Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: wiuMfm/Mkfw7wHZzDUQtpov83OJXWBkEYLDw3Iaf3LI=
Subject key identifier: 80:58:C2:0D:58:AF:43:0E:57:68:BF:CE:91:50:60:72:AD:89:96:2A
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 0199FE1047F8705414C938C54D52E7F9DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: l1S7XyREaZtkTVxhmtBQYaH+YOs9iSlJkBkQluDSuV8=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:47:f8:70:54:14:c9:38:c5:4d:52:e7:f9:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=8058c20d58af430e5768bfce91506072ad89962a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:b8:6e:b3:25:2c:d4:70:e1:c6:4b:5e:77:
83:a1:05:c8:25:3c:95:cb:e0:fb:3c:68:6b:d5:14:
ca:2e:86:92:a0:b1:94:00:f2:a8:34:05:dd:23:41:
6e:bc:5d:68:e6:7a:03:21:cc:1a:0a:64:a0:0f:13:
e1:7c:d4:3f:99:a3:1e:d8:69:c7:0c:2d:31:12:05:
3d:f0:0f:ad:e6:46:d6:8d:13:db:40:30:70:03:2b:
6d:b3:aa:9f:e4:f7:20:90:29:f8:74:39:a4:fa:85:
4b:ea:fc:6e:91:d5:0b:41:db:05:77:e6:63:d6:ca:
68:72:58:5b:1c:aa:e3:0e:ba:1d:98:9c:df:e6:64:
ad:ce:f7:74:46:19:e3:c0:a5:77:d9:ba:4d:c9:93:
f0:03:ce:ea:16:17:94:fd:b8:de:e7:8f:6f:19:05:
23:4c:55:b5:17:f8:53:5c:ea:82:0c:18:e9:d7:32:
0a:08:61:87:83:67:c8:14:6b:a6:5c:4d:31:a2:b3:
a8:4c:a8:23:75:f2:3e:2e:2b:f0:9c:08:cd:d4:91:
f4:8a:2d:f0:b6:c0:5b:13:46:fa:33:dc:31:4c:1a:
43:80:e6:27:81:14:8d:da:6b:3f:52:95:07:20:ff:
3d:40:bc:45:ae:83:bd:d7:8f:f2:53:e9:5c:a2:a0:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:C2:0D:58:AF:43:0E:57:68:BF:CE:91:50:60:72:AD:89:96:2A
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:33:ac:8f:c5:19:c2:57:c7:10:1e:ba:55:5f:c8:e8:5c:09:
89:cc:c2:72:6e:fe:a4:06:ea:e3:7a:cb:84:ad:42:e9:2b:62:
61:59:58:11:e6:e1:60:48:d6:71:d3:32:98:95:27:ea:26:08:
5f:33:4c:a8:a8:13:11:40:80:b9:5b:88:ce:ab:35:6e:f1:36:
79:f7:a7:4e:fa:45:55:83:93:62:6f:0e:74:0a:07:4e:68:a0:
e9:ec:9f:25:32:e4:e4:c4:3c:04:f2:1b:ce:eb:78:ea:3e:9a:
b8:3b:97:3e:8f:5c:a1:b3:23:c1:85:36:9d:a4:7d:a2:15:98:
56:56:d3:75:8b:2e:b6:e5:80:fd:4b:b9:2d:63:fa:d2:db:53:
b3:ce:9b:81:f0:33:21:22:31:77:86:5c:c4:e1:a6:ef:f5:7c:
d7:20:99:6e:17:93:bb:bb:32:4d:c1:d7:8b:d2:29:8e:0e:f1:
31:b1:d2:78:6d:4d:8f:b2:53:5f:66:e3:90:8d:4b:b9:8b:62:
93:b1:4c:51:16:5f:2d:39:90:df:91:53:9c:31:a0:3a:28:c6:
fb:ba:e7:2a:f4:90:f5:b2:6f:31:df:07:0b:55:79:b0:b6:9f:
9c:09:f3:6d:c7:6d:36:57:80:6c:a3:7a:36:cd:4e:cc:c2:39:
2a:ec:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:26 2025 by rpki-client