
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File: _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier: m5lLKseC7SdeFnnbWQ0yPXJlp7sxa4QSz5T4nvmI6IE=
Subject key identifier: D6:7D:9B:E8:49:5F:15:E4:81:75:62:64:D9:04:40:DD:F7:2B:2F:63
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 0199FB0EB99ADE08DD1D24B1B5DFC5277DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number: 1612
Signing time: Sun 19 Oct 2025 06:01:10 +0000
Manifest this update: Sun 19 Oct 2025 06:01:10 +0000
Manifest next update: Mon 20 Oct 2025 06:01:10 +0000
Files and hashes: 1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: bENRNQie8TWDWYRSeE88ifh4JhfsaL77LAuSquDkOJM=)
4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:b9:9a:de:08:dd:1d:24:b1:b5:df:c5:27:7d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Oct 19 06:01:10 2025 GMT
Not After : Oct 20 06:01:10 2025 GMT
Subject: CN=d67d9be8495f15e481756264d90440ddf72b2f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:25:f3:50:4a:ad:91:5b:78:0c:b2:2e:2c:
bc:76:f3:a7:a3:f5:73:7d:74:42:b1:05:70:ec:32:
17:14:60:c6:eb:d8:4c:96:c8:c5:49:8d:dd:b7:80:
63:76:3f:40:92:47:82:10:e3:6e:02:42:79:70:57:
ac:21:27:12:92:33:ab:25:16:93:eb:f8:88:09:40:
a0:05:91:a2:4f:b4:4b:77:65:ef:eb:28:01:81:04:
f7:71:41:3e:2f:f7:5c:84:bc:14:42:0e:77:20:fa:
19:9c:8b:4c:c6:e1:b0:46:7c:0e:46:bd:c8:12:d9:
02:d7:7c:68:a4:d6:00:0e:fa:64:89:00:22:3e:20:
d7:33:f9:26:29:fc:a5:2b:34:ee:7b:73:66:c1:b7:
90:7e:10:07:29:40:e6:9e:da:18:fa:d7:df:70:bc:
23:9c:40:ae:eb:c9:16:e0:af:a1:9d:c6:0b:92:16:
70:d2:df:2c:06:d2:de:b9:9e:02:e1:01:d0:9e:a0:
91:74:1d:1a:8e:34:bc:7d:68:35:d2:f8:a3:80:63:
1a:4f:82:42:ec:18:23:b9:e3:8f:0d:3f:fc:24:9d:
bb:04:cc:02:58:0a:55:e6:6a:e6:33:ec:df:39:a9:
5d:8e:45:44:c1:30:28:e3:3d:1f:43:e5:49:86:2a:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7D:9B:E8:49:5F:15:E4:81:75:62:64:D9:04:40:DD:F7:2B:2F:63
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5e:20:e0:d0:c3:55:00:ca:2a:e0:5a:7b:ec:51:d3:62:f8:
79:0e:50:e2:0a:85:c4:a3:f1:b6:f6:29:d1:68:86:b7:b9:d1:
de:30:4a:f0:d5:8a:50:63:ef:e6:14:a2:cf:00:61:61:5a:1c:
0b:cf:97:ce:85:b4:e2:6d:03:57:e5:d3:13:b4:a0:10:5e:67:
31:38:8e:49:e5:84:f5:8e:7b:4d:9f:5c:83:1f:f5:c4:ea:32:
1a:21:68:a5:74:80:78:98:0b:74:2f:67:c4:70:c7:5b:ab:39:
3e:83:8f:c9:42:d8:7a:33:92:0f:f6:c7:1e:c4:a1:d7:4f:38:
9e:62:08:02:ed:c8:fd:b9:f9:33:ca:fd:54:f5:76:6c:28:a8:
96:5d:7e:a4:ef:8b:96:f5:ba:8a:80:c9:e2:d1:81:2a:3d:13:
f5:d2:e2:c1:33:58:da:e9:f3:ea:19:fa:ae:87:d0:3f:89:c0:
fc:79:9b:a9:e9:e1:e6:26:03:ff:08:f4:09:67:56:e8:c0:80:
5f:4f:27:48:c8:6b:a7:16:d5:05:3e:83:bb:49:5d:2f:01:6c:
0a:38:7a:df:e0:d6:3d:57:6a:60:da:22:cf:ae:31:b4:5c:4b:
80:6b:bb:21:04:85:7c:e9:90:57:a0:ed:ec:c8:4e:6e:91:1a:
25:3b:bf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:14 2025 by rpki-client