Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: XK4nDfn8Z0nHFmhoSl66MCThCpxBl0t4ZalvVIGaXWY=
Subject key identifier: 3B:6D:D0:F4:27:C5:DD:42:EF:8C:1C:40:EE:82:B0:6B:80:4F:EA:86
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 0199FC21CF983CBDA24E1A6429C0CFCFB53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 0497
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: NR00JmJHCi6wkJZsMJBFykwiO1WuW7iUyFgSv41rSjc=)
2: kSER2798uaT4ZEQ3_Ywav1IgXDo.roa (hash: o89fQ/v3jr3XzrvC5mfE9JQZHOaC2hUzybiixeh55JI=)
3: yZlOT6r0_6wmgpAAvcSq6qfpXoA.roa (hash: CFuI4jvHDVJgJ7TNYXPE3aUuvYsSM/+AObIDbJtCPww=)
4: zl7tT8dRR7O1ZujdC0-GhGjBJAU.roa (hash: dZhp70Fm8wBLybFYAH8VTvH36PqVNE1zgwuzpEitFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cf:98:3c:bd:a2:4e:1a:64:29:c0:cf:cf:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=3b6dd0f427c5dd42ef8c1c40ee82b06b804fea86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:d6:ba:69:c2:66:bc:4d:c3:6d:30:da:3c:
62:7e:27:48:ee:07:c5:c9:35:f8:2b:2b:98:72:45:
18:96:40:9e:2a:72:0e:6e:b5:f2:95:79:da:95:02:
0e:e7:8b:9f:c3:92:9f:d8:82:e0:4b:a1:f0:7b:08:
9d:13:a8:81:57:0b:3c:27:1c:28:2a:89:3c:d7:38:
4a:48:34:d3:b0:9b:24:85:92:a2:60:d4:e3:20:e0:
f2:2c:f9:3c:10:58:6f:a0:2e:2c:59:bf:57:f9:33:
f7:12:62:43:80:19:59:41:35:76:ac:f9:3a:2c:01:
63:a7:27:0a:43:75:bb:6b:2d:24:f3:21:0a:cf:04:
2e:62:fb:55:d4:f7:71:f3:85:5b:4f:75:f5:69:e3:
56:4b:96:f3:9b:5c:d8:e2:a3:4e:fd:85:81:fc:d8:
b8:79:2f:ea:69:5a:15:79:55:c7:a8:7a:e9:f2:25:
ae:66:e0:11:69:be:4b:e9:dd:63:8f:c0:14:53:e5:
71:88:ff:bc:c2:96:e1:39:ca:bf:f5:5e:e9:1a:5c:
13:de:0c:6e:80:8d:9a:06:c7:7c:d7:d7:fa:3b:32:
fb:a8:c3:98:a8:08:76:d7:f8:64:56:93:ec:2a:53:
cc:6c:44:f0:33:ea:0b:94:5b:8f:35:99:11:f7:92:
36:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:D0:F4:27:C5:DD:42:EF:8C:1C:40:EE:82:B0:6B:80:4F:EA:86
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:19:ae:77:5e:a7:6a:e8:2f:b5:69:fd:38:bf:43:38:cc:
69:21:b4:13:df:a4:96:ec:32:79:4b:74:dd:8a:03:6e:12:ba:
7d:a5:da:5f:9e:45:20:e4:d0:15:49:77:d6:2b:5e:1c:57:13:
f5:64:ac:99:ce:d3:b1:24:68:aa:8c:d6:eb:85:2f:70:d6:2c:
cc:cf:7a:fa:e9:a0:28:47:44:f4:ce:8b:6d:d8:f6:0a:c0:42:
77:e4:5f:93:89:9c:3e:ab:0e:30:20:04:82:14:4f:24:c8:be:
91:5c:b1:6c:26:11:34:e9:9b:38:4c:c0:75:59:ac:83:59:6d:
d2:75:29:c3:52:27:63:70:0e:f7:0c:be:0d:b3:93:43:89:9d:
a4:00:ff:74:37:7d:c0:69:47:96:eb:9e:ea:21:27:6c:3d:b8:
0a:41:3a:54:b7:f0:2c:87:ba:fe:00:70:1f:27:e2:20:46:1d:
98:34:ae:6e:76:07:69:94:b6:7b:64:3f:b2:6c:a4:a0:84:48:
a8:8a:b1:9f:91:39:9e:d1:2b:84:c0:2e:09:61:53:16:1d:24:
4e:37:ca:a0:bf:08:e0:39:5a:29:3a:7d:71:a7:6b:30:85:c5:
e1:b3:e6:df:ca:31:ed:c3:97:c7:d0:ac:22:d4:36:7a:22:65:
bb:f3:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:04 2025 by rpki-client