a8:a9:
e6:77:70:0c:18:df:4c:4e:b4:d3:80:b4:8b:0a:11:61:4b:b6:
75:e1:b7:02:74:a7:ec:67:fb:20:03:a7:22:93:bf:0c:54:c0:
e0:5c:ae:6e:51:4c:09:ea:fe:10:cf:57:93:f9:67:bf:da:26:
e3:fd:93:97:a0:45:48:fc:61:44:7c:10:a8:99:0e:f2:00:92:
46:4e:bf:86:6b:5c:ec:fa:96:62:e0:95:5d:3a:37:4c:90:59:
99:a5:71:63:78:ca:bc:2a:f0:82:e1:10:22:31:4c:28:78:a7:
43:23:de:04:d9:9a:62:2f:c9:3d:00:2c:33:dd:ae:c7:4a:cc:
e2:98:77:b4:2f:e3:b8:be:12:f5:15:f3:03:04:d0:0c:5d:b3:
a4:53:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:43 2025 by rpki-client