Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: WnQRyNQMMInA7aNkbr/FWjKcJ9iDBbDlnyU1FpxLhso=
Subject key identifier: 92:4F:F5:CC:B5:B6:82:CD:A4:B3:AB:5E:0B:E5:64:C3:49:B2:9C:15
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 0199FD34324498D652AD193924EBAF7751B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: PErpHrTUC+dI+d7wSxx730Bn0pyGp8MRBGdxxeXmU40=)
2: 9ljz8BH-r5M9E0E8QZVdMscfFcc.roa (hash: R05FnjufsdTaxBZfb6zSEUa9ud9KopjuHR8LRayH9Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:32:44:98:d6:52:ad:19:39:24:eb:af:77:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=924ff5ccb5b682cda4b3ab5e0be564c349b29c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:02:26:7f:c3:66:01:10:64:45:02:ef:81:
5b:dc:15:43:e8:95:42:ac:48:f8:e4:01:47:69:1c:
6a:e3:c4:1d:48:58:61:f4:0a:cc:11:b9:34:16:0f:
07:a5:2e:15:ac:05:ad:fb:f4:41:70:2c:61:82:aa:
b4:c0:c0:56:28:cc:16:ad:dc:40:4c:24:10:e9:33:
59:fa:84:5d:96:bc:15:b2:06:be:cf:c2:1d:8f:ea:
a8:d9:c6:90:65:41:bb:5d:29:af:8d:19:4e:1a:51:
59:23:96:52:8f:33:91:a0:1a:68:c3:c5:eb:da:e2:
c8:d1:91:19:ce:1d:a2:e9:65:0c:27:c3:76:07:68:
0d:45:42:78:b2:7e:68:c0:6c:e1:bc:bd:f7:d1:4f:
4d:05:ae:64:5e:6d:72:1a:62:7a:96:b4:d1:29:e7:
1f:9d:6d:55:e5:96:d7:ce:3b:49:29:59:b4:2c:53:
6d:61:60:cc:a1:15:51:5c:0a:7b:ad:29:93:13:59:
f8:d6:3e:b7:52:28:89:38:19:e5:ef:c9:57:ee:06:
0c:60:90:7d:d3:a5:e7:55:96:fe:8d:ca:d8:90:12:
de:ae:37:ed:41:49:79:bb:d8:2e:9b:87:61:f7:c2:
b4:a8:ef:0c:e0:1c:52:4e:92:e5:6d:29:3b:52:04:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:F5:CC:B5:B6:82:CD:A4:B3:AB:5E:0B:E5:64:C3:49:B2:9C:15
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:af:aa:d7:aa:99:b1:69:93:8c:f0:e3:27:bf:69:b1:6d:
bc:b3:33:f4:fb:4b:df:19:94:05:60:ce:ee:a4:95:91:a9:69:
f8:7e:8d:fa:e9:7c:85:ee:fb:a3:17:b0:11:9f:ef:77:5e:4d:
c2:f2:ac:ca:0c:a7:70:32:60:49:94:d7:6e:74:bf:a8:0d:52:
78:9e:11:19:1a:bc:63:94:45:f0:1e:49:21:9a:58:f3:7b:56:
90:2b:ab:50:d7:6b:69:f2:75:b3:e5:40:cb:68:7b:6d:db:8b:
9b:88:db:50:3e:72:d8:ef:b2:b8:26:3e:e2:0f:19:17:53:76:
cc:ed:65:b5:53:2a:fd:52:02:eb:b5:3e:b3:0f:95:2a:05:87:
c2:fd:b0:06:25:a5:1c:87:ca:12:1d:77:be:88:54:df:5e:f2:
e0:76:13:12:41:83:11:a7:d1:5f:91:b0:c5:60:64:c9:d3:21:
42:1e:98:8d:4a:0a:cf:2c:cf:20:41:e0:f2:7c:8a:12:d0:85:
67:e2:17:e8:99:74:64:ed:cf:fa:10:d7:b9:bd:01:ac:17:2f:
4a:47:86:17:15:ff:73:0b:e1:f9:a6:2f:e4:84:ef:89:11:cf:
1b:f3:c9:d6:bf:e8:95:5d:89:48:0a:0b:c4:2f:49:e7:30:d5:
d5:57:60:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:36 2025 by rpki-client