Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: HJcUyPHknUCoGCB6fZ+EpXYgw8MSKMOg0f78sVGaMdw=
Subject key identifier: 49:D3:B3:35:4F:18:70:EC:95:25:59:AC:61:D5:47:8B:07:9D:68:34
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 0199FC8F7CAFFFB5DA2DD95B0001E1CC345C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: WrOny9KvcvuODkm5M8myjobtD1OvUVNiAaZH3lmKs8o=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7c:af:ff:b5:da:2d:d9:5b:00:01:e1:cc:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=49d3b3354f1870ec952559ac61d5478b079d6834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:aa:a4:77:81:24:de:41:a0:89:aa:52:d6:3d:
51:e2:8b:8c:48:1d:ab:06:d1:b3:91:c4:95:12:2c:
f9:69:42:70:2f:57:df:56:7a:2d:0d:f7:a0:68:16:
b5:a5:bf:7d:ad:e8:ae:72:75:62:10:3f:0d:d9:af:
7f:2c:a3:c3:af:f8:1b:02:88:0c:c2:88:68:31:1b:
7f:20:5e:5b:3d:38:17:d3:a1:44:c8:a3:4e:b0:2b:
94:dd:b9:fe:92:68:eb:29:9f:79:73:62:ce:e3:48:
66:c2:80:ad:ee:3c:50:23:76:80:14:0b:b6:64:af:
75:06:9b:44:48:1d:d5:3a:d2:05:f3:ef:b4:9b:48:
b5:83:76:70:d6:ba:b2:1d:69:51:90:06:93:05:75:
64:81:4e:8c:bd:dc:3a:00:d4:d3:ed:68:fb:1e:3e:
cb:9c:bf:5f:c3:de:49:eb:fd:c1:f2:47:18:ca:24:
27:ff:e5:9a:ff:06:54:3b:f0:5d:62:98:83:40:f2:
e5:05:d2:4d:dd:18:78:03:4b:e7:d5:f4:f3:cd:63:
d1:02:b5:86:6d:e6:01:a4:ad:e3:16:e6:ab:68:09:
8b:c3:14:93:99:c1:1d:5c:dc:44:7d:b7:89:81:a0:
68:fd:c4:2c:27:60:7a:c8:ec:51:50:53:5d:0d:9f:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D3:B3:35:4F:18:70:EC:95:25:59:AC:61:D5:47:8B:07:9D:68:34
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:2a:12:39:04:de:bd:cb:06:3f:f2:20:22:97:75:16:17:
0a:78:4a:8c:d3:1f:4e:a5:d2:e4:ab:b4:8c:13:e7:f9:ca:d2:
85:97:ae:cf:9e:a8:39:67:c6:78:19:96:62:0f:04:3f:24:b2:
0a:11:56:2b:f2:a6:44:44:21:8f:25:e3:53:9d:bc:18:f8:ce:
d8:25:5f:1c:5b:24:3b:eb:e2:d3:ee:72:19:07:26:40:d4:8d:
07:ac:93:22:8e:18:aa:83:10:58:25:6e:7d:b2:8a:bd:77:05:
41:3b:e6:22:17:d4:df:17:42:81:f4:66:08:79:6d:6f:73:88:
9a:0c:ca:3e:52:c4:c3:3c:33:88:5d:47:46:73:08:5d:2e:bf:
e6:f8:53:7b:c6:09:db:02:d1:47:06:73:0e:36:7e:34:2e:b2:
e7:f6:ea:66:b2:4e:75:75:78:a4:c1:0f:06:37:f5:b8:16:d7:
4b:4b:d4:09:eb:43:17:cc:7d:21:b1:3b:11:9c:b9:78:c8:2b:
95:f3:4d:fa:81:54:16:ae:ab:af:f5:04:f3:0e:4b:d7:94:f2:
38:09:e5:2f:60:f8:11:47:d1:5f:64:bf:c0:08:a4:f2:fc:89:
6e:dd:1e:02:78:86:8d:85:86:07:f0:d6:1c:89:97:12:09:cd:
d2:46:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:17 2025 by rpki-client