Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: Xi9TrC60D6ZYtFj7J9TX285munt/IMBlhUw/JpesrFI=
Subject key identifier: AC:25:CA:D1:CC:32:BB:81:D8:EC:96:B4:8F:D6:8B:E1:CE:E7:CA:43
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 0199C6B3BF8B782D74712548DC0D2E20AB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 02:01:32 +0000
Manifest this update: Thu 09 Oct 2025 02:01:32 +0000
Manifest next update: Fri 10 Oct 2025 02:01:32 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: sUnD6Zukj6gUj6TTomqCbHIdW/nIPiCoSrWI1OV83Fw=)
2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:bf:8b:78:2d:74:71:25:48:dc:0d:2e:20:ab:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Oct 9 02:01:32 2025 GMT
Not After : Oct 10 02:01:32 2025 GMT
Subject: CN=ac25cad1cc32bb81d8ec96b48fd68be1cee7ca43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:22:c1:53:14:75:27:d0:b6:8a:51:33:25:
b2:7e:ef:12:38:5c:4c:ed:0e:ef:53:e5:02:6f:ab:
35:ba:99:f9:78:8a:70:4f:bb:ad:c9:cb:c0:e7:7b:
ba:7f:d5:9f:5e:25:0a:aa:43:a6:fb:83:24:27:5b:
2f:56:98:b6:89:67:60:d5:df:c6:bb:33:43:7c:09:
49:4f:8e:c9:2b:d8:64:f8:2b:34:1d:fd:61:3a:08:
bc:21:b3:08:df:f6:19:66:8a:c4:9d:e3:58:8e:00:
2c:da:29:dc:33:11:0e:16:8e:e7:5a:b8:57:f6:fd:
84:e3:35:09:2e:2c:2b:1b:43:cc:4e:57:9a:72:00:
c9:ca:1b:31:c0:b1:ae:06:bf:04:f3:f9:ff:20:25:
71:2d:a8:f6:b3:60:09:cf:26:c5:aa:12:34:dc:06:
00:5a:65:04:d1:20:8a:26:27:ef:ee:63:0c:f9:68:
5a:c2:ae:cf:dd:42:3c:4b:0d:a9:b0:71:f7:72:52:
dd:69:47:d3:bb:72:cf:ae:2d:3e:73:0c:c4:46:d5:
73:60:ba:7f:ce:7a:59:b9:da:6b:c8:12:42:4a:20:
ef:17:85:b1:0a:cb:fd:a9:19:ba:44:4a:26:e4:2f:
cf:9d:8f:1c:ba:65:99:9d:79:12:da:60:87:16:d3:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:25:CA:D1:CC:32:BB:81:D8:EC:96:B4:8F:D6:8B:E1:CE:E7:CA:43
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:5c:ea:42:e4:e5:3e:66:03:ac:a0:2b:a4:a4:81:4f:3a:
61:bf:2b:f1:89:3b:9d:c1:5c:96:f2:0c:65:77:6d:77:dd:89:
1f:18:5b:ac:0b:c7:1c:56:01:d0:4f:02:ef:c5:19:3b:48:82:
31:db:bb:db:6c:54:bd:76:7d:c4:62:6a:f7:0d:49:c0:06:dd:
2e:6c:33:0d:f8:d9:e4:ab:05:13:dc:d8:b3:23:90:40:8e:ce:
e2:f9:80:2b:c3:d7:7b:5e:ca:0f:7c:8f:51:94:b0:c8:9c:5f:
63:b6:aa:5f:94:c7:a0:07:ee:38:2d:fb:02:ae:b0:79:eb:6b:
dd:65:d2:50:c5:16:14:c6:95:f7:a7:c3:8f:75:f5:c8:db:8a:
f2:bd:5b:97:53:01:51:49:5a:51:ef:6b:3a:02:75:7a:17:8e:
e7:2c:2b:a1:e3:e5:0c:9e:ab:46:65:22:45:b9:bc:b1:61:ee:
54:c3:85:31:15:b2:55:f7:17:88:0c:96:3b:84:f2:4f:ad:86:
42:0f:f0:e9:ea:2e:b2:03:25:6e:49:76:8f:1b:9b:30:4f:58:
b0:06:2f:ce:71:61:08:79:6e:0e:37:48:de:e9:63:8d:18:4f:
44:52:42:9f:7c:62:38:59:5e:33:7f:0b:58:5f:26:8b:06:83:
60:9c:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:18:31 2025 by rpki-client