Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: g3/T/efIkS6EsSWuu8VD3p0qwbOTTQ3fPZvqELvN8S0=
Subject key identifier: 8B:D8:FC:1E:B6:36:82:C1:64:6A:F7:54:F3:7A:1B:8A:8D:A4:B6:4C
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019A22F7EC4F58E2599CB9468D9F44364BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 00:01:04 +0000
Manifest this update: Mon 27 Oct 2025 00:01:04 +0000
Manifest next update: Tue 28 Oct 2025 00:01:04 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: 8981wMKeortoRgfKhfmacJ/C8tYcc1dkVurlsRelGWM=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ec:4f:58:e2:59:9c:b9:46:8d:9f:44:36:4b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Oct 27 00:01:04 2025 GMT
Not After : Oct 28 00:01:04 2025 GMT
Subject: CN=8bd8fc1eb63682c1646af754f37a1b8a8da4b64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:fe:20:ab:30:81:c5:5c:04:b8:c7:2c:e9:
11:7f:8e:c8:33:45:6f:56:89:ce:c7:ff:30:4c:aa:
e9:8d:41:c5:5e:a9:76:3d:f3:46:17:7d:7c:fd:70:
d8:c0:4e:22:00:cb:f6:76:07:bd:1f:b5:cd:42:f7:
f6:80:e0:e3:4d:fc:25:ee:97:6d:9c:34:66:33:06:
02:b8:89:65:74:d0:08:90:12:25:51:3b:a5:25:64:
29:63:a7:5f:8e:10:fd:15:24:20:0f:7c:08:05:8e:
9c:0c:21:08:3a:58:c2:dd:23:21:12:ea:88:b5:f5:
cf:61:a8:67:79:13:2a:40:cf:1b:c7:05:1f:37:e6:
35:8a:35:92:7b:7b:fe:02:17:08:d7:b2:7d:9e:63:
c0:b9:2c:eb:c5:61:f6:11:8a:8c:f5:37:62:73:00:
f5:da:a5:9f:2a:1d:19:12:ca:b2:8a:e7:10:10:d5:
e1:c0:dc:2a:75:03:af:e2:76:c6:c0:bc:79:e3:f2:
84:59:9c:af:8c:fd:a4:66:0d:45:25:c9:d3:07:24:
f6:1b:19:4c:ac:ad:62:cb:c9:8b:15:f4:6d:0b:7b:
b5:6e:d4:01:4d:91:d2:4e:d0:6f:30:f4:85:f2:37:
38:df:65:cb:21:3e:07:07:99:f9:ba:85:02:96:44:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:FC:1E:B6:36:82:C1:64:6A:F7:54:F3:7A:1B:8A:8D:A4:B6:4C
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:41:09:3c:e3:c4:50:7b:8d:ef:be:8c:e8:c5:50:76:78:e7:
92:88:b1:7c:3f:4b:ee:41:9e:73:e2:9d:79:d5:16:71:56:21:
50:c7:8a:73:d7:dc:9f:92:48:e2:84:30:3b:1f:27:5d:e2:48:
a5:13:ed:bf:a6:21:02:b3:cc:a0:cb:e0:a1:bc:9f:be:5e:3b:
83:96:96:46:b5:35:85:51:32:99:26:04:25:2f:7c:85:46:bc:
8c:2d:cd:ec:65:94:61:7e:bd:38:4a:22:9b:fc:f5:ab:1b:40:
5d:59:71:f6:6c:64:8a:eb:2d:71:a9:d0:f1:2b:88:99:7f:5f:
e4:fc:3e:a3:8b:33:47:27:4a:b5:1f:71:3f:9e:d1:66:ee:2c:
d7:b7:96:05:6c:f8:94:61:0f:63:7d:ca:76:50:1e:05:28:d0:
fc:16:24:cf:16:d5:80:ca:20:6c:2e:a8:d4:7e:ee:ff:da:a5:
9a:d3:66:e6:a1:08:0d:07:4b:23:6f:38:ab:1f:6d:de:d2:1a:
dd:30:f9:ee:f1:ad:ad:fe:6f:b6:f6:75:6a:82:d8:06:31:3f:
56:3c:b2:12:e3:82:f8:1f:6e:fe:ed:ca:d7:d3:b9:38:8a:27:
b4:b0:3a:51:5d:f1:fa:40:63:ac:fa:ec:61:a8:85:49:ba:49:
00:6d:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:03:57 2025 by rpki-client