Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: PMC+BMPxd1RB4QyUb4QT/P5PdnQ2E4BTGGvAj1iBQHM=
Subject key identifier: 96:52:B4:67:91:55:81:23:F5:24:36:0C:51:17:1B:79:67:A9:B2:03
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 0199FD349E96E0E8E4140B062129338BCE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 14B1
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: OYlpzOMjBYhet1dTZTkuSyGtK+dQ7Bq0R5mqiWJltM8=)
2: AF4umlxpodxfUYcflJsK8xOOPvc.roa (hash: h6ZT1Xj2HoW6T1BM9+3KLrI7XGShfMvSe65xEZ1pN+8=)
3: eKdaY9u7yd9VS291GQM22qgfzCo.roa (hash: LpBEMBev2akTDLzB/P1Zql8JVSF96+zbvpBVIyg+mMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9e:96:e0:e8:e4:14:0b:06:21:29:33:8b:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=9652b46791558123f524360c51171b7967a9b203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:79:f2:f0:54:86:49:7e:29:17:8f:91:39:
96:8c:1b:65:9c:7e:c3:63:4e:1e:33:da:19:d0:69:
32:60:25:03:fa:86:cf:5c:6a:12:44:b2:2b:e7:6e:
96:95:c2:36:e7:03:5b:4b:46:e9:2d:a6:c2:09:68:
36:b2:c3:ea:11:7a:c6:a3:d6:e0:7e:fc:44:f7:09:
aa:19:8b:75:e1:09:b3:71:9d:4f:5c:7d:e2:45:21:
cc:89:4f:1a:54:a1:ee:eb:9c:86:86:ea:5a:87:82:
c9:0c:43:48:21:90:b8:ef:e5:3d:4a:44:52:5a:a6:
ec:db:91:9a:3e:78:8f:5d:48:e7:00:e3:63:cf:21:
ca:b1:bf:6b:3b:0f:d8:a0:7a:ba:0e:0b:e0:2f:5c:
c3:42:c8:37:e6:38:34:46:2f:b6:2a:ed:d5:4b:b2:
67:39:55:49:81:46:0c:8d:1a:e6:5a:8d:a6:64:fd:
78:ca:a7:51:62:b9:de:a9:80:57:9d:d6:a7:82:71:
0e:46:6c:35:23:e5:10:10:86:bb:7d:da:8b:c4:56:
aa:41:8c:24:2c:54:58:90:b1:a5:cd:a2:22:77:e8:
70:3d:3d:21:f7:1f:be:c4:56:af:8b:02:46:d3:03:
42:78:ee:ad:a1:f4:28:31:95:80:2a:db:a9:82:5a:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:52:B4:67:91:55:81:23:F5:24:36:0C:51:17:1B:79:67:A9:B2:03
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ae:36:ec:99:48:aa:a3:46:ff:91:3a:b0:73:3e:3c:3c:aa:
a3:89:2c:f5:ba:df:83:77:35:bb:e8:6f:4e:0a:2c:04:0b:cd:
54:ec:18:03:10:da:41:01:5b:da:a2:06:bf:2b:40:97:66:d6:
d8:15:c6:32:02:f6:dd:ea:4f:69:e0:01:bd:7a:1c:10:34:2d:
67:c1:ee:7f:a1:19:a7:fc:b0:4c:de:d1:44:25:52:be:cb:d4:
d7:8b:7a:5a:1a:c8:e2:bf:d2:1e:97:f8:20:5d:85:8a:48:98:
d4:c2:1e:4a:3f:4e:bb:92:7b:6b:29:06:e1:a4:bc:e3:be:90:
87:98:7d:5f:93:f3:d8:23:34:d8:2e:6e:18:9e:8a:95:fb:2c:
8e:9b:6a:b0:fc:cb:56:dd:93:0b:6c:de:00:98:5f:ac:55:68:
cb:72:b1:d6:33:0c:aa:c8:cf:6b:1d:d4:b0:78:8c:4d:3f:55:
09:23:58:07:f4:02:20:25:e6:84:da:54:e4:9d:0f:15:65:b6:
7a:ea:35:af:24:6d:f1:55:fb:d4:4d:d9:bb:f1:c5:76:58:aa:
e4:50:76:fd:d6:ff:7c:23:47:8a:5d:cc:c8:c4:44:e6:5e:29:
ae:38:9c:32:aa:e9:6f:ee:3a:50:ec:df:43:31:df:80:49:a5:
f0:21:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:15 2025 by rpki-client