Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
File: 1P97rGRNWVZyLl4YOiL7FFXnVUY.mft (raw, json)
Hash identifier: WU+2sEKpxWDWFbzJEp5hBafOc+pzkrAFkJxBY9uVHzE=
Subject key identifier: 5F:CE:99:A2:26:35:6F:9E:0E:77:69:DB:72:99:14:98:4E:72:55:7C
Authority key identifier: D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
Certificate issuer: /CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Certificate serial: 0199FC58BC38212EDA694DA3BB233C65FD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
Manifest number: 036E
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: 1P97rGRNWVZyLl4YOiL7FFXnVUY.crl (hash: gdvAogixDDeaACSPK3IHCbcfNAsNX6y1g09x9g3j0Vg=)
2: BBrcZolorsy-tffprBkzb6kzxjw.roa (hash: LubTLYd6O/FVL7Y6tbf5xWEWtjZWCQG4GmiGhTzuDxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bc:38:21:2e:da:69:4d:a3:bb:23:3c:65:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff7bac644d5956722e5e183a22fb1455e75546
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=5fce99a226356f9e0e7769db729914984e72557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:ef:37:e1:a8:b9:97:a3:0e:4b:b8:d4:bf:
6a:78:4a:c1:c1:8d:3b:1a:27:2f:7b:0b:c3:54:bd:
57:f0:2f:7c:ce:df:ba:29:ad:d3:fe:c6:b6:29:d3:
a4:0d:7a:fb:83:11:20:f1:be:a5:18:cb:f1:b1:00:
2a:28:30:07:8a:c1:52:cd:2d:e6:9d:bc:ac:3b:c8:
f8:d4:99:df:44:b2:b5:7c:36:62:56:cc:d4:71:53:
55:66:3c:24:e6:db:20:87:f0:a1:b0:2b:8a:a9:89:
c8:93:c3:55:44:82:25:ae:c8:ab:54:0d:c0:95:85:
6f:97:11:0a:29:03:0a:ba:90:3d:a3:12:8b:22:1f:
d2:ff:d3:2e:98:90:ab:f2:8d:d3:c2:6a:31:c3:f4:
46:58:9d:b7:f7:12:c9:6f:16:98:cb:c0:35:b7:b5:
fb:e3:08:36:ec:1c:ec:9e:bc:5d:bd:b3:a9:9f:b3:
53:00:71:4b:df:cd:c4:4e:90:3d:db:79:14:82:01:
b5:e4:cb:49:fa:7d:0c:f6:48:be:74:1e:27:2b:ec:
22:f7:65:49:7a:de:a9:fd:51:6d:c7:32:21:dd:06:
49:5e:5c:a1:49:4f:04:e8:5c:7f:00:24:00:10:b7:
e6:6e:3d:c6:12:17:f9:52:16:03:86:cb:66:74:65:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CE:99:A2:26:35:6F:9E:0E:77:69:DB:72:99:14:98:4E:72:55:7C
X509v3 Authority Key Identifier:
keyid:D4:FF:7B:AC:64:4D:59:56:72:2E:5E:18:3A:22:FB:14:55:E7:55:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P97rGRNWVZyLl4YOiL7FFXnVUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1672d0-5b6d-4115-afb3-880a81b99cc5/1/1P97rGRNWVZyLl4YOiL7FFXnVUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:54:c3:ab:1d:a3:1f:ba:12:d7:2b:4c:f3:7f:07:b9:63:2b:
7a:d7:f2:a3:88:8e:7c:5e:7e:e9:72:17:49:4a:95:69:b0:19:
68:65:04:3e:28:06:12:00:2d:29:a8:71:b4:15:78:a6:65:65:
d5:d8:11:ac:73:4e:70:16:af:fb:8d:b0:71:3e:1a:67:cd:dc:
f3:58:82:b6:41:89:23:83:1b:36:5a:a0:4a:8d:9e:b8:97:c2:
de:46:27:db:f2:9b:a0:bf:ab:98:fc:c0:3a:f2:6f:54:57:d7:
b8:7d:32:37:e1:2f:15:4f:ae:32:c6:78:5c:9d:73:a6:09:99:
98:32:52:ee:e6:35:37:25:8e:b0:b9:08:66:7a:d0:f7:60:af:
c2:44:ea:0f:7b:04:92:86:b9:7c:bd:4b:cd:96:68:0b:5e:f0:
91:65:8d:27:07:45:15:c0:5c:de:1c:66:f1:f8:38:64:e9:aa:
86:b0:75:16:96:00:b6:4d:86:8f:67:0b:23:93:51:f6:a3:9b:
d3:9b:20:bb:27:08:12:53:ec:5f:b9:e9:b9:de:de:d6:16:15:
d7:5e:5e:a4:c1:20:43:ab:97:0f:58:3f:82:b5:03:ad:f0:76:
5b:68:c2:60:83:f3:05:c2:90:68:49:ff:f3:d2:49:42:04:72:
31:4c:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:05 2025 by rpki-client