Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: bDBeiXPos8YoNgRhhvMAZMsGultRjsskCXzuhYqlfTQ=
Subject key identifier: 2B:55:A7:7A:58:91:62:17:F3:FE:68:E3:93:19:65:5B:E1:2B:FC:7B
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 0199FCC6C2EB81E8CEA143770798BFC18FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: y8laf0/LMcO7b9DabyCFLF8cYt7+5y6wpwxH2inxhL0=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c2:eb:81:e8:ce:a1:43:77:07:98:bf:c1:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=2b55a77a58916217f3fe68e39319655be12bfc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:f7:cc:be:0e:fe:61:d8:a4:86:6d:02:d3:
71:4d:ab:1f:69:9c:ea:2b:e2:dc:3e:6a:34:47:4a:
8a:6e:40:c0:8d:ce:f0:ea:d5:e7:d3:0b:6c:68:e2:
81:dc:31:fe:71:9a:35:10:7d:b5:d0:3a:d5:ac:70:
7e:68:9d:bd:82:b8:1a:3c:ed:c3:37:f7:84:5f:f9:
50:4b:c6:c6:c1:42:3f:26:d4:bf:6e:50:10:65:de:
32:97:03:25:61:2d:93:e1:bf:b5:86:a4:c5:e7:e1:
b2:4b:75:dd:a9:43:82:b7:c8:6c:23:1c:45:3b:af:
60:b7:27:63:51:d4:32:7b:84:5a:bb:c4:b8:b0:53:
3a:2b:b3:5e:5e:3c:e2:f3:ff:65:4e:e2:53:a9:f9:
0d:a0:87:b7:05:c9:3b:ff:69:2a:77:64:93:5d:24:
9d:16:a8:58:4e:ff:30:10:98:7a:b6:61:5a:9e:ec:
a1:7b:5c:cb:de:d0:59:6a:5e:b5:b5:45:a6:c4:7e:
01:b3:aa:fc:6c:8c:f7:92:1d:ae:10:96:a8:a1:6f:
9d:59:a2:cb:16:86:5c:62:14:c9:7a:de:0a:76:4d:
51:41:14:7e:88:a5:4f:85:91:22:09:ea:d6:47:84:
3e:08:0f:8d:e2:b4:6d:c7:52:87:c2:3e:ee:72:06:
1f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:A7:7A:58:91:62:17:F3:FE:68:E3:93:19:65:5B:E1:2B:FC:7B
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:7e:80:80:44:c6:83:ce:33:81:3e:bb:04:6a:21:cc:19:
ab:e7:be:45:bd:6e:d1:56:df:92:72:5e:29:de:6a:19:4a:81:
56:4e:04:1f:72:f7:09:bc:3d:5c:6d:70:f8:5c:8f:8c:72:fd:
ca:04:25:0a:e5:4f:88:83:53:d1:9b:57:d1:70:4a:5c:49:42:
5c:fc:5c:f9:89:dd:a4:61:f8:3e:6a:d1:a7:c4:87:18:d9:ef:
1b:20:fa:32:67:38:af:c4:eb:5d:26:55:9d:a4:86:ee:56:1a:
cf:2b:f9:7a:ab:22:b0:3b:53:08:e3:65:cc:ac:a2:3c:88:0a:
99:7a:4e:16:be:a3:af:83:cf:38:ae:41:81:5f:4a:a2:9f:bd:
c6:7c:42:bd:c6:3a:48:3a:51:5d:22:13:1b:03:72:2b:1f:2a:
c5:d2:65:b8:4c:4a:b4:79:7f:03:8f:d1:36:05:f6:8d:46:ca:
e6:e8:61:75:16:0b:30:a6:2c:78:4b:aa:e4:c5:f6:c6:fd:08:
fc:a5:b7:e7:d4:fe:92:5d:71:81:24:51:f6:df:25:42:42:e5:
07:1b:91:84:d4:12:43:e6:6d:85:79:7e:7f:5a:39:f2:96:81:
19:95:ab:f9:da:2f:71:9f:2d:ce:be:63:46:b6:e8:ed:a6:f8:
2f:9c:2c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:30 2025 by rpki-client