
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: 4Vba4tqbsAZ1aWF2NUA/VomIxSEKB2+CyIyJzC9DljU=
Subject key identifier: 92:59:1A:68:DF:40:A5:54:17:BF:B6:90:AC:6B:E3:6F:69:F8:A9:90
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 0199FCC6664F0A008A2DD0A179F4B53C3025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: 8tEdKLrRNxZKQ0yIwNvhBFyWY+qdQmJszYeHix+ugiE=)
4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:66:4f:0a:00:8a:2d:d0:a1:79:f4:b5:3c:30:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=92591a68df40a55417bfb690ac6be36f69f8a990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:0a:20:48:fc:e2:4c:c7:72:1d:8f:ed:09:
3d:66:09:0f:0d:5a:88:d2:36:b9:c5:8e:59:12:5a:
5e:2f:74:80:e7:a5:a9:42:e8:74:0a:b9:a2:1c:39:
ac:88:9c:10:36:4b:79:0d:bd:9d:4e:f9:f2:78:27:
f8:11:69:ff:8f:56:38:a6:57:5c:86:c9:c2:ad:19:
be:f8:a0:0b:86:fb:46:16:dc:f9:7b:79:d6:f5:c5:
58:ee:b4:25:99:30:31:cc:be:0f:71:7e:e7:27:ae:
c6:7e:eb:9f:43:d7:61:1f:9a:36:e0:86:0c:26:7f:
59:2b:c9:6d:2a:2f:99:9e:29:6f:f1:ee:49:8e:bd:
73:a8:6f:f6:10:25:7f:91:60:35:c1:bf:b3:a1:3e:
46:0b:62:6e:f1:0d:4a:80:9e:36:54:91:87:b1:62:
5f:4f:1e:f6:83:79:4d:6b:51:ea:6a:c3:3d:04:dc:
f4:79:4e:bd:62:dd:43:6d:da:56:34:d8:3d:46:a0:
3d:57:d7:19:4a:78:d5:02:0f:c3:08:d0:23:9d:0a:
47:da:f6:6e:3c:55:39:17:6f:b4:3d:c7:e3:1a:4a:
8f:cb:31:83:ea:29:c9:5d:4f:24:63:20:d4:1f:db:
98:ac:50:26:36:16:8b:d2:43:a8:2e:0f:f5:87:6d:
1e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:1A:68:DF:40:A5:54:17:BF:B6:90:AC:6B:E3:6F:69:F8:A9:90
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bb:a5:aa:9a:84:00:d2:33:80:2f:46:c2:b5:65:16:d9:7b:
2a:b8:1d:64:5b:94:85:2a:1e:f2:dc:7e:4a:60:67:01:ac:5a:
99:de:bc:ab:12:ae:af:26:a0:12:b6:6d:0c:a1:98:02:90:0c:
ef:09:8f:21:d1:56:ae:c4:bf:34:6e:07:c3:2d:f4:0d:da:ff:
fe:f4:e9:b1:99:26:08:d4:9a:4a:2b:99:60:62:27:f7:46:70:
e0:cd:b7:5c:47:2a:38:98:82:90:e7:c0:e7:f3:21:0d:a6:b4:
d9:d7:80:43:43:f3:dc:ae:c4:97:3b:f2:7a:c1:b9:d4:66:fb:
80:64:25:a0:12:9c:d2:45:6a:3c:07:6c:6d:f0:d6:c0:2b:ba:
c8:38:dc:df:82:ab:e0:ba:eb:f1:cc:ac:cd:6a:40:7e:bc:05:
40:dd:9d:f0:97:46:e4:b6:c4:5a:16:22:29:28:b9:30:a1:be:
1b:9d:db:bf:a9:aa:36:8a:09:31:9c:69:4b:0b:16:2d:a8:7f:
e2:4b:9e:cd:ad:ef:0b:1f:4c:f3:de:29:bc:40:78:ad:14:0e:
fb:76:52:37:08:11:18:ad:b7:12:b5:88:fd:55:13:99:05:3f:
3c:52:b0:25:08:4c:c8:d9:0a:88:cd:7d:ff:ce:49:77:0d:2d:
cc:9c:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:29 2025 by rpki-client