Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: 8qPgYcubJZvR0S+/t9KpkZasGOO8q5Zc2C9+JNDN8bE=
Subject key identifier: 84:B3:EC:CD:ED:08:13:5A:8D:BE:6C:73:F5:68:10:3D:03:B2:54:DC
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 019A1CBFB19B1F06931E6E2D35C7B35C4908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0A9D
Signing time: Sat 25 Oct 2025 19:01:55 +0000
Manifest this update: Sat 25 Oct 2025 19:01:55 +0000
Manifest next update: Sun 26 Oct 2025 19:01:55 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: iY16XBqML2NOoQGnlrQciqEMyL9RrFM7h9XTgKJts8c=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:b1:9b:1f:06:93:1e:6e:2d:35:c7:b3:5c:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Oct 25 19:01:55 2025 GMT
Not After : Oct 26 19:01:55 2025 GMT
Subject: CN=84b3eccded08135a8dbe6c73f568103d03b254dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:5a:7b:06:55:db:99:32:4f:09:aa:23:42:
0e:f8:8b:d0:4d:a8:11:6b:0c:7f:be:fb:b5:ed:e6:
4c:ab:75:06:4d:f3:86:eb:08:e5:82:c9:2e:3d:1f:
f4:4b:74:92:11:5b:19:17:3b:29:d4:4a:8a:9a:83:
e4:6d:f7:13:05:46:4c:1d:97:62:aa:c4:67:b3:ea:
25:66:bf:d4:fa:3c:f2:57:f0:42:3f:c4:f5:0b:66:
07:c4:a1:93:44:97:d0:73:3a:1d:5a:d9:85:a2:7e:
42:50:a0:c7:f9:12:29:98:63:29:93:b1:17:8c:39:
66:c7:d3:68:ab:03:d0:e8:99:4f:1f:be:53:30:64:
cc:05:c7:0e:82:75:83:78:69:2e:76:b6:1f:7e:33:
e3:3f:3f:06:75:8a:44:cf:4d:c3:de:4a:7f:01:fa:
cb:83:17:31:b1:b5:71:40:b2:a0:98:cb:dc:b1:07:
38:2c:c2:47:23:c7:d7:b1:98:6e:94:da:06:be:62:
97:57:31:3e:7c:1b:21:67:24:3d:7d:91:ae:91:f5:
f3:47:98:44:df:90:cb:18:5a:b7:96:17:eb:3b:32:
37:a0:9c:85:ed:8e:5a:a4:78:8d:bd:39:13:1c:c3:
30:36:6c:b7:f0:26:30:5c:e9:fe:c3:be:40:5c:b7:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:EC:CD:ED:08:13:5A:8D:BE:6C:73:F5:68:10:3D:03:B2:54:DC
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:be:a6:de:f5:70:24:07:48:8a:02:22:2e:2a:c7:27:a4:d3:
5d:88:39:6a:06:73:bd:97:ad:c4:ca:5b:a9:51:eb:aa:89:a4:
1c:66:00:12:d2:24:97:fa:e6:a8:73:2e:0c:af:83:59:aa:72:
4e:ff:61:41:e0:4f:65:6a:b0:5e:ef:f4:76:0c:42:bb:10:f2:
de:d5:58:3f:b1:f8:2e:54:d3:36:38:82:84:08:d7:39:2d:4c:
4e:26:5c:ed:5c:6f:de:97:69:c9:08:6d:8f:d3:5c:a4:63:47:
7f:c7:29:a2:1a:59:0f:79:81:77:b8:32:f2:18:f3:6c:58:0c:
3d:58:fb:22:5f:db:52:cc:6d:41:16:f9:80:51:da:d5:d4:25:
7d:46:6f:36:03:0f:35:a7:27:46:82:42:ce:b3:c2:28:32:f0:
3b:fb:4a:82:f7:d6:dc:18:48:8a:2b:21:d1:7f:fb:bf:15:17:
cb:7b:8d:59:2b:19:f8:ef:4a:12:0d:4e:fe:28:76:47:84:32:
79:99:1c:b1:f7:b5:6d:8d:da:3c:b9:8d:14:e7:14:d7:06:72:
3c:ce:56:3e:9d:40:e4:b7:10:0f:2c:47:bb:4b:a4:3e:d3:d9:
26:c2:f8:80:17:5b:04:4b:d5:eb:ae:90:84:7e:e7:e0:2d:20:
a7:77:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:50:40 2025 by rpki-client