Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File: 1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier: n7LaNsdd4PVq5GnfnRLJ6IB7x2AAKmmto+Ok35nfcIE=
Subject key identifier: BA:82:DF:AE:0F:1E:C7:23:03:2A:2F:E7:BC:FA:A9:F3:90:46:DE:64
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 0199FDA1CCC218D2D8C6657A1B08C6FE230E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number: 11DE
Signing time: Sun 19 Oct 2025 18:01:03 +0000
Manifest this update: Sun 19 Oct 2025 18:01:03 +0000
Manifest next update: Mon 20 Oct 2025 18:01:03 +0000
Files and hashes: 1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: bPse6Hc+AhoKcNyEIsalmw/t9J4UqXE0ep7mGiy3qv8=)
2: 52omqQEuqym82ipU0hYmrHOmv0Q.roa (hash: XCFx/COmHu6CZIYbc3sid+Zpv5Ax1Cs1bDV/hO9qIaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:cc:c2:18:d2:d8:c6:65:7a:1b:08:c6:fe:23:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Oct 19 18:01:03 2025 GMT
Not After : Oct 20 18:01:03 2025 GMT
Subject: CN=ba82dfae0f1ec723032a2fe7bcfaa9f39046de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:97:04:13:2b:fe:76:ae:2f:fe:42:17:77:
ed:33:ec:16:86:66:59:3f:72:ee:9c:03:b3:49:2b:
66:8c:76:85:3b:18:65:a8:b4:0d:1a:83:52:9f:d7:
65:40:38:8a:78:9e:85:36:bb:38:97:cb:0c:13:39:
0f:ad:9d:f1:9b:17:86:07:6c:4d:62:7a:d4:56:eb:
a6:22:40:60:3e:bb:d0:4f:73:49:31:43:b4:96:66:
b7:d7:48:e9:ee:70:85:eb:4f:c0:4c:fd:ed:39:12:
f4:18:10:02:5e:d4:dc:cd:2a:bc:f2:b6:0f:66:03:
7e:97:95:39:84:6f:6d:5d:f6:c2:e7:88:d6:73:3d:
5a:d3:22:3f:48:65:9f:9d:12:b5:3d:06:b6:f7:32:
b8:89:03:4a:14:6a:8a:53:29:60:de:b1:9c:e2:32:
4a:98:64:22:55:57:20:af:d9:25:83:b2:b2:a7:66:
3e:d0:e1:8b:f4:c8:68:5b:75:9b:9a:79:6d:4f:ee:
51:5a:00:3d:3c:e5:9b:78:f0:56:5c:d3:08:9c:f5:
4c:6e:39:6f:54:c1:45:cb:9d:9c:cb:e2:43:5f:e9:
04:d6:01:21:04:43:33:68:d3:c2:b8:67:cc:b9:80:
ef:a2:23:f0:ff:37:8b:94:e9:09:b5:44:d7:23:4d:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:DF:AE:0F:1E:C7:23:03:2A:2F:E7:BC:FA:A9:F3:90:46:DE:64
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:d0:8d:18:e5:7a:a6:30:07:a9:45:6c:7d:ea:42:ae:16:
e5:29:61:06:57:6e:ba:80:97:0d:03:9e:64:a8:fb:00:ff:3d:
91:5c:66:d1:33:02:d4:04:08:60:3e:00:60:87:b7:62:42:4e:
de:e1:e1:73:cb:4e:fa:52:58:b1:36:df:00:b8:96:bf:68:70:
d9:7c:38:c9:c6:11:ce:68:4a:82:3a:07:66:35:b2:9b:72:1c:
0e:db:b0:86:fa:63:07:e9:9b:a1:c4:25:3a:fc:36:f2:7a:da:
db:06:5d:99:2f:38:cd:ea:20:a0:3b:ce:28:4d:e1:cc:d1:54:
6c:d5:b8:dc:f6:eb:49:44:19:d6:57:ec:03:21:fa:57:a3:e4:
3c:e2:1e:3a:f4:27:45:2e:29:e2:67:57:05:7b:5c:a4:b3:9f:
1a:0d:43:94:fc:28:53:27:a0:19:47:af:37:55:93:ab:73:3a:
0b:d9:4f:ec:0a:6d:94:64:4c:0c:03:de:0b:44:9a:d2:37:31:
dd:12:f3:0b:49:e9:eb:bf:05:f7:5b:1f:8b:e6:16:b5:b9:06:
9c:2c:1d:37:08:00:aa:d1:c0:0b:b2:52:e7:a4:f0:bd:34:c4:
9f:4f:4d:e8:34:f5:ac:62:0e:8e:12:dd:58:43:25:7a:bf:59:
e9:a8:86:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:02 2025 by rpki-client