Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: x/6XAcrArhgs0Kez06fWB12Jft+V7eNWw+S+TpCs+3g=
Subject key identifier: 5B:76:8F:8F:21:AD:85:E3:BE:15:92:E6:34:3C:18:8D:81:C7:C6:B7
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0199FE101B46A0F59FA3E68ECECDEB9A2DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: 72x6yKkJ9M5U3lIREBQZN6IeHsvBEfeipYTuH9Us2PM=)
2: k5WIi1Ejnq2UPqn3UpkS8V7jf1M.roa (hash: 0oCwakpSZkb6NAb4lGAZ4tdDGnYcuoaTcDYTLBa8fHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1b:46:a0:f5:9f:a3:e6:8e:ce:cd:eb:9a:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=5b768f8f21ad85e3be1592e6343c188d81c7c6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:9b:08:90:68:ba:93:af:03:45:c5:77:3c:
dd:93:62:12:44:6e:77:35:22:89:67:b2:48:34:c0:
fc:9b:94:02:af:78:91:0c:46:a3:3d:df:29:d3:de:
01:40:1d:5e:20:c0:a0:83:37:06:48:63:18:83:e7:
b9:d9:c7:d7:80:46:b2:2e:16:ac:a4:ea:f4:3f:1e:
fc:21:e0:ca:e5:73:b5:a1:80:b7:b8:64:99:df:67:
12:59:82:a7:bd:bd:fc:22:66:99:29:fe:d5:a9:10:
66:ca:2c:03:0b:1b:7f:02:57:49:98:ad:55:aa:76:
06:3f:54:ae:31:89:c9:21:a2:8e:40:4a:40:19:e7:
4d:f0:4c:06:be:9a:1d:f8:31:03:f1:b0:7c:11:8a:
de:ba:2f:81:f3:a6:e7:52:54:a0:5b:9f:34:ae:3d:
16:c5:07:e4:77:5f:4e:e8:a2:c3:fc:02:54:18:28:
b5:02:8e:13:1a:67:00:6d:a3:db:95:2c:2a:ce:d9:
64:d6:11:76:fc:0c:81:c8:05:79:32:bf:99:d0:14:
a5:d3:3a:e2:23:6d:4c:06:64:85:b5:fd:3f:65:3e:
8a:fc:4a:f4:83:09:f2:43:7b:fb:2a:a4:0e:95:45:
f2:cf:0f:e3:79:cc:91:93:a1:57:f4:37:d2:50:4c:
0c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:8F:8F:21:AD:85:E3:BE:15:92:E6:34:3C:18:8D:81:C7:C6:B7
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:b7:f0:48:b1:f8:ff:91:4a:76:20:4d:9b:45:b4:a2:fc:
e4:22:2f:98:54:85:df:1c:7f:85:92:05:a0:5b:4b:35:ba:c9:
0e:a4:46:44:39:ba:08:39:88:e2:dc:4d:c8:4a:d5:25:6d:ab:
d6:08:3b:b2:04:cb:89:60:1f:29:b3:0a:0b:80:e1:5b:cd:5f:
63:4a:5c:63:5c:74:dd:47:b7:7a:f8:7b:77:c8:1d:82:0e:1d:
58:69:a7:92:ab:09:02:c1:6e:ba:d7:97:29:ee:f8:a9:a5:2b:
81:4c:d4:4c:24:e9:ae:cf:cc:d6:aa:c0:bb:9c:83:f3:99:a0:
e0:b1:1e:30:6f:7a:c2:ea:95:c5:43:79:29:c7:54:09:5f:64:
a1:9d:51:94:4a:81:d3:1a:3c:ba:3c:5b:44:ba:f8:7a:61:b6:
9f:49:b9:2c:dd:cd:65:0b:1b:fe:ed:64:c2:95:7a:50:a1:d1:
6a:48:d7:97:39:c3:41:14:e9:1b:fe:89:a0:fd:ec:96:23:ff:
26:33:cc:36:e1:1d:c2:11:a8:6e:09:e2:4f:c1:8e:94:db:9d:
5e:2f:f2:94:6c:4f:28:74:17:73:87:fb:c9:2b:95:59:14:7b:
db:c6:51:36:b6:79:2e:be:c7:8a:58:01:2e:db:a8:6d:86:c7:
6e:ea:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:29 2025 by rpki-client