Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: ljvgtrKATH2kBEcZXH3TR5GQz+AsyaCwdbpCvN+CwN0=
Subject key identifier: 94:BD:1F:8E:C5:32:A1:D9:3E:2E:34:91:26:D3:3E:2F:17:16:2F:BD
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 0199FD348E18027B8E5BC66FE50099D22291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: QwqF+5WNvcVlwb0mQKhRvcy0TEt5JfN8Xp0P4GDfZJA=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:18:02:7b:8e:5b:c6:6f:e5:00:99:d2:22:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=94bd1f8ec532a1d93e2e349126d33e2f17162fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:8c:1a:24:ed:c6:e5:c7:a1:80:5c:c2:99:
77:b8:0c:da:8a:2d:ca:6c:6b:be:c7:b9:e2:1c:8f:
7e:41:f6:65:26:75:80:95:bc:3f:88:e5:4d:2d:6e:
88:cf:73:24:26:6e:0d:7f:da:ab:c9:cf:4e:35:8d:
ff:64:45:d6:78:11:2c:fe:ab:65:4e:b5:8f:01:bb:
5f:93:ec:10:3e:c8:69:73:62:b4:cb:8c:6a:ed:18:
8d:f1:a3:db:c6:09:37:e8:4e:77:f3:94:54:5a:02:
e0:65:c2:ae:f8:0c:fd:4a:a0:3d:bc:59:49:31:46:
e9:a8:78:a1:32:70:60:3f:73:70:36:3f:21:54:6d:
7f:97:40:40:1f:25:4e:22:01:c6:91:34:3c:cb:69:
44:1a:ac:72:b7:ed:2f:d0:34:92:74:4d:20:a3:1b:
14:c8:d4:a7:a3:e2:2c:b5:7f:8a:4e:c8:88:3e:6a:
63:26:08:00:28:a4:48:2e:b0:aa:1f:fd:35:b2:4e:
7b:ee:82:c7:0e:ce:35:27:c5:38:c5:59:d2:0f:8a:
fc:75:63:34:07:22:62:97:54:06:7b:ff:22:61:da:
7c:46:b0:c2:d4:8f:4a:1d:f4:fa:e5:ca:4a:78:95:
72:c9:fc:20:73:8d:c4:09:80:91:86:a6:11:fa:e7:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:1F:8E:C5:32:A1:D9:3E:2E:34:91:26:D3:3E:2F:17:16:2F:BD
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5d:a8:99:aa:2b:92:b2:56:09:54:41:75:48:07:e5:c8:4b:
f5:62:02:49:95:8f:9f:c0:89:28:b9:eb:ed:bb:d7:4f:77:97:
01:b1:e9:a3:2e:d7:55:82:b9:4c:4a:c0:19:e5:a9:a8:a8:79:
e2:56:af:3d:b6:7c:99:e6:f0:5b:ad:2c:69:d6:71:75:08:7f:
0b:3d:f6:44:3b:c7:b6:00:3e:bf:eb:f8:46:00:20:39:b1:47:
2a:dd:b3:4b:ab:85:85:4d:a2:67:43:b0:f6:16:32:09:a4:16:
d8:82:ff:56:ea:ff:fd:b1:b1:19:93:90:19:76:4f:88:88:60:
da:8b:8c:48:71:0d:7d:cc:cc:fb:3e:50:f7:87:fc:3d:5d:bc:
fb:f0:30:83:da:83:06:53:d8:a5:89:f3:5b:29:2c:26:38:8f:
f2:78:c4:cd:43:bf:12:7c:b1:a3:9d:73:d8:1b:ec:00:ae:3c:
e9:f3:7c:2a:03:8e:92:39:92:de:8b:60:20:dc:f3:00:77:17:
f4:4e:6d:74:48:ae:a2:1c:3d:84:43:3c:60:0a:f2:32:f3:47:
bd:4f:9c:12:07:b4:c5:84:b4:d1:51:42:a9:0c:5e:77:af:3c:
fa:a0:27:62:1c:db:30:4f:8c:06:c3:42:84:9b:bc:a6:92:f3:
92:42:f1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:18 2025 by rpki-client