Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 441/1j8VHXwI3Y+GRIk+c0/Q4Zv0queVzLg8weol5dU=
Subject key identifier: 5D:3A:F9:2A:16:E4:78:B8:05:D7:93:A8:A9:CA:0B:00:E8:BF:44:4C
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 0199FAD860AEA2B4FD1BEDA72B54819F8AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 16A0
Signing time: Sun 19 Oct 2025 05:01:48 +0000
Manifest this update: Sun 19 Oct 2025 05:01:48 +0000
Manifest next update: Mon 20 Oct 2025 05:01:48 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: quoZiINiJr47yc8HbJ4PiuD9Fmw6f2stA0v3IKNNyms=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:60:ae:a2:b4:fd:1b:ed:a7:2b:54:81:9f:8a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Oct 19 05:01:48 2025 GMT
Not After : Oct 20 05:01:48 2025 GMT
Subject: CN=5d3af92a16e478b805d793a8a9ca0b00e8bf444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:8c:52:4d:4a:b4:0b:9b:5b:2e:bd:1c:b5:
56:fe:8d:2e:a3:82:a7:76:dd:ac:0c:39:4b:a0:b5:
6a:13:9b:c2:78:8f:84:10:c0:c0:8c:dc:d2:72:0a:
27:2a:94:ff:f5:66:99:cf:9f:a6:c2:6a:b6:18:c4:
3e:8d:26:d6:31:96:03:76:6b:a4:37:63:3a:25:d2:
d2:d1:95:91:45:b7:70:a1:8d:4c:1b:24:b7:56:41:
6f:8a:da:5e:78:6e:ac:a9:e5:4f:b2:32:28:ad:52:
01:22:21:08:07:6b:0e:a7:64:76:e8:84:c6:13:8f:
a4:5e:25:b2:5b:f4:a4:74:b3:e9:c4:1e:f8:2d:bb:
f1:8a:6e:b3:be:a5:cc:5a:88:79:0c:a4:7e:22:82:
38:fb:27:81:13:6f:88:b6:fd:92:0f:ac:90:4f:08:
40:c3:06:c6:ed:f9:2b:6f:cf:74:92:98:68:b5:94:
ba:c8:39:ac:8e:f2:f5:c4:d4:c8:92:cd:af:a4:70:
da:54:60:cb:2a:74:52:6d:78:31:54:cb:57:e5:ed:
c2:15:53:2d:4e:4a:71:f8:23:64:8b:b1:9f:ba:54:
ff:34:56:9b:17:1f:98:30:47:12:eb:20:2c:3a:14:
51:02:6d:8e:7f:8f:6d:a1:2f:50:61:ea:46:eb:a6:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:F9:2A:16:E4:78:B8:05:D7:93:A8:A9:CA:0B:00:E8:BF:44:4C
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:a5:39:6b:01:7c:d7:63:ed:8d:da:57:1a:82:59:56:74:
b7:4f:01:a6:36:f0:46:fe:22:13:dd:de:a3:72:41:f3:7d:a1:
9e:00:b2:c2:10:30:6c:f5:26:94:4c:c4:f5:fd:e5:ca:44:76:
22:4e:75:6d:1d:52:f5:4c:60:12:06:01:48:cd:bd:c8:da:92:
26:34:24:4e:7a:d9:c5:27:97:54:99:cb:70:db:54:23:84:9a:
39:eb:aa:97:60:b4:38:c8:0f:66:45:54:ac:8d:86:13:99:83:
b5:68:71:ea:ce:01:a6:32:01:5f:e6:e8:15:bd:0b:d5:c1:98:
40:ee:da:35:ed:94:63:29:6b:90:a9:75:c8:b6:79:47:21:1f:
54:34:be:b2:00:24:89:24:a2:c9:47:28:72:0e:f8:0a:2d:54:
50:d7:1a:59:a4:fc:d8:60:a6:21:c1:4f:c9:14:93:77:76:21:
23:26:20:9a:c9:6d:f1:4a:84:4a:c7:b7:bc:a8:84:2f:1e:2e:
0f:a2:ec:d6:64:5a:c7:7b:38:d0:e0:54:fd:90:10:c4:d3:45:
f8:cb:17:bc:c2:15:a1:a3:46:40:fb:d1:c2:b3:61:21:d7:7c:
ec:46:07:85:bc:ce:72:2a:1d:2d:c7:f4:21:57:df:42:ea:b6:
db:a5:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:31 2025 by rpki-client