Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: Y6TfjV2sWO52MUjO2mY6D1UALBwlHka18jh/IeGL0k8=
Subject key identifier: 24:0E:16:CC:A6:DD:96:C6:A8:C6:8D:5C:12:C5:55:AB:89:A0:6D:79
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 019A1F518C8AEE65C7DCD1DB2EAF6A9EA6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 07:00:29 +0000
Manifest this update: Sun 26 Oct 2025 07:00:29 +0000
Manifest next update: Mon 27 Oct 2025 07:00:29 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: KfHMoDsvdpnSPGqkYp6ic5buORiPL/DfiPIFMMRd7O8=)
2: 8iGd8L0j6FHu_yxVIMTG7nGhl2o.roa (hash: EtgX9wLO5CJtBR8PjzUlWKaAZQPPQAmS6LoUZ8zB8hc=)
3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:51:8c:8a:ee:65:c7:dc:d1:db:2e:af:6a:9e:a6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Oct 26 07:00:29 2025 GMT
Not After : Oct 27 07:00:29 2025 GMT
Subject: CN=240e16cca6dd96c6a8c68d5c12c555ab89a06d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:98:46:2d:25:45:7d:ad:66:a2:f5:23:e8:
6c:44:d7:81:9c:82:29:aa:af:c4:62:77:06:03:1e:
00:da:97:7f:86:6a:7f:24:e2:01:54:63:76:15:33:
a4:aa:f6:05:4f:7e:4f:f0:6c:01:1d:f2:76:74:46:
dc:96:3b:02:b3:eb:f1:3e:11:a7:81:50:29:fa:c9:
fc:a4:bc:f4:84:24:7f:4d:f5:fa:df:10:36:e8:8f:
bb:17:f0:c2:d8:17:69:ec:f7:0a:ab:df:a7:16:a3:
59:bd:f8:0c:de:5a:a8:74:4f:cb:32:15:27:3f:c9:
3b:d9:6c:8b:52:88:0e:58:9e:85:69:da:6e:cd:a8:
8b:0a:36:87:a2:aa:48:cc:43:9d:b7:55:31:8b:03:
12:c3:06:75:b1:f7:23:4f:89:b4:35:5d:54:d5:1f:
c2:46:ba:9b:36:98:53:f0:cd:fd:1d:5a:cd:cf:d9:
e2:af:9f:bc:4d:34:2c:d3:d6:8e:18:04:bf:90:d9:
f8:08:a5:3b:54:ab:34:3a:b9:b9:92:17:03:6e:52:
3f:cc:d8:04:b1:f8:4d:23:80:6b:58:f6:e2:c3:b5:
1a:63:5b:d0:ad:38:8e:28:30:ba:1f:92:b1:ba:cc:
6e:6c:4e:50:b6:c4:ac:e3:de:4c:0a:4f:0a:3f:53:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:16:CC:A6:DD:96:C6:A8:C6:8D:5C:12:C5:55:AB:89:A0:6D:79
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:e7:8f:cb:f9:f8:80:09:7b:bc:e5:3e:b3:4f:d4:52:c6:
a5:ae:3d:1e:c3:a6:c5:76:bb:d1:96:0b:f7:60:91:be:e2:5c:
83:a9:8b:c1:c2:3c:2f:50:23:d6:91:2b:43:45:0d:31:e7:ef:
1b:f8:25:a6:38:58:52:8b:b0:e4:58:ee:4b:de:84:eb:68:37:
79:d3:51:37:31:fc:36:2a:97:88:37:6f:c8:70:cc:ac:b9:5d:
b7:39:e8:dd:d6:1f:15:de:c6:b4:fa:1d:71:3e:bb:2c:a3:33:
37:87:8d:31:55:f3:87:27:dc:6e:0c:f5:04:62:ce:48:22:29:
6a:fc:04:0f:e5:c6:56:ab:c3:0f:57:64:6b:78:ad:22:89:86:
dc:90:8b:9c:d8:c4:54:93:6b:9d:99:c3:cf:c5:3e:86:7d:9f:
6b:51:cc:44:27:61:3e:24:a4:05:a5:ba:64:69:a9:b2:97:fe:
9f:32:e1:40:e7:fb:5d:06:e9:b8:fa:b5:c1:2b:97:c7:10:86:
c7:66:0d:bc:7d:fc:1a:98:41:ca:22:b2:f1:5e:b7:06:82:b2:
96:19:58:29:f9:f1:60:2e:e3:ad:70:a4:73:5d:d9:89:98:fd:
09:dc:2b:cd:73:9c:ec:6a:fe:33:ef:c6:de:18:c5:94:f0:fd:
7f:b4:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:52 2025 by rpki-client