Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: vrm5X92Blk7pRadCRoMYjOjhn4AWTHLTpPJJAeIwvjA=
Subject key identifier: 5C:03:6A:B8:A7:8E:B4:95:77:4F:95:FD:9A:69:D0:8E:9C:3D:4F:47
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 0199FA6A58F774676211A068D86B7ED9A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 03:01:37 +0000
Manifest this update: Sun 19 Oct 2025 03:01:37 +0000
Manifest next update: Mon 20 Oct 2025 03:01:37 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: LjmPTxHAG9HgsEVLTqB3vqOIWJMNHhHHa6k3KR3TeHs=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:58:f7:74:67:62:11:a0:68:d8:6b:7e:d9:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Oct 19 03:01:37 2025 GMT
Not After : Oct 20 03:01:37 2025 GMT
Subject: CN=5c036ab8a78eb495774f95fd9a69d08e9c3d4f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:1a:b5:1a:98:e6:99:33:5a:51:a9:ba:1c:
15:67:2e:84:c8:29:b2:2b:68:ee:a7:55:c4:26:bb:
41:ce:f4:d2:ba:ff:81:65:91:7e:3e:f8:07:ae:1a:
e4:c9:38:f0:d8:45:68:c6:a5:79:8a:17:f0:16:8f:
6d:0a:59:6b:54:b1:96:3a:7e:5a:9e:3a:d2:27:2c:
c1:ba:7c:ab:d8:0d:bc:1d:af:19:14:92:c0:c9:a1:
ff:c5:d0:cf:88:a3:40:fd:39:49:c1:f6:2c:48:7f:
8f:55:c9:d1:fc:93:9a:f4:f8:5d:13:ea:1a:25:7b:
3a:e4:06:93:d1:c1:ea:65:d1:61:ee:ad:ed:67:4d:
c8:df:12:3c:bc:fc:d6:91:2c:22:24:67:49:83:c2:
94:5d:eb:a9:dd:70:51:44:c8:5e:bc:f0:a1:b0:2f:
4b:8e:0f:02:8e:42:ff:a1:6c:c8:0f:b1:01:f6:0e:
6a:af:0a:3c:bc:0a:1a:51:e4:56:48:20:65:b9:77:
ad:c7:57:54:67:71:92:bb:dd:a6:f4:0f:c8:a9:29:
98:8a:b8:42:3a:db:49:86:1b:fe:92:84:cb:a0:4f:
63:8c:fc:f5:64:69:49:b0:b7:86:a9:b3:48:6f:9c:
e3:24:15:78:75:5a:a2:1a:e3:58:ea:0a:c7:3a:84:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:03:6A:B8:A7:8E:B4:95:77:4F:95:FD:9A:69:D0:8E:9C:3D:4F:47
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:de:e5:36:7d:60:db:d6:1d:45:e4:43:e1:d4:66:25:33:
30:9a:80:bb:c0:1d:bd:62:50:1b:f8:7c:46:fa:6f:a6:3e:52:
97:df:25:b2:69:fb:06:0c:eb:78:5a:8f:9c:b0:0f:72:c1:59:
0f:b3:af:b4:3d:4b:fe:dd:28:03:cd:a4:0a:6e:cc:cb:5c:77:
ab:44:c4:10:cb:88:d5:2a:86:94:c2:23:05:fe:a0:d9:87:24:
31:89:fd:5a:32:f1:c8:10:b9:49:dc:a9:79:1c:99:4e:df:07:
a3:18:2f:1d:fb:49:f3:3e:93:c1:6b:38:88:89:1a:c8:c8:8e:
0b:f5:d1:77:9c:c8:93:e7:75:38:53:48:92:eb:37:26:e5:f7:
94:09:89:03:80:cb:3a:df:2e:00:82:08:84:6f:2e:95:c5:f6:
da:3e:19:06:7f:1a:fc:a8:86:5b:29:18:ef:5a:69:ed:3a:17:
9b:b2:33:be:e3:48:51:d4:37:5f:f4:c4:6a:8b:25:c1:50:e8:
63:b9:63:f4:00:4e:14:de:b3:99:b5:2f:75:ae:c5:1f:6a:5a:
5b:00:a8:03:a7:b5:c8:92:a0:64:ba:5c:0b:ec:08:77:a9:a3:
4b:80:69:b1:a9:a7:18:6e:72:36:f8:55:77:bb:f2:01:7f:ba:
6a:d2:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:52 2025 by rpki-client