Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: +9y9ZjQ6plQ1eb85cjCMAsETYB6NgJL03R3HEIBqUow=
Subject key identifier: 99:BF:BA:3C:51:76:ED:90:3F:6D:0D:AB:6D:A3:03:AF:B0:35:FA:E2
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019A0AEEFA0CD60EBAEB6EE5060F6558F833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 08:00:24 +0000
Manifest this update: Wed 22 Oct 2025 08:00:24 +0000
Manifest next update: Thu 23 Oct 2025 08:00:24 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: eFEqc6dvNInpe/HnDYh/pg8XbzKumR3os0RO9sikMeU=)
2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ee:fa:0c:d6:0e:ba:eb:6e:e5:06:0f:65:58:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Oct 22 08:00:24 2025 GMT
Not After : Oct 23 08:00:24 2025 GMT
Subject: CN=99bfba3c5176ed903f6d0dab6da303afb035fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:10:52:09:5a:e0:b2:33:fd:fc:9e:2f:ff:
ec:6b:8c:20:2d:04:59:88:f9:9d:3c:13:54:dd:83:
58:54:b6:9d:99:3d:97:6b:97:07:a6:c2:57:01:0f:
98:3e:b7:82:6d:82:5a:6c:ec:d3:3f:b8:98:7a:f6:
f2:33:01:27:ae:1e:57:62:7c:e5:33:93:4a:7d:8b:
7a:4d:bf:21:52:fa:51:82:5a:22:fd:fe:c0:4c:ed:
10:08:0a:e9:66:f7:d6:1c:2c:a0:1e:b0:ad:52:4f:
4b:99:76:95:a0:cd:aa:46:39:62:e7:8d:30:8d:58:
3b:c7:ee:ea:3f:4c:a1:23:02:28:5c:8a:08:10:61:
32:28:a8:8d:ea:5e:5c:59:13:48:9b:ca:6d:d1:c0:
4a:79:db:9c:eb:47:6a:ef:06:8d:bf:d9:85:c9:67:
7f:e1:7d:4b:ee:ab:42:f6:d2:35:18:a8:5e:87:cb:
87:dd:33:d9:6b:f8:35:58:ab:a2:6e:db:b1:04:49:
f0:76:24:d5:dd:6f:6e:e4:c0:57:c2:d8:63:db:99:
e5:87:97:d1:fb:c1:41:49:0b:56:88:f1:03:34:22:
91:19:ed:0c:8c:d5:cb:7d:e8:02:b5:0c:91:b7:5f:
bd:02:73:1a:59:fb:0d:25:ca:65:29:cf:ce:4c:39:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BF:BA:3C:51:76:ED:90:3F:6D:0D:AB:6D:A3:03:AF:B0:35:FA:E2
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c8:2f:06:d9:e2:6a:3a:17:4a:c5:ab:e3:50:18:6e:2f:2e:
85:fc:af:1b:aa:36:1c:8c:4c:1c:12:98:ed:ba:35:46:c0:9e:
bd:fc:89:da:d5:94:9b:f7:3a:22:6a:ba:7f:23:1e:e2:e2:c7:
47:9a:3f:d5:9f:78:7b:cd:c0:96:2d:d1:21:2b:05:4c:4c:4c:
0d:92:72:b0:f5:fc:4e:94:87:de:1c:2f:c0:5c:35:d4:35:57:
94:ca:71:18:a8:91:c4:de:91:3c:dc:cd:fa:ae:de:a2:72:ba:
fb:64:4a:07:53:5c:f9:09:73:45:f1:03:af:b7:dc:81:e0:38:
2e:67:4d:b4:5f:6b:8e:0f:ae:10:86:a8:c1:19:3b:8a:6e:f5:
c0:47:93:8f:84:70:ea:37:e8:3d:12:05:58:a6:f9:af:24:92:
b7:33:77:e4:c5:84:49:b4:cb:50:8e:ad:08:35:58:ad:4d:21:
d9:77:b2:dc:85:06:41:40:e7:28:84:43:bc:8c:44:72:53:cf:
08:40:e4:50:9c:df:2c:e9:78:73:31:a3:4c:16:a7:00:17:ed:
00:bc:9a:91:cc:fe:51:95:19:a1:34:84:80:be:0e:ab:a9:d5:
dc:ef:00:5d:90:74:34:66:19:8b:12:70:37:26:bf:41:de:96:
b6:1d:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:45:21 2025 by rpki-client