Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: G7eFD329IPPW2kAkMxx1q/UHtTSBRsNon0YpvqVgpM8=
Subject key identifier: E1:1D:73:DC:B3:A5:E0:8D:AB:52:4C:73:6F:78:C6:DF:6B:D6:A0:EE
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019A1CF52FF9EF13EBBFF6934537F13896F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: FE
Signing time: Sat 25 Oct 2025 20:00:21 +0000
Manifest this update: Sat 25 Oct 2025 20:00:21 +0000
Manifest next update: Sun 26 Oct 2025 20:00:21 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: XtyLMlVSbCICKAgV6dSLh5g8a70qIaWYeNogofq5QY0=)
2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=)
3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:2f:f9:ef:13:eb:bf:f6:93:45:37:f1:38:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Oct 25 20:00:21 2025 GMT
Not After : Oct 26 20:00:21 2025 GMT
Subject: CN=e11d73dcb3a5e08dab524c736f78c6df6bd6a0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:b2:58:a2:b9:91:f4:6b:84:56:be:9c:3d:
e6:83:ce:a6:4f:39:1c:c2:db:00:1d:fb:83:86:b3:
84:f6:3a:a8:18:3d:06:b5:49:d1:38:c8:df:56:e3:
5a:75:82:cc:45:df:c0:d8:fe:93:cd:ce:66:50:72:
36:72:17:12:33:be:50:9b:a1:76:72:d0:36:d4:8d:
03:cf:07:49:de:a3:4b:66:47:7d:66:39:c6:6b:17:
da:fd:8a:a0:5f:51:6c:82:73:f2:33:d3:34:75:92:
96:90:ef:59:22:74:f1:62:1b:2a:ab:34:80:f6:a6:
2b:ce:3b:86:0c:14:7b:77:1f:bf:20:80:bb:43:04:
b5:f4:3b:16:e9:2d:27:a5:fc:d7:a4:f9:00:ee:54:
ed:a3:15:09:18:1d:d0:52:eb:20:e2:c4:bd:58:02:
d5:92:7d:d9:44:66:f7:64:6b:fb:14:d4:bb:77:06:
f6:6b:80:6c:86:aa:d7:63:2f:a1:43:f0:2e:c5:4c:
b9:07:a1:7a:69:16:c3:f5:a8:7e:79:b4:4d:87:35:
0b:18:db:a5:92:85:18:9f:82:10:2f:3f:3c:4a:1f:
1e:cb:37:23:a4:a7:b1:03:8c:55:ab:2b:de:43:47:
2c:bf:93:79:a7:0a:27:a3:76:7c:ef:c4:0a:4a:0e:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1D:73:DC:B3:A5:E0:8D:AB:52:4C:73:6F:78:C6:DF:6B:D6:A0:EE
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5c:87:c8:3f:5f:f5:70:80:25:18:c0:b0:df:a4:20:ae:5a:
79:1a:d5:23:3b:fe:72:39:c3:dd:cc:8f:3d:5f:be:12:cd:28:
8d:4e:d5:e6:1f:23:ed:2e:51:20:bc:e8:bf:64:98:51:55:2d:
d6:38:3f:5c:7f:b4:f1:a3:24:67:f3:a2:9f:9e:c8:c1:12:08:
fa:b4:57:91:53:5f:f7:73:a0:3b:25:b5:3a:f3:79:0d:e6:31:
d2:b2:58:75:83:e0:6a:6c:c6:e7:9c:90:0b:10:c2:31:07:78:
09:6b:72:01:6a:7d:3c:5a:f2:cb:bb:fb:71:09:30:d5:e7:90:
ab:1f:59:91:8f:3e:b3:79:51:a9:44:30:02:b5:22:9b:f0:5a:
e7:ed:14:d3:1d:c9:89:7d:2b:73:bb:c8:e1:c2:80:75:f6:a1:
6d:38:1b:34:7e:ef:d0:c5:42:09:23:d5:26:f5:37:a3:0a:e5:
61:21:32:fe:3e:e5:1a:4f:01:9f:1e:f2:13:aa:cb:f4:07:66:
5a:90:6b:48:74:e3:68:1f:db:1c:83:54:80:71:2c:d0:44:60:
fd:7d:30:9d:f4:c6:eb:15:bc:fe:bc:51:79:5b:96:4e:a6:fd:
92:e6:ed:0d:7d:ec:de:a5:3e:43:55:3b:de:4e:de:3f:6f:cb:
84:eb:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:36:32 2025 by rpki-client