Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File: 1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier: AGFLpBdYrbn2dpU31Q+VhxY7JEm94jNqXhK+4Vbtdi0=
Subject key identifier: 8A:74:D1:D7:5A:9E:BE:98:16:F6:60:07:B5:9A:58:24:E5:88:76:E5
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer: /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial: 0199FC218E69785627BD78133176B00E6623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: UvqNKRjQX6SxA6IWQFtEFRdDtElWi32rAjJDoJ7a8jc=)
2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:69:78:56:27:bd:78:13:31:76:b0:0e:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=8a74d1d75a9ebe9816f66007b59a5824e58876e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:f7:7c:bc:4e:f2:c9:b9:6b:5b:ca:31:fa:
e7:e5:d9:11:02:06:8c:ba:c7:2c:93:95:51:48:d2:
73:1b:a6:53:bf:a0:b8:f8:90:d8:33:8f:21:0e:b2:
ec:17:db:3e:fa:a8:1a:d3:99:ba:e6:f6:e0:63:e7:
78:d3:77:08:38:1a:9e:ef:d1:c5:fc:1f:40:ba:d9:
c5:6f:45:a4:1a:de:69:1b:ee:6a:7a:a3:89:86:47:
f3:67:cc:7a:30:30:42:c8:4b:38:b5:f8:fb:c1:f3:
62:7c:5f:2e:2e:b8:83:b9:bb:41:f7:db:90:97:2c:
57:fe:4b:a4:66:70:90:de:6b:20:d7:b2:40:6b:32:
65:14:cf:39:09:12:24:fc:48:9e:a7:fb:d3:94:89:
f4:74:c3:b6:d8:5b:dd:db:ca:5f:b4:0a:2f:38:fa:
96:6e:c0:7f:ba:a1:80:b0:72:e8:fa:e7:30:5e:d3:
ba:bf:5b:cb:4d:37:13:29:01:ff:4e:50:53:3b:97:
ed:bc:46:eb:9c:3a:f6:98:23:a8:31:de:82:b7:8f:
c3:2a:16:21:8b:1e:1f:3e:d1:83:7e:5c:d1:41:08:
5f:56:21:16:52:01:72:a0:58:18:44:a7:59:af:20:
4c:59:38:35:7b:7e:0a:2d:a2:3c:4f:1d:57:fa:3a:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:D1:D7:5A:9E:BE:98:16:F6:60:07:B5:9A:58:24:E5:88:76:E5
X509v3 Authority Key Identifier:
keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4e:7b:7a:e0:9e:08:c9:f4:03:a3:d9:cf:0e:41:d4:27:ef:
b1:01:04:ff:e6:28:6d:8a:43:ad:69:60:02:67:8f:95:87:17:
fd:65:9a:9e:c8:97:07:8d:e0:ec:88:f5:3f:d8:7a:d4:25:44:
5f:47:eb:cb:46:af:7f:3a:44:e7:15:7d:5c:33:13:99:bd:bc:
1c:13:9e:69:2e:7a:af:a4:71:db:b5:84:f5:57:f5:af:04:a0:
f6:1b:84:33:c2:02:1e:62:bc:10:66:88:74:48:ed:19:65:45:
d2:75:b8:56:35:da:f3:d7:82:7c:0a:86:6a:95:49:27:92:8e:
5c:53:87:8d:40:df:48:92:dd:59:87:df:d1:2e:60:45:51:ce:
0e:be:f0:fa:3f:6d:a7:3f:2d:ef:24:90:c8:a3:dd:b8:0e:fa:
fd:b5:b7:ac:ca:b5:d9:8d:86:eb:a5:a2:e9:ee:f8:6f:62:26:
c9:c2:20:49:90:10:a7:a3:ac:06:6f:91:8d:d5:22:18:6a:e0:
fa:96:61:b8:47:4d:cc:d8:04:34:5f:00:47:3f:e7:22:4d:2c:
a5:35:24:3b:fc:4f:6e:a1:f0:c4:d6:65:8f:83:9c:09:58:9c:
b2:c7:f8:0b:21:f4:ed:dc:bf:4c:6f:3a:56:f0:29:f9:a6:21:
e0:2a:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:47 2025 by rpki-client