Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: qdfU1wYHqz7XqOk6S47VbUXgKlT88XvifgBvmzI22sg=
Subject key identifier: F4:99:82:ED:D5:E9:F7:B7:41:6C:CB:62:75:FC:F2:62:DF:5E:E3:8D
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 0199FDD979848B4FA3F06221EA5AD4E54F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:52 +0000
Manifest this update: Sun 19 Oct 2025 19:01:52 +0000
Manifest next update: Mon 20 Oct 2025 19:01:52 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: cezIvRVkzwOwSVJhifIp9JEMusgX1rZzRB6k7gxGWF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:79:84:8b:4f:a3:f0:62:21:ea:5a:d4:e5:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: Oct 19 19:01:52 2025 GMT
Not After : Oct 20 19:01:52 2025 GMT
Subject: CN=f49982edd5e9f7b7416ccb6275fcf262df5ee38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:89:e8:6f:ca:33:ac:7b:21:69:7c:f7:cd:
57:91:fb:74:24:c9:35:62:a4:07:6c:a1:36:3b:14:
ab:38:0e:d1:34:28:17:49:7d:be:12:ff:76:33:82:
e5:f0:1a:2a:ac:ae:92:05:2b:11:4f:aa:32:29:71:
c0:50:88:db:43:d0:9b:e6:06:b9:79:3c:01:12:60:
f5:76:e3:8f:a5:ee:16:ca:a7:19:d9:fd:ed:04:48:
a8:29:b5:30:98:b4:8d:e3:ee:d9:15:d5:33:05:4a:
44:87:18:4d:c0:c9:f1:de:f6:c4:09:4d:06:d9:22:
54:2e:a9:ba:5d:dc:f1:74:c4:e4:16:a3:2c:6c:21:
b8:5a:dc:92:c3:c2:c4:43:ad:54:ce:7d:fb:a2:6c:
26:ef:10:06:cf:03:56:7c:f6:4a:cb:64:d0:89:76:
8a:85:d3:58:af:bf:ba:06:2c:49:d7:2f:19:02:35:
32:bf:3a:0f:a9:ef:e0:57:cc:42:7c:a7:3b:3c:d1:
6a:da:92:fa:f6:81:06:18:97:af:72:13:ca:70:2a:
a2:3d:51:81:e5:f3:8e:dd:82:37:63:ec:73:66:53:
e2:07:de:7f:71:d5:5f:f8:8b:71:9c:d0:7c:c8:5d:
ab:0d:76:3c:c7:54:bd:81:98:28:ff:5a:1e:a7:7c:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:82:ED:D5:E9:F7:B7:41:6C:CB:62:75:FC:F2:62:DF:5E:E3:8D
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b5:cf:02:f6:e4:2e:f5:5c:02:18:7a:45:d5:06:9f:bc:75:
4c:da:6c:4c:d0:c3:a4:c3:db:6e:a3:c3:99:87:3e:ce:34:82:
3d:5b:f0:8d:32:28:67:bd:ca:76:93:56:14:39:09:e6:17:6d:
0a:d3:15:6a:9d:ea:94:78:3b:38:ff:26:ee:44:60:7b:0c:2f:
cd:36:9d:03:4e:d4:d7:75:a9:40:25:5a:87:df:5b:c2:61:ae:
2e:fa:8b:c6:e2:ce:46:9c:cf:b9:ef:9d:bc:69:10:40:d8:c4:
8e:20:78:b7:6b:54:c5:2b:4f:b3:dd:80:c0:98:d3:a7:8e:22:
bf:59:69:8f:d5:f5:10:87:f7:46:cd:77:5d:3d:3e:38:b8:f3:
82:ad:04:dc:24:02:ef:2d:02:77:b2:6d:20:62:4c:b6:4b:73:
40:67:cc:4c:d2:ee:86:e1:8d:48:55:8e:1e:1c:0a:11:b8:13:
7e:af:cc:a0:f4:26:57:04:2b:08:9e:32:94:8c:49:55:c4:f3:
9a:3d:28:ae:12:69:46:83:8e:cb:04:2c:f2:fe:6e:e1:5a:6f:
24:33:d6:61:36:39:5e:e7:9a:c6:43:62:d0:ad:16:6b:e5:5e:
b1:3b:fa:aa:dc:de:44:91:d3:b7:ea:be:61:ce:0c:cc:5e:ec:
1a:9e:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:57 2025 by rpki-client