Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File: r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier: S7fZWaGxg6y9iMoIDH52i4QP90Q7hOpTfKWZZ6XEoog=
Subject key identifier: 80:EC:EB:50:07:B8:32:05:71:D3:25:23:DE:A5:28:75:18:88:1F:01
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer: /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial: 0199FE0FCD56500EDBAF19FBD75D7638E105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 20:01:12 +0000
Manifest this update: Sun 19 Oct 2025 20:01:12 +0000
Manifest next update: Mon 20 Oct 2025 20:01:12 +0000
Files and hashes: 1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: fD6GeYtcEJ2c6S89MlUwQmD6e3GPfre14aheljTXVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:cd:56:50:0e:db:af:19:fb:d7:5d:76:38:e1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Validity
Not Before: Oct 19 20:01:12 2025 GMT
Not After : Oct 20 20:01:12 2025 GMT
Subject: CN=80eceb5007b8320571d32523dea5287518881f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:79:b1:1a:c6:37:55:f7:e7:48:97:e9:fb:
64:64:f0:b0:36:03:3b:66:fc:34:c3:0f:5c:2a:bf:
e5:25:0e:e5:22:41:71:38:ce:25:1c:9f:c3:2c:38:
a4:b6:8b:0f:6a:05:e5:fa:7b:a0:2a:72:78:4b:21:
53:30:1c:94:c3:b6:82:cb:35:4e:c9:98:f1:4b:39:
43:5d:bd:c2:3a:05:05:a7:a9:db:9c:3e:d3:30:d7:
52:fd:0e:7f:63:8a:e7:6f:3c:6d:bf:ce:4d:ed:47:
51:dd:d5:da:92:a2:1b:48:32:7c:2f:08:b9:76:e2:
c1:ce:86:f7:a0:b8:c7:ab:cf:ea:06:1e:04:92:ab:
1e:3f:13:64:af:36:95:a0:f8:a3:a3:de:60:0f:19:
2c:bd:e1:b2:72:fc:a3:40:6f:c1:40:c2:6c:69:17:
e2:ab:22:ac:e7:0d:8c:43:f4:d7:6b:65:e5:20:dc:
13:2e:c0:99:d8:6c:98:4b:e3:b9:82:5f:dc:22:fe:
56:e4:a2:db:7b:18:b0:71:d8:f4:36:e6:a0:ff:46:
51:c6:c0:a8:28:21:2a:30:fd:62:b7:66:22:20:60:
ec:b8:3a:05:88:64:bc:fc:9d:cc:02:d6:ef:b4:90:
87:bd:7e:77:9b:87:2f:8a:23:af:77:b1:21:33:b8:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:EB:50:07:B8:32:05:71:D3:25:23:DE:A5:28:75:18:88:1F:01
X509v3 Authority Key Identifier:
keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:e6:dd:fc:ef:fb:42:ad:a0:dc:74:f7:5c:50:96:40:b1:
5b:3a:e4:a2:70:95:2e:0b:39:0d:ab:9a:b1:76:08:16:56:c4:
05:d6:29:72:9d:e1:57:c9:ba:3e:ab:81:91:5a:42:0e:0a:00:
ea:a7:2b:47:89:fa:15:72:b2:86:d6:2b:b8:7c:ff:44:1c:b2:
69:8d:5c:49:6c:8a:f2:93:e1:5d:1f:0d:ce:57:2e:65:5e:35:
5b:fc:14:90:0c:34:52:ce:73:a8:18:5c:df:d8:b0:43:23:72:
f5:8c:ba:e8:77:db:df:92:60:9e:68:a6:3e:ff:95:14:b1:e0:
28:e7:13:69:29:8e:ee:aa:c7:13:9a:4a:7d:90:27:04:a9:7c:
55:0a:3b:4e:6f:2d:43:0f:25:98:29:2b:3a:00:a5:33:ed:2d:
1e:3f:31:ab:a6:c8:7b:09:89:db:0e:4d:05:a3:ed:c5:13:bd:
2a:9c:48:de:99:89:46:c9:d8:97:dc:83:58:61:37:bf:58:81:
0d:09:6b:3c:e3:4c:af:48:90:04:97:e9:27:5f:17:cc:fe:47:
88:b7:da:b5:bb:e5:f9:49:a5:51:4c:4f:7e:98:0e:c1:b2:36:
ee:f1:26:70:a0:91:af:5a:22:52:7f:1b:58:8b:5f:fb:ab:90:
1c:79:69:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:46 2025 by rpki-client