Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: AUYiiIVSQKw7kUcXFJw2jcoUuD45r7oybNeHt4GnymA=
Subject key identifier: 27:19:47:F6:03:D8:AC:45:FB:FB:6E:0C:AB:0E:B6:E2:DB:92:A6:D6
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 0199FC2184BAFEE0D82FB0ED46A5F057F3FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: BBGpKUW+GQ6PTXRt2e2YwPmc8Otlm6Azh9BiDCsiKOY=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:84:ba:fe:e0:d8:2f:b0:ed:46:a5:f0:57:f3:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=271947f603d8ac45fbfb6e0cab0eb6e2db92a6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:2e:f2:bd:84:d2:26:ee:3e:db:ca:b6:cf:
a7:6d:3f:09:a2:a9:5f:e2:72:87:78:53:c9:49:0e:
82:03:b3:41:d8:ee:b0:05:47:99:a4:dc:d2:1a:f8:
4c:6e:bb:ae:fc:cc:26:3f:b6:73:19:5f:92:94:c6:
ba:f6:b9:32:7d:9c:8c:1a:5a:40:72:cb:03:e4:3a:
0e:32:b2:fe:d0:92:d9:67:31:0c:3b:5d:05:e6:45:
24:bf:6a:29:7d:3c:72:7b:23:28:b1:f9:f5:4a:e7:
7c:31:17:f2:0d:56:c6:95:89:37:6e:36:4a:12:e3:
71:0c:22:4e:f1:61:1b:c4:1d:1b:4f:08:34:1f:69:
79:78:f9:b2:10:f2:42:33:f7:29:dc:34:72:36:ee:
d0:c5:18:9b:16:08:dd:60:0d:ce:9f:36:76:1c:3c:
15:49:dc:f2:dd:be:28:8a:4e:2e:7d:67:93:c3:7f:
4a:e8:f1:5a:ab:58:ad:85:5f:cf:79:aa:63:8d:c0:
77:68:5c:9b:ec:12:33:e6:e7:81:4f:68:51:14:d4:
e5:47:a6:62:98:e7:e6:f9:2d:f6:90:53:81:51:66:
ed:c8:56:06:88:38:a0:c3:75:61:41:6c:27:ac:1c:
6f:bf:03:e1:e1:0b:4e:c9:83:aa:9e:34:52:46:23:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:19:47:F6:03:D8:AC:45:FB:FB:6E:0C:AB:0E:B6:E2:DB:92:A6:D6
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fc:d8:fd:b1:fc:20:f1:08:1a:42:8f:36:97:83:c4:b9:cf:
69:b1:3a:e4:51:ed:61:d3:fe:6d:7b:ce:e8:23:a3:66:a3:56:
d3:a7:f8:37:86:88:24:04:fe:d6:fa:85:a6:35:7a:d8:39:d6:
a5:f2:9d:3c:3a:3b:a3:cc:6a:4d:a6:95:10:2b:b7:bf:64:24:
06:23:e3:c2:01:b4:99:b7:97:b8:43:34:f7:9f:04:2e:40:9c:
44:24:28:e3:11:fa:59:48:47:b4:fb:c8:61:f2:87:e8:32:9f:
df:da:a9:f6:17:a2:7a:32:ce:e2:bb:30:91:05:29:ec:c7:f8:
17:b1:33:1a:ec:1d:59:a3:f6:23:69:8c:5b:f7:c1:09:54:5a:
f8:84:01:9e:b4:05:6b:e2:76:8d:bf:ed:42:49:7f:14:dd:02:
0c:d5:1a:99:7a:cd:5a:cc:89:5a:d0:11:81:d4:14:ec:02:ef:
c1:2d:81:7a:bf:78:72:21:f2:39:99:6b:6f:77:99:eb:70:13:
83:ad:06:0a:78:e8:38:04:fc:ba:de:ce:10:d0:01:97:b3:92:
c3:78:69:05:33:7f:7a:6b:d1:bf:38:76:ed:b9:db:ed:a7:35:
1e:e5:95:32:ec:10:f7:43:87:be:5f:06:28:3d:19:98:46:12:
64:2a:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:27 2025 by rpki-client