Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: +optCNfHRWQBuWrvXVKQh7pxfhQFr3fAdRQIzGEpW+o=
Subject key identifier: 67:48:FE:37:2F:F0:F2:02:9E:34:24:C6:70:A7:2B:D4:6D:91:F4:AD
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 0199FA69FA5C4DB0278A19F018598BB217D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 03:01:13 +0000
Manifest this update: Sun 19 Oct 2025 03:01:13 +0000
Manifest next update: Mon 20 Oct 2025 03:01:13 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: hdyRvJV1+phY/fYs/btr2bxQ0Z9P9IAn8HuuqdRUIMM=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:fa:5c:4d:b0:27:8a:19:f0:18:59:8b:b2:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Oct 19 03:01:13 2025 GMT
Not After : Oct 20 03:01:13 2025 GMT
Subject: CN=6748fe372ff0f2029e3424c670a72bd46d91f4ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:46:7f:ef:2b:d8:6a:2e:77:e0:e1:d6:6e:
70:cb:8b:fe:5b:f6:40:33:1e:f6:59:b5:13:52:ca:
d6:de:c8:3d:70:9f:43:30:b6:5b:38:f1:7b:96:71:
19:9b:bf:c7:95:37:de:b4:bf:6a:a8:2f:09:f8:1f:
df:14:b6:be:8d:62:f3:f7:72:44:f4:dd:32:d7:2a:
73:f9:ca:0d:2e:18:cc:fc:e4:fc:50:a5:12:aa:b7:
ba:2a:3c:97:44:61:bd:d7:ee:d7:82:69:ec:76:5e:
22:d0:ec:cf:55:e1:bb:57:03:da:4a:de:a2:f0:55:
4a:9a:e9:46:96:cb:19:27:1d:c5:b3:a3:3b:c1:72:
d2:73:0d:3c:cd:82:bf:31:3a:cd:44:86:ee:e8:76:
ca:a1:80:87:51:0d:53:66:87:52:0d:2b:06:8c:6e:
c5:00:a9:a9:c2:78:96:7e:19:39:d8:3e:e9:b8:36:
10:c3:61:a1:89:d0:23:37:a5:fc:f5:32:da:35:c7:
a8:dd:36:d2:3c:37:21:ef:37:4c:bf:b2:26:d2:93:
16:bc:93:df:c4:0a:44:fd:ed:73:61:34:69:04:e2:
fd:df:c9:93:9b:7f:24:fc:e2:76:9e:da:0e:b2:d0:
f8:10:fa:ce:a6:eb:34:ec:ea:df:b3:d1:7c:41:00:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:48:FE:37:2F:F0:F2:02:9E:34:24:C6:70:A7:2B:D4:6D:91:F4:AD
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bb:2b:0d:a5:d6:1c:07:3d:47:17:32:b6:b2:f9:93:12:25:
ed:1a:68:bb:6a:98:4f:e3:70:fd:8f:0a:3c:d9:56:fd:bb:3f:
a6:fd:3c:50:74:da:85:cf:02:15:21:a6:36:00:22:71:32:a8:
e3:3e:5a:fa:ad:dd:61:ee:bc:af:28:cb:eb:1a:c7:88:63:97:
bf:0a:d8:47:a0:f8:15:6f:04:be:1b:ea:3b:01:d2:5a:74:7d:
88:ca:a9:d0:8c:29:7f:bd:51:c6:6c:a8:77:f2:b3:f4:ea:b6:
66:bd:55:a0:1b:84:d6:7e:f8:61:97:82:36:fa:5f:6b:f7:d1:
6d:fa:cb:8f:63:1e:d9:af:5b:7d:f4:54:88:99:44:6f:11:89:
e0:04:9b:ba:89:d9:b7:43:bf:1e:86:b0:60:d9:5f:a9:b6:fd:
a6:2e:1f:7c:39:90:e9:be:d5:c4:78:53:a2:63:7d:fb:c7:e2:
33:9f:c8:fe:0d:be:45:48:9d:bc:40:44:fb:40:25:01:d3:64:
e9:6d:74:15:d2:3d:b3:7f:52:a2:a9:a5:28:2f:03:eb:96:cc:
35:b0:b7:d3:d1:50:9a:63:06:27:d6:dc:02:17:cb:aa:46:b6:
18:ab:b3:a4:e2:56:a6:9f:11:d9:1d:70:09:62:02:51:68:31:
40:66:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:38 2025 by rpki-client