Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 23uxQzlTkg1LbakyfNha9nFKvoT0YxiAkBGoFb5LwRs=
Subject key identifier: FC:0A:56:1B:C9:43:00:83:16:97:7D:F6:9A:AD:B3:F8:0C:DC:1C:51
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 0199FCC665E0AC36167D0042AC14573D2931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: cN31qftLnKLXxO5W/hQA/eNCW+PA0Brs2cbF0U1lZFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:65:e0:ac:36:16:7d:00:42:ac:14:57:3d:29:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=fc0a561bc943008316977df69aadb3f80cdc1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:5a:27:b3:80:28:64:86:97:34:f4:42:c8:
42:bc:9e:1c:ef:f4:cc:d7:d4:3d:0b:11:46:0f:70:
23:e4:88:03:b5:71:09:4a:93:1a:24:62:4a:d3:c3:
55:fc:e9:1c:19:e3:cd:7f:89:4b:c7:03:cd:f8:c1:
fa:62:39:c9:7f:ef:27:f8:2e:9b:2d:47:ad:cc:37:
d5:c7:24:cb:08:2c:1a:d1:59:f1:14:32:ef:65:8e:
a8:67:f7:09:3f:84:b0:f7:4d:14:78:1a:4f:6f:b2:
a2:5c:dd:8c:06:39:d7:f0:dd:e4:c0:22:68:ed:0d:
49:b5:92:9c:da:d4:a4:a5:32:3b:89:e0:29:2e:7a:
1f:d2:72:20:ab:cc:75:25:64:77:6d:63:50:b1:b2:
46:a0:e7:b7:f8:98:35:15:1a:ce:d1:9d:b8:ad:76:
22:44:26:e8:c6:f9:f1:6b:b6:2a:fe:df:b8:10:89:
be:06:56:b1:32:08:e6:1b:08:71:20:6b:91:8c:68:
63:38:e1:1d:96:f5:dc:ed:fe:95:ec:e1:09:f0:f1:
01:1a:9a:77:af:89:e7:71:5c:4c:be:38:f3:a1:ad:
2b:f8:09:bd:c8:96:ef:be:d2:1f:1b:3a:97:29:db:
92:7e:53:47:b3:1a:79:84:e7:a9:ea:da:b7:dc:c5:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:56:1B:C9:43:00:83:16:97:7D:F6:9A:AD:B3:F8:0C:DC:1C:51
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:76:2b:e2:07:03:78:b0:e3:13:17:94:aa:10:63:dc:99:c4:
29:5f:17:d5:ab:51:f7:f4:ba:af:cc:d0:c9:7e:10:1f:11:bf:
9f:d1:50:b0:f8:bb:58:17:e7:ee:06:03:e3:22:8a:41:12:41:
34:b8:aa:0e:45:9a:51:c9:5f:51:e3:7e:c1:01:d1:9c:4f:61:
17:f7:5e:3a:a3:a5:b5:f8:b4:e0:d9:12:e9:37:30:3b:22:93:
e4:a9:e1:5c:c6:ea:fd:28:20:e8:37:b7:40:0d:d8:40:50:07:
12:7c:3b:3a:2a:a7:09:fa:61:c8:b0:20:55:b6:ed:0a:ae:a1:
72:75:ad:c7:08:5c:9b:b4:16:72:c0:41:97:b2:2b:22:99:dd:
b6:ab:b3:67:88:c4:0d:8c:41:6b:81:7e:af:61:4b:9e:1c:93:
ec:a8:b6:49:a9:c3:8d:b8:fd:44:74:96:ea:cb:4f:7d:9d:61:
e4:00:08:5e:4c:25:87:ec:77:27:7e:ab:51:ca:21:60:5f:29:
ef:7d:d4:45:a7:ab:d7:0b:98:30:ea:a3:1a:34:ea:d8:be:aa:
c5:ab:97:be:a8:3b:e8:47:5a:8a:c8:fb:0d:10:9e:f4:f6:00:
90:e1:03:1e:b6:55:9b:37:a2:df:76:a5:94:c0:a3:a5:7c:90:
21:63:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:18 2025 by rpki-client