Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: EjpDxY6ERiXsAFuEVGU5MOVZv1zqjlgDgyk5k1KDnF0=
Subject key identifier: F7:49:3F:1A:4B:6B:4A:29:DA:46:1C:82:50:48:FB:0E:2C:98:E5:D6
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019A02C767BBCB7648A2268BB98732622506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0516
Signing time: Mon 20 Oct 2025 18:00:13 +0000
Manifest this update: Mon 20 Oct 2025 18:00:13 +0000
Manifest next update: Tue 21 Oct 2025 18:00:13 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: f4uDNL7QOscjvKhdkQgYX/AJytSrUF7kfiZhlruKB9g=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:67:bb:cb:76:48:a2:26:8b:b9:87:32:62:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Oct 20 18:00:13 2025 GMT
Not After : Oct 21 18:00:13 2025 GMT
Subject: CN=f7493f1a4b6b4a29da461c825048fb0e2c98e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:9c:a7:09:ce:e0:0e:26:74:b5:25:14:63:
0a:c9:12:bd:63:b9:0c:83:cf:7e:64:93:e4:02:90:
b1:af:d0:53:48:eb:87:02:59:05:50:6f:f0:75:a9:
1c:75:c6:16:86:b9:39:b4:21:64:32:f4:44:ba:0d:
2b:49:48:c9:ec:82:c5:90:2d:6b:ff:55:02:cd:24:
38:1d:5c:ad:5b:72:36:e5:18:47:a0:b9:76:b0:2e:
ab:07:d6:37:b1:ce:f0:46:aa:ad:a2:06:d5:69:15:
a8:0a:8e:1f:18:9b:a5:17:4c:f0:db:db:91:9a:21:
c8:e0:f9:0f:c4:0e:c7:75:b9:63:60:4a:cd:1f:cb:
75:fb:70:57:6f:58:43:63:cd:57:2e:5a:eb:00:c2:
05:2e:28:dc:23:55:bb:44:ee:b8:b6:41:42:de:7c:
70:68:d4:2e:7f:20:28:e5:22:9d:0a:e9:b3:f9:6d:
4e:9e:7c:af:08:8f:77:e9:a3:bc:e0:44:ed:57:60:
93:5e:3e:86:c8:74:57:b6:82:43:86:fd:19:6e:02:
3f:b1:93:e7:72:70:3b:b3:09:e7:2a:23:66:b5:17:
58:ec:49:17:5a:bb:e9:30:f6:54:8b:70:9a:b3:0c:
ce:0d:b1:76:8f:4c:7b:19:63:ae:e4:a3:7e:40:b7:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:49:3F:1A:4B:6B:4A:29:DA:46:1C:82:50:48:FB:0E:2C:98:E5:D6
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ca:3e:5c:33:b0:f5:76:0e:b1:3d:5a:c4:fc:c6:85:27:cd:
15:7a:30:01:95:37:06:6d:e8:69:c9:66:88:a7:e5:15:6a:57:
56:7b:b5:2a:3a:8c:31:8f:ea:e5:0f:fb:e7:9c:e6:f4:54:5e:
ee:7f:59:da:63:ec:77:c1:69:b1:f0:92:5f:b3:55:02:48:93:
68:aa:19:6f:4e:8f:82:f9:33:4c:41:6b:23:fa:cd:64:9c:d2:
fd:6c:af:2e:b7:6e:e9:ec:7a:d6:19:a2:c4:f3:51:34:52:f3:
b7:94:79:11:b0:80:1e:0c:07:ce:7e:64:e7:81:cc:33:01:71:
9e:c4:fb:99:91:21:9b:fc:0e:83:a1:d5:5d:41:3c:17:46:a6:
91:b2:3d:98:22:07:24:08:2c:be:47:da:ac:84:57:5c:88:6c:
9b:15:79:2b:18:93:82:b7:e2:27:99:34:e1:2c:67:9c:a9:85:
5b:8a:40:cb:40:b0:bc:35:26:20:ee:ac:ea:12:1f:18:55:9c:
36:04:36:b1:1e:52:f4:f1:59:5c:b5:23:88:8b:cf:36:52:12:
03:69:be:f7:5e:96:58:5e:41:82:2d:9e:77:9a:81:6e:6c:71:
a3:6b:df:fe:1b:6b:ad:8c:78:2e:d0:1e:7b:a9:0e:51:60:b7:
8c:fe:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:58:27 2025 by rpki-client