Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: vq3DX2IomjlBQramLrqamsO/L3dalYUm7Ro0jjwaQDQ=
Subject key identifier: D0:0B:86:B1:09:D8:82:86:70:26:A9:65:63:54:7F:23:3C:CF:0F:6A
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0199EFE69F02016DCB8598A32350E2C02D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 16E1
Signing time: Fri 17 Oct 2025 02:01:32 +0000
Manifest this update: Fri 17 Oct 2025 02:01:32 +0000
Manifest next update: Sat 18 Oct 2025 02:01:32 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: dcwiBhUli2uCF+SEIqqa3MfoissJUEFiwD0kx4P+5Fc=)
2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ef:e6:9f:02:01:6d:cb:85:98:a3:23:50:e2:c0:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Oct 17 02:01:32 2025 GMT
Not After : Oct 18 02:01:32 2025 GMT
Subject: CN=d00b86b109d882867026a96563547f233ccf0f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:ff:2b:76:81:ba:4d:fa:8c:03:75:87:16:
74:05:55:2f:24:e9:1f:d5:6d:b0:d5:7e:d5:d1:ee:
b5:47:b3:86:67:c2:73:2a:e8:af:ac:df:54:a6:08:
01:58:7f:91:ec:94:30:d3:f8:1f:49:af:4a:12:b1:
f1:67:5b:38:9d:67:4c:c4:39:cb:79:cb:a5:f0:fd:
41:88:8c:e1:39:c6:2a:6a:c4:3c:eb:35:40:09:94:
e6:6a:83:af:d7:c1:9a:11:11:33:75:31:7f:ca:0d:
d1:f9:08:5c:5b:fd:3b:a5:45:34:1a:08:72:77:b3:
18:45:1e:72:25:76:f6:f5:21:b2:0c:73:6e:0a:89:
b6:a4:a0:2e:de:2c:d7:bf:3a:ac:b0:89:60:5f:65:
69:17:47:ae:f7:b0:dc:66:f2:cc:d9:f0:6b:c9:61:
f3:a4:2b:1b:63:28:3e:f2:84:8f:15:5d:b8:89:bf:
d3:14:21:81:bb:b4:5f:ad:fd:80:b3:b0:7c:26:59:
13:ee:79:62:bc:c9:a2:dd:22:65:9b:e2:9b:56:52:
82:29:56:a1:90:8c:a5:c5:a1:a1:cc:13:59:5e:68:
2c:4c:ee:bc:6f:8a:39:53:67:30:c2:c5:7a:2e:7c:
f2:1a:7b:8a:53:05:a5:ce:f2:98:82:b8:5e:e1:5f:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:86:B1:09:D8:82:86:70:26:A9:65:63:54:7F:23:3C:CF:0F:6A
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:eb:0a:27:a4:1c:34:c3:8a:c6:a1:dc:f1:a2:72:2c:45:84:
3b:45:ba:37:8b:d6:9f:66:00:a6:ae:7c:91:eb:93:17:48:7c:
24:e3:96:1b:da:9e:98:a3:59:08:77:04:77:f9:64:c2:b3:bb:
84:54:bd:4e:0f:24:46:9e:27:00:b9:6c:5b:09:76:df:40:c6:
0c:9c:eb:4f:a4:77:fd:66:38:09:de:2d:a4:11:e7:53:5c:ee:
94:53:1d:22:2c:b7:6f:58:d0:d3:b5:b2:5e:46:38:4c:28:98:
4a:e4:f9:cc:48:3e:85:5d:1a:dc:57:b1:36:0b:4c:cc:e5:34:
39:13:c3:0b:47:89:e5:47:a5:35:9a:85:5d:cd:71:61:7e:4e:
04:43:9c:05:dd:96:53:b2:b1:aa:95:be:86:43:3f:ac:bb:e4:
8a:ea:b8:59:10:4b:8e:ed:bf:8a:08:8b:21:bd:35:de:ab:e0:
7c:83:d6:86:87:5b:65:35:90:17:5a:76:a7:4b:ad:f5:cd:61:
f1:b8:05:f5:0d:4d:cf:69:13:10:39:5d:00:3f:c2:58:65:0e:
f2:97:36:0d:26:3c:b6:91:f2:77:b4:02:47:5d:2a:55:20:fc:
c8:af:5f:74:c1:e7:1c:96:00:2f:05:61:b5:0f:67:1f:da:a2:
98:d4:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 04:43:52 2025 by rpki-client