Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: OoBaw9uWvdvlspv/heqeSf2iO3/GZaQJDG+yO7H5oKI=
Subject key identifier: 5F:71:05:C4:0B:97:F6:85:02:78:D7:D4:54:1A:9C:BD:EF:0F:CF:D7
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019A006BE78E0561FEC67833CD7D665CF382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 07:01:02 +0000
Manifest this update: Mon 20 Oct 2025 07:01:02 +0000
Manifest next update: Tue 21 Oct 2025 07:01:02 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: ixxiAfndiRck6ci8HxL7tcvf0NZnQMxGUU2MbCNa0qc=)
2: VsFuiofejDNus4q-XJuiSHwgNg0.roa (hash: 5/WoOYXAxKPBmuAPhmhS3e5eFCmzTCokgMSG9illRVc=)
3: dERFn8-Y3CpN0nk9-2z0qZhw3lA.roa (hash: MMTvQ8GZkYazTAxyoZRT7syb2AL1b5sM3xApJFFdT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e7:8e:05:61:fe:c6:78:33:cd:7d:66:5c:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Oct 20 07:01:02 2025 GMT
Not After : Oct 21 07:01:02 2025 GMT
Subject: CN=5f7105c40b97f6850278d7d4541a9cbdef0fcfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:30:08:00:5d:5c:ce:d9:bb:f8:8f:76:1e:
3c:7d:a8:9b:b3:fc:f1:1e:61:20:3d:ed:43:af:4d:
26:1e:f2:7e:e2:6f:58:2d:6c:5c:f2:36:cf:d9:62:
ae:b5:a9:d6:94:fe:1e:a5:6f:a6:61:5c:d2:b4:eb:
85:b4:4e:9a:17:98:a1:4d:de:14:63:7a:ef:e5:8d:
38:5e:8f:5e:f5:66:b5:9e:fc:ca:a3:55:95:d0:29:
59:ef:dc:f2:2a:3e:76:42:72:0e:7e:d5:1d:60:f5:
7e:6c:0c:c4:18:19:29:41:e6:9b:bb:42:3e:6e:e0:
fd:3a:fa:40:46:18:be:d9:ef:a2:89:b1:14:3c:5a:
67:a5:59:53:f9:53:74:29:8f:f2:36:86:d5:42:b5:
50:4a:30:3e:8c:db:b3:e4:29:17:23:2b:15:6b:9e:
04:90:73:aa:43:5f:50:e5:29:85:3a:83:b2:18:a8:
bf:0e:98:e0:95:33:40:2d:c9:17:2e:8c:e3:e6:19:
b5:24:ad:ba:4a:25:47:15:0f:ec:3e:bb:27:ed:53:
0a:81:8a:46:ca:b6:59:83:79:eb:db:e1:58:31:6a:
88:c3:8a:1d:b3:b4:92:be:9c:a1:55:ee:e1:26:01:
98:0d:e5:0c:12:c5:e7:c9:05:b0:16:d8:a3:35:2c:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:05:C4:0B:97:F6:85:02:78:D7:D4:54:1A:9C:BD:EF:0F:CF:D7
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:23:95:e0:0d:e1:86:45:60:b7:78:45:78:ee:c9:07:86:94:
66:db:42:b6:d6:41:4c:1b:33:92:ea:c0:87:6d:97:96:33:ef:
d1:64:97:55:d6:ac:ea:0c:17:a3:24:69:26:d9:5c:4f:07:b9:
4f:da:b9:e3:30:df:ec:02:44:41:92:79:78:0a:13:a0:c8:37:
61:f5:12:80:c6:b4:0b:86:62:2c:7d:91:dd:3e:a0:c1:0f:86:
d5:e0:89:7a:47:3b:af:1f:bf:29:b0:5b:a2:4c:e3:f0:f9:5f:
b0:9c:37:80:eb:be:6e:a5:67:53:5d:9c:b3:eb:69:9f:0f:cc:
df:85:e8:23:da:01:8b:7a:56:d2:11:c3:fe:02:ff:77:68:6d:
24:73:22:56:8c:b7:27:62:a5:44:5f:aa:78:b0:ec:65:57:e3:
09:4e:f3:f3:02:ca:b7:53:ec:6f:9d:cd:3c:a4:04:d4:f1:5a:
71:78:43:67:b7:c5:5f:be:7d:7e:3f:3e:09:9c:1b:1b:15:a8:
f4:78:85:83:d5:79:da:c8:09:de:ae:4c:73:53:97:bd:97:ac:
a3:2e:00:ef:a6:94:94:d4:43:c9:ae:a6:72:01:1f:5e:94:fa:
57:ad:a9:b1:8b:9a:28:c4:e2:0f:cf:94:f5:32:61:8f:dc:7e:
40:e5:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:46:57 2025 by rpki-client