Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: XTvi0ZTXW1pekZFhoiODxerxrPYWClGhyQ9+By6icME=
Subject key identifier: A9:F9:56:F3:D9:9F:07:25:46:8E:0B:CC:E2:F4:C1:18:9B:A4:E1:45
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 0199FA6A5AA203441447AEB09418E7246110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 03:01:37 +0000
Manifest this update: Sun 19 Oct 2025 03:01:37 +0000
Manifest next update: Mon 20 Oct 2025 03:01:37 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: CMsBLMJx/LKVQ4EUNwhTsnvGfi6wG188JvQtDWiyIKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:5a:a2:03:44:14:47:ae:b0:94:18:e7:24:61:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Oct 19 03:01:37 2025 GMT
Not After : Oct 20 03:01:37 2025 GMT
Subject: CN=a9f956f3d99f0725468e0bcce2f4c1189ba4e145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:f0:da:2a:5d:f0:fc:b1:1a:ae:1c:2a:30:
f6:a6:e4:e8:dd:38:ce:fc:64:d3:5a:0f:c1:f5:40:
f8:97:1c:7a:4b:35:c8:cd:d5:80:2e:66:39:60:72:
3c:66:80:a8:bb:9f:df:3d:b1:96:8a:ae:9e:a9:96:
ca:3f:4d:e6:53:93:21:b5:f8:c9:5d:08:29:e9:99:
00:39:ec:61:24:fa:8d:e3:77:7a:42:31:2b:86:02:
77:6a:fc:c2:9d:f2:a8:a7:ad:09:f0:6f:10:41:3f:
b4:a2:6e:64:f5:cd:f1:2f:4a:57:d2:9f:47:1c:28:
1c:7b:a9:2c:00:ce:8e:1e:b5:33:51:41:88:3f:e8:
8c:ae:5d:8c:11:32:b2:48:c7:66:e9:2e:16:bc:33:
16:0a:bc:85:a1:7e:0f:74:a9:bb:f8:26:d3:19:72:
90:7f:cc:82:52:55:45:0a:24:bf:80:14:fa:fb:3e:
94:75:13:91:79:4a:8c:4d:0a:ce:f1:8d:2c:79:8a:
7a:36:2b:62:5c:4c:8e:1e:f4:e0:2b:21:47:5b:20:
9a:ee:90:99:c5:9f:91:3e:98:e8:ac:bb:99:d5:c9:
fc:51:a4:13:e8:ee:cf:59:93:80:7b:84:fd:5f:f4:
96:83:58:a2:a1:01:1c:e2:b4:48:89:24:01:aa:83:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:56:F3:D9:9F:07:25:46:8E:0B:CC:E2:F4:C1:18:9B:A4:E1:45
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f0:67:ed:15:c4:89:bc:8c:7e:09:70:74:a9:e1:cb:d6:f4:
db:87:9b:9d:49:f9:0f:5c:14:6d:d9:bd:2d:65:3b:8e:f2:95:
eb:2d:f2:1f:fa:2f:0d:67:f7:b5:07:13:52:09:94:02:9c:65:
fa:c2:4b:53:15:3b:4c:f0:05:ac:d3:6e:04:d8:5d:99:70:99:
7d:42:de:69:e9:e0:6e:50:9c:cf:d7:56:88:8a:02:9f:cb:ee:
c0:4a:30:bf:08:f8:0f:db:4e:78:bb:b6:78:dd:cf:7c:ad:6a:
f4:a7:5d:a7:28:01:dd:31:9f:dc:60:0d:dd:d2:c7:94:4c:5c:
00:e0:c4:df:9c:95:89:4a:55:f7:d6:c0:4d:67:fa:0f:8a:6e:
5f:28:ad:4c:53:11:66:2f:72:b3:96:18:6e:3c:03:98:32:6d:
4a:d7:32:67:bf:a1:e9:17:63:85:77:e5:ff:70:35:73:d9:ae:
39:7d:5a:18:88:23:2e:95:56:ab:ba:12:96:e2:e5:a4:7b:69:
2d:a4:f9:f9:f8:d0:2d:51:a3:56:b3:f2:15:2c:15:4e:22:ad:
a9:28:c5:89:6c:31:fc:26:12:4a:e2:7f:4f:e2:e5:bf:26:d5:
32:79:7f:35:2d:d3:f6:dd:f9:41:5e:e9:de:09:73:e5:4b:d6:
c0:9d:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:46 2025 by rpki-client