Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File: 1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier: 7AfOnEIh0c+7F9/Bfs3WdxOJoRf1U80yTbgJmi1+eco=
Subject key identifier: 56:01:15:7F:3B:C7:DC:1B:47:C3:33:5D:F0:93:5D:40:DF:BF:F4:D4
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer: /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial: 0199FD342620CA2A17000E298CF4F5666C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number: 0DD5
Signing time: Sun 19 Oct 2025 16:01:17 +0000
Manifest this update: Sun 19 Oct 2025 16:01:17 +0000
Manifest next update: Mon 20 Oct 2025 16:01:17 +0000
Files and hashes: 1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: TXjTnZ0XCc9bztI34XOQpyH5HWWyglTWgw0bQeIR5lA=)
2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:26:20:ca:2a:17:00:0e:29:8c:f4:f5:66:6c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Validity
Not Before: Oct 19 16:01:17 2025 GMT
Not After : Oct 20 16:01:17 2025 GMT
Subject: CN=5601157f3bc7dc1b47c3335df0935d40dfbff4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:15:94:d1:b4:a8:11:c7:4a:c8:03:aa:1c:
3a:f5:f3:71:c1:42:a7:03:fe:62:08:67:4c:d5:63:
3b:7a:71:0b:9f:88:a1:6b:1e:60:9b:5c:73:97:d5:
43:48:53:98:5f:08:88:91:54:69:71:49:d5:98:ee:
35:9f:a5:2d:fe:62:7d:87:5c:73:06:3b:97:99:fd:
bd:04:39:e4:b6:76:d3:1d:65:92:fe:87:25:1f:15:
47:7e:71:6d:5b:d5:99:3d:e1:17:60:28:12:eb:a7:
c0:7c:a2:a2:db:0a:65:62:06:3e:d1:ee:1a:d4:34:
5a:34:77:76:36:47:77:31:3b:b6:6a:c7:06:8a:9e:
fc:67:73:af:4e:0c:2e:41:41:30:2b:a6:ef:d5:ab:
9b:f7:16:33:d5:26:ca:00:c3:c6:11:fa:18:8a:b7:
09:78:b0:ea:82:fe:a6:ce:cc:70:9a:0c:43:58:60:
df:e3:35:40:07:2c:3f:bd:32:b4:9f:fc:64:20:de:
91:00:b5:bb:d9:90:21:12:ef:58:e2:46:13:0b:a4:
77:b7:94:94:e8:ba:89:aa:f6:a8:9d:bb:d8:ca:28:
09:8b:b2:bd:61:60:c9:c7:03:cb:ac:2d:12:93:6a:
26:04:3e:40:e8:0c:cc:71:06:46:4a:e7:b4:aa:3c:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:01:15:7F:3B:C7:DC:1B:47:C3:33:5D:F0:93:5D:40:DF:BF:F4:D4
X509v3 Authority Key Identifier:
keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:50:b8:db:67:50:9a:97:5b:24:6a:22:83:92:3e:55:62:45:
39:1c:8c:b3:70:fe:fb:05:38:0a:cd:bf:c1:1a:ef:07:ea:e7:
02:0d:c4:cc:fd:ee:2e:d0:9b:29:84:56:72:72:a9:f0:e0:ff:
8f:91:73:92:4a:6f:f7:7d:db:6b:ed:41:38:27:df:be:ad:a3:
34:a5:43:57:97:53:ab:27:98:58:2b:ef:bd:b1:ba:3d:e9:3c:
dd:04:94:97:24:b4:d9:c2:7a:1f:ac:0b:0b:8b:6a:0a:7f:bf:
c3:a7:b9:f0:6f:26:58:f9:00:5d:3e:7b:06:6e:87:dd:88:c7:
3f:e5:b4:2d:b7:5b:5b:10:dc:e2:24:bf:6f:8f:f3:cd:de:05:
05:ef:f4:7a:22:de:b1:5e:82:72:cd:b4:09:f0:c2:ed:5a:65:
8f:ae:d7:2d:5b:74:4c:de:fe:cd:a9:b1:75:af:90:fe:1e:1e:
dd:c2:ff:f9:25:db:fa:50:bf:c4:68:e2:1b:55:bc:07:de:67:
4f:8a:99:c1:64:fb:3f:01:9c:27:3e:cf:26:38:04:84:11:f6:
34:dd:1d:ba:55:c0:05:b7:db:4d:49:b4:38:f5:71:1d:3d:26:
49:fe:6d:44:8f:0c:21:81:91:4c:32:e5:6d:9a:e4:6f:f4:f6:
83:d8:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:40 2025 by rpki-client