Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: ddLRjf4sIjjBCxFc/3l2ICHhnH1jn+X/lRD+0MD9gPs=
Subject key identifier: C1:5D:41:0E:A7:97:DF:E3:87:3F:4F:BD:B7:08:B0:4B:8A:F0:88:71
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 0199FEB4AF00D7E79B2E121529151D5F5322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 139A
Signing time: Sun 19 Oct 2025 23:01:18 +0000
Manifest this update: Sun 19 Oct 2025 23:01:18 +0000
Manifest next update: Mon 20 Oct 2025 23:01:18 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: TQQV0+/pYyHKwpg5sVHwzHlww4AooNNpVCNv41ruj7s=)
2: OwskQb4uWXAM3BST7CyJITEmG0A.roa (hash: kimIk4ViTfOZBO8RES3wd5ZfNkXzL5WJCpaQ5TXVjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:af:00:d7:e7:9b:2e:12:15:29:15:1d:5f:53:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Oct 19 23:01:18 2025 GMT
Not After : Oct 20 23:01:18 2025 GMT
Subject: CN=c15d410ea797dfe3873f4fbdb708b04b8af08871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:5f:cc:d8:b0:69:5d:75:7d:02:cf:30:0a:
54:cf:59:ec:a3:95:3a:7b:95:c4:e5:1c:80:2f:94:
98:54:54:88:cd:b8:47:76:f3:9f:ff:17:a5:b1:d8:
89:49:5c:a0:fa:53:7f:e5:ea:43:74:54:9a:96:67:
80:44:d6:93:61:5a:f1:bb:3f:a0:59:9d:ad:cb:f6:
4d:2a:a4:40:8c:20:4d:53:97:aa:8d:45:7d:8a:04:
7b:4c:71:bf:c9:4f:b6:ea:83:89:06:e5:1c:69:ab:
b1:46:65:8f:3f:b4:12:5d:87:db:f8:d5:77:eb:2e:
79:96:fc:c5:7b:05:7a:20:fb:2d:92:08:99:d9:9b:
3f:35:f8:b0:b6:3b:8d:8b:34:c4:e5:ac:a3:ef:40:
ca:1b:e9:ac:07:90:10:b8:1a:21:2f:53:08:87:81:
bf:93:99:46:ee:bf:f3:77:b1:f1:30:a1:24:85:67:
17:06:96:5e:02:db:46:53:8f:9e:a5:1f:e2:5a:09:
ca:fc:d0:16:7d:f5:30:84:19:fa:9b:fe:d8:8c:8f:
32:97:66:31:c2:a7:00:00:a5:8b:67:74:2b:f4:65:
5e:52:90:65:a8:b8:1d:84:2f:f0:17:1d:2f:80:25:
8e:d2:ed:8d:a4:b3:78:30:de:c9:55:7a:00:b9:c8:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5D:41:0E:A7:97:DF:E3:87:3F:4F:BD:B7:08:B0:4B:8A:F0:88:71
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ce:39:a5:09:b5:1a:85:09:15:dc:f5:21:2e:06:32:b3:18:
72:55:27:09:20:6c:ca:de:f3:f5:01:4b:af:bd:01:25:0b:59:
5f:bb:d6:31:7a:2c:50:3b:2b:68:b2:21:be:7f:66:a2:38:4e:
07:69:b8:1b:30:4d:bf:51:fa:27:c9:dc:38:74:1a:cf:de:77:
37:67:20:96:8e:85:73:ab:c9:32:a7:2d:d5:03:5d:b4:b5:ed:
1b:1d:8c:ed:f0:b3:75:e5:17:bc:45:25:39:c5:bf:72:d3:1a:
c9:b7:ec:34:5c:d4:8f:6a:5b:79:5f:f8:68:12:23:c7:b4:ac:
c2:3e:f6:bd:f3:c0:50:8e:9b:32:45:32:db:ba:76:6a:b0:25:
a1:d0:e8:ac:0e:d1:49:a3:92:f6:26:d8:9c:1d:b8:e9:7f:0b:
ac:ca:c7:f6:58:c0:0b:8f:6f:90:39:e9:03:1e:f4:29:00:fa:
74:73:7c:65:7f:51:ad:6e:22:40:8f:64:42:1f:2c:d9:95:56:
d9:1d:a7:89:d9:a6:bb:0b:71:3e:98:48:71:b6:ad:1b:da:9a:
19:b9:a9:a0:74:a6:f9:9e:10:d6:05:e1:5a:8a:d7:f0:d1:45:
7b:90:6f:74:ce:43:bc:31:76:5b:e8:a8:46:4a:a1:aa:ac:9c:
dc:c6:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:09 2025 by rpki-client