Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: NUxEDCQd8GTContj9xERkc00VypPBPeYa6iis/MANR8=
Subject key identifier: 48:46:15:12:C2:64:65:3F:85:51:E1:FA:54:A2:B4:D4:4B:7F:7A:27
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 0199FC218F5DBDD57D3296CFB6A223AA87C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: C6plPFGK+lknRyeNip7jLPWf2So4m/eyvtb9BhexSG0=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:5d:bd:d5:7d:32:96:cf:b6:a2:23:aa:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=48461512c264653f8551e1fa54a2b4d44b7f7a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:76:7f:a2:1a:ca:0f:9d:82:c9:70:d9:6a:
ec:31:ec:a6:02:72:d2:b1:50:3f:3d:4b:ef:4a:33:
8f:a9:65:03:9e:f4:1b:b0:c2:e8:24:cb:f0:a3:5b:
0f:3e:65:24:32:b0:92:c5:54:ed:b5:80:24:98:80:
b2:ac:0a:d9:e7:97:b6:79:0e:4b:45:5d:4c:a7:19:
8a:84:a9:65:54:5a:06:74:a7:17:77:ed:3f:98:9b:
de:88:81:b3:7e:6e:1f:62:e1:18:55:12:22:ff:cb:
86:d1:7f:8c:8e:a2:68:00:bc:c3:62:9a:5c:ec:2b:
5c:b8:41:f9:98:60:e5:3a:09:9c:58:81:d5:82:7c:
55:22:7a:eb:45:cb:94:85:60:ec:33:f6:54:2c:47:
75:71:99:ee:c7:68:65:13:4d:fd:79:a7:68:1d:9f:
df:eb:52:6d:2f:58:3f:db:56:2c:e5:f2:5f:d8:29:
d1:57:86:b5:75:18:65:b2:bd:12:29:f6:2a:e4:0d:
b3:a4:8c:45:8a:bd:12:d5:ee:f9:85:1b:00:d2:07:
6f:c9:e8:3f:6a:69:e4:15:25:5c:66:70:a4:4c:bd:
e5:ce:52:aa:a5:0e:45:9a:3d:33:85:14:80:ec:43:
cd:3f:d5:03:1a:84:72:84:6d:d7:d1:2a:0e:06:40:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:46:15:12:C2:64:65:3F:85:51:E1:FA:54:A2:B4:D4:4B:7F:7A:27
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:8b:5a:4a:1c:52:97:0a:32:89:ae:6b:57:6d:0d:aa:97:
36:05:6d:a1:72:8f:ef:ce:64:f3:10:2a:8e:82:41:7e:00:2c:
58:34:64:af:24:c6:fe:7f:54:f9:14:85:45:ad:cc:4b:64:4d:
3d:d9:af:79:06:09:e7:af:67:4d:6b:76:ff:ab:eb:44:2a:f5:
6d:1c:fd:be:97:5a:0b:1f:ef:1e:1f:2f:c5:b6:c7:b9:dd:11:
ef:da:1f:27:dd:8c:91:a0:a8:d7:26:48:bc:12:0e:38:b6:d9:
ba:ea:0c:9e:25:75:13:69:79:14:13:d5:86:e3:6c:c2:30:09:
67:22:8c:cf:c5:6b:d8:d4:34:5c:47:8b:67:d8:f3:51:56:35:
80:05:65:d0:05:ca:4b:c6:3e:13:4a:11:6d:ab:6a:50:30:a0:
17:aa:dc:b2:3b:e1:23:1c:9b:1b:66:a8:bf:25:6a:54:80:ae:
0c:d9:f6:ef:72:5f:ba:dc:8c:94:dd:75:01:f2:86:71:91:96:
a5:ce:29:4d:9f:8c:30:77:1e:4e:78:3c:91:b2:ea:17:93:86:
16:03:b8:5e:cf:46:98:a7:4e:65:e8:96:94:23:98:d1:32:da:
20:43:cc:25:e6:7b:dc:18:1e:82:2b:12:d6:e5:26:f7:bd:89:
2c:17:7b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:06 2025 by rpki-client