Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: 1ApEK6rShbHxvrNTGarmaVvfFeQuZfjFMkBUit23sDU=
Subject key identifier: 2E:C0:46:9E:B9:86:5C:D1:00:A1:9A:64:36:C8:B7:FB:EF:00:40:D6
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 019A00354FFC271349BCFC4D634C1C9FA63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 06:01:25 +0000
Manifest this update: Mon 20 Oct 2025 06:01:25 +0000
Manifest next update: Tue 21 Oct 2025 06:01:25 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: fy7IOxCOKCjRqQ3vSlF3TZjwOTfUgPqYSXTLmVl5yhQ=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:4f:fc:27:13:49:bc:fc:4d:63:4c:1c:9f:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Oct 20 06:01:25 2025 GMT
Not After : Oct 21 06:01:25 2025 GMT
Subject: CN=2ec0469eb9865cd100a19a6436c8b7fbef0040d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:46:a7:2f:e4:fd:55:bf:9d:95:be:9b:53:
c4:7e:d3:97:eb:dd:e1:99:41:8e:5c:ec:7a:a5:8b:
21:1d:aa:85:f8:4a:c4:5f:10:14:14:a9:82:9c:5d:
de:a0:b9:0e:50:a0:aa:a6:8b:2f:80:d6:3e:2f:39:
47:49:10:a4:55:7d:0f:6c:e3:14:bb:b9:d8:94:3e:
7a:4e:e7:16:54:3d:f3:f5:23:e4:a6:eb:d8:a0:a5:
4d:95:51:b8:3f:46:cf:5f:4f:f3:f0:61:69:f9:9b:
97:7f:22:c9:92:66:10:fa:57:ed:db:8f:f4:42:82:
9e:fb:69:3a:74:b9:cc:3c:0e:4b:4c:94:fc:18:a5:
54:43:01:ea:7c:9d:e1:a6:20:a0:43:06:49:cb:00:
be:9a:92:34:b6:31:e6:ca:38:e9:52:53:af:fb:1f:
2d:73:74:55:10:f5:f6:ae:88:e8:97:d4:73:d5:ba:
16:f6:af:1b:16:65:82:b9:4d:e1:ed:6f:82:6d:2f:
ae:f1:10:69:30:74:d5:34:44:fa:f0:91:2c:c2:7b:
58:0a:d1:13:fc:f6:e9:e4:c5:dd:70:d1:f8:8d:30:
1c:36:18:ed:b5:be:a6:57:e3:16:86:69:4d:71:c8:
5c:cb:0d:34:d1:21:fb:e4:9e:fe:37:e4:17:b3:46:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:46:9E:B9:86:5C:D1:00:A1:9A:64:36:C8:B7:FB:EF:00:40:D6
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:fb:fe:4a:45:25:75:fa:70:67:88:92:2e:67:ce:a1:66:
3e:ed:ec:d7:21:0a:a3:76:14:cb:aa:a5:cc:61:c9:58:ff:6a:
67:43:89:3f:f7:58:60:eb:0d:8b:7f:2b:7e:d5:a6:47:dc:e9:
ab:98:e9:c9:de:e5:c5:46:ee:6b:20:fa:43:fe:78:fd:9c:11:
24:1f:ce:ee:5c:ba:34:81:40:af:c9:46:f6:af:45:80:df:de:
ea:81:40:e7:90:88:32:06:5a:32:f6:63:c9:9f:10:a7:7b:41:
2f:fa:6f:84:09:69:23:44:d1:86:32:dd:6c:89:02:92:aa:5a:
83:00:6d:8e:9a:ad:27:b2:36:1f:55:84:d7:d0:38:10:ed:de:
99:e8:27:1e:b1:00:99:30:6d:25:01:af:6f:4f:7b:0d:78:e5:
e3:df:d9:14:e8:02:ab:b6:a3:1f:0f:37:40:5b:d4:79:88:c2:
4c:f5:24:65:5e:5b:bc:8c:64:e0:e9:54:62:6b:51:58:99:1b:
f2:a6:b8:b8:d8:c3:83:98:dc:f3:1c:45:17:df:07:42:ba:fa:
59:17:bb:c6:42:ca:f3:8c:e6:74:7d:61:a0:f2:e8:6c:be:e4:
bc:44:24:1f:a8:7d:b3:08:53:75:10:74:7d:e1:c7:a4:c9:de:
51:45:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:39 2025 by rpki-client