Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: PCD2OQXiWnBazYfHfcH+jO1A9la71P4EHenHgLSoMsI=
Subject key identifier: D3:60:AE:63:89:BA:45:47:B1:34:D2:1E:77:43:D7:1F:C4:12:92:90
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 0199FF5995D760845512F2D9B2743A566383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: Cu8BG2yVrBserX9QblFYMrGdgHneQEeOrUldOeSgy9I=)
2: 5QzI9Kx0_zx8sVl6RSClMEylLsI.roa (hash: ouFHr10qAXIAq0kULKbopJbnAAixS5hvvnbbv6zQ1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:95:d7:60:84:55:12:f2:d9:b2:74:3a:56:63:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=d360ae6389ba4547b134d21e7743d71fc4129290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:d1:9d:a5:cb:02:0e:38:57:60:50:d6:6c:
83:e5:29:2f:b8:83:0b:a1:4c:75:1f:c9:a7:30:28:
65:32:02:65:ca:2c:e2:f5:a2:f9:a6:8b:95:5c:6a:
e0:ae:2d:01:8c:ca:5a:8e:b9:47:66:53:3d:c8:39:
05:da:bc:fb:6c:7f:46:17:e9:60:90:da:31:3e:5f:
af:50:70:ab:36:ff:b1:13:cb:42:ea:35:bd:d4:5c:
ba:59:73:c9:22:68:67:9b:81:45:c1:8d:5c:9b:22:
71:42:7c:99:35:68:ee:c1:98:6b:21:2d:b2:42:cc:
2f:7d:3e:c7:23:97:a1:4d:ca:64:cb:b9:95:21:47:
35:df:1b:1b:c6:48:a2:ca:42:03:83:7f:72:3f:86:
ab:8b:d8:9d:d8:18:f3:c1:39:5f:e7:3c:0f:9e:75:
81:cb:b2:12:25:8b:24:3f:44:cf:b6:ec:50:cc:26:
d9:9c:77:a6:e1:07:42:99:de:25:6b:f1:56:55:c9:
57:f6:53:00:5f:59:98:ad:e0:b5:26:14:6c:31:61:
b0:a0:14:52:96:23:d5:dd:96:29:54:77:80:f7:25:
d2:18:8c:1b:44:4c:19:b5:a3:af:d6:7f:ed:90:af:
1c:3a:21:44:5b:f0:9d:51:64:f6:a1:fb:78:14:57:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:AE:63:89:BA:45:47:B1:34:D2:1E:77:43:D7:1F:C4:12:92:90
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8a:76:21:c2:95:2e:6d:d4:94:b7:0a:02:93:14:d5:ad:b2:
b9:0b:76:78:c5:45:24:bc:f7:0f:49:7d:a9:9c:04:61:59:4e:
12:e2:3b:ef:db:31:24:d8:0e:b8:ec:fa:cf:99:23:8f:c2:d2:
59:c6:48:57:34:3d:a4:58:bf:d6:51:99:70:3b:41:7a:b9:1d:
8a:44:cf:a7:22:3e:44:07:01:60:94:03:69:b5:64:e2:0a:38:
02:73:b1:31:fd:bb:f8:b5:9c:30:8e:5f:d5:f1:9d:34:1a:6f:
b0:f3:bb:1b:6c:e3:4a:42:5e:d1:16:76:58:c6:f3:4a:3e:fb:
0f:bb:82:93:30:55:14:96:21:06:1a:7c:2e:16:9c:90:77:19:
96:b0:25:ef:79:a8:04:0e:a7:c1:e2:d9:9c:7e:f4:55:64:40:
e3:62:a6:21:49:db:84:0c:54:35:53:1e:37:1e:61:65:d9:d1:
a2:c1:6c:4f:ab:43:19:ab:09:69:f2:0d:e0:f6:d8:af:2e:ec:
ed:a9:a0:ec:f1:55:a9:76:d1:2c:72:4d:f4:47:f9:20:58:2a:
ff:e9:36:50:17:f9:72:cb:7c:8f:26:cf:e2:df:0a:0c:81:a1:
73:e0:5d:2c:30:fb:09:5d:b2:f3:3a:62:bc:c9:8d:fd:37:68:
8f:36:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:55 2025 by rpki-client