Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: +d0uqMhdo7f5hCCYF88rYj4rloUvCEKOAbx3cASZ3XY=
Subject key identifier: 89:DB:AB:E6:F9:4D:34:A9:DF:3E:32:58:98:82:E3:64:0E:44:23:4D
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 019A21E48C0EAF3AA6EC1CDFA2C6EE00EFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 19:00:17 +0000
Manifest this update: Sun 26 Oct 2025 19:00:17 +0000
Manifest next update: Mon 27 Oct 2025 19:00:17 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: 5VqlpfwIojBhMq0JJlC+0bUMS9u2I8Q/u1Uz+6M7Hgs=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:8c:0e:af:3a:a6:ec:1c:df:a2:c6:ee:00:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Oct 26 19:00:17 2025 GMT
Not After : Oct 27 19:00:17 2025 GMT
Subject: CN=89dbabe6f94d34a9df3e32589882e3640e44234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:43:84:5f:f8:f4:8d:e2:a2:09:12:ff:0d:
9d:49:12:aa:ab:05:6b:e8:ec:87:e2:cf:98:b2:4f:
4d:81:7c:7d:4c:2b:10:4c:e3:2b:94:00:e9:38:91:
92:95:0c:1d:49:b3:5e:70:8a:2f:11:15:aa:01:e3:
8c:27:ef:e2:e9:bf:15:a9:74:75:b1:aa:19:80:3f:
63:82:f8:6f:19:19:bd:4a:be:e6:ae:f5:83:de:4b:
fe:43:8a:8d:53:2c:02:d0:b2:38:7a:6f:21:a8:51:
cd:44:da:52:4e:4f:2c:7f:a5:8e:d0:67:83:89:9c:
c7:27:62:84:5d:fe:07:f1:37:6a:8e:9d:be:33:fb:
62:97:36:4c:64:b6:ad:0e:a4:db:ac:a9:31:96:ff:
51:c6:ad:41:71:69:92:87:04:99:3a:a5:5a:a4:f1:
67:96:e3:e7:87:ee:88:10:16:14:a8:74:b8:67:58:
46:61:79:41:07:28:20:2a:65:91:b8:53:6e:4b:e8:
b0:46:33:5f:ed:ab:d4:11:a4:a5:88:30:f9:b9:be:
98:eb:f1:a2:8a:e7:77:e1:e2:21:93:51:99:9c:15:
dd:82:4a:ed:d6:89:c1:26:c1:dc:07:fd:11:a9:69:
bb:23:82:6d:f0:64:92:9e:ee:ca:29:77:04:56:fd:
f3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:AB:E6:F9:4D:34:A9:DF:3E:32:58:98:82:E3:64:0E:44:23:4D
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:01:ea:c0:2b:77:63:75:39:7f:bc:68:7b:85:fb:2e:b1:
e8:35:9e:9c:3a:95:a9:88:e5:c2:a3:a1:3c:04:da:95:c2:63:
cb:bd:2f:9b:df:cf:70:a3:9c:2f:2c:43:60:34:1c:25:0c:3e:
d2:ec:aa:ed:85:ff:ae:18:0e:6d:af:d1:cb:e2:75:14:9c:4f:
b1:9b:4b:e0:26:87:2c:43:e6:5e:c6:ba:6e:9c:8e:6f:d1:44:
c3:40:3b:e1:06:bb:a3:b5:bf:d5:5d:80:87:1b:03:39:9c:27:
76:7d:3b:8a:3b:42:a3:f2:24:52:cd:f1:b0:60:8d:3b:c2:72:
12:4f:4b:3b:c7:33:30:a9:11:a8:20:3f:06:32:ae:a9:00:3f:
f6:11:60:d4:39:cb:8d:c9:32:4f:bd:64:27:f6:65:5a:0e:0d:
d6:6c:46:03:6c:e6:6a:0c:68:86:ff:0d:38:e8:04:33:d4:58:
a0:19:fa:9f:86:f7:8b:4f:e8:27:18:30:f4:47:97:a7:97:11:
2e:17:ac:4e:6c:ff:f1:c6:aa:32:cb:b8:70:4f:fd:49:99:15:
ce:9e:45:dd:75:7d:1d:bb:98:e9:5a:3c:af:01:92:4d:da:90:
a2:3c:61:95:64:6f:52:11:9d:b3:6f:da:9b:b6:b9:0a:d9:cd:
8f:34:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:34 2025 by rpki-client