Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: 8cCXVMXEgjtK5RxKbF7IC8rk7UrEuwHMF0I+5XxD2U8=
Subject key identifier: 01:5D:AA:A0:BB:8A:01:2E:A6:71:13:FD:74:37:36:9F:8F:40:FF:15
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 0199FEB4D5833B1174DA9AC410BDE58487D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:27 +0000
Manifest this update: Sun 19 Oct 2025 23:01:27 +0000
Manifest next update: Mon 20 Oct 2025 23:01:27 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: Zos0rlYkPUFBJEubIhTDcIZbvtOWsWgmZ2v3em1+M74=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d5:83:3b:11:74:da:9a:c4:10:bd:e5:84:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Oct 19 23:01:27 2025 GMT
Not After : Oct 20 23:01:27 2025 GMT
Subject: CN=015daaa0bb8a012ea67113fd7437369f8f40ff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:9a:79:52:39:df:3b:81:f7:78:33:d9:6a:
2d:c1:b7:f5:a2:b4:0a:44:d7:29:a0:de:5f:3d:6f:
27:63:9e:b8:76:8f:7e:08:a8:28:2e:22:9a:41:ce:
9c:cb:b7:0e:e7:12:43:99:1e:49:7e:04:82:c0:00:
58:08:6e:f0:c0:fb:6f:a4:b6:0a:91:1f:4e:66:31:
9f:60:39:b5:95:cf:69:a5:0f:2d:b3:27:ec:f2:53:
ce:9a:3d:38:13:6d:be:6c:8a:08:25:c8:db:fe:36:
1c:78:00:43:9a:d4:fd:fd:99:5e:82:0a:e3:81:fd:
a0:ba:1e:e2:cb:39:fe:91:a6:36:e3:48:e5:12:29:
3b:45:99:29:2d:b8:09:5c:74:77:d3:35:22:f2:a9:
a3:ec:57:ab:98:2d:bb:e9:0f:dc:72:c3:f7:8c:de:
b1:e6:ef:18:e8:26:e1:b9:88:2e:74:50:11:e0:4b:
b7:b3:fb:ed:2c:10:69:47:82:8b:a0:65:e4:78:d9:
09:30:af:18:e2:4c:dd:e2:2d:39:a4:bc:e1:39:7a:
1f:ef:48:39:44:97:b1:a1:aa:25:ff:95:b5:09:03:
ae:b8:43:63:e2:a5:d6:23:42:e5:68:f0:51:59:0b:
60:39:94:a4:54:7b:0b:ee:d6:7b:7c:21:b2:17:20:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:AA:A0:BB:8A:01:2E:A6:71:13:FD:74:37:36:9F:8F:40:FF:15
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0b:0e:47:27:4e:6d:d7:06:f1:b6:24:ed:19:9b:7a:8c:20:
aa:14:c2:06:f5:df:89:de:a7:07:c7:1b:e2:b1:ae:fa:4c:e0:
15:23:4e:54:b8:38:7a:16:50:29:4d:ad:8f:bd:96:16:2f:16:
fd:59:ba:38:82:74:9a:56:2b:ee:d4:9b:b2:a2:3a:85:04:6f:
df:f7:af:50:c9:7a:e3:1d:79:fb:bf:b4:84:11:ce:be:4e:92:
f2:0c:8d:20:f7:7d:fb:5b:4c:f0:b0:0f:7f:d3:24:cb:7c:84:
6c:63:08:f8:d8:39:d6:ff:bc:23:00:c1:b9:04:60:8e:24:6f:
b0:c7:ce:c1:fb:14:ea:d7:ba:74:45:a6:f2:4a:bc:fa:0e:8a:
1e:2f:66:00:b0:e4:6d:e5:8f:91:73:10:27:56:7f:d4:f9:9b:
c5:71:c3:d4:8b:e7:7e:78:07:80:6f:22:58:40:33:d6:2c:0a:
0d:78:5e:ab:0d:ff:3f:26:01:5f:68:43:fe:c7:19:7b:26:1f:
b4:5c:7b:a3:85:78:2f:ce:e0:b2:e0:0a:19:12:28:c6:3f:eb:
44:53:b0:f0:b6:27:90:3f:4c:a6:2e:08:58:e7:2f:52:7a:83:
c6:04:cc:38:fc:45:00:7d:21:38:70:5b:29:3a:c4:5c:d9:60:
fe:7b:83:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:29 2025 by rpki-client