Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: 28zuyA1/gyuaPMamn4gdsmn0dozACnVfwhxZBhjksv0=
Subject key identifier: BB:90:35:B3:3E:88:2A:80:5F:1D:C4:8E:96:60:D6:65:86:23:40:5D
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019A247824FCE6914D7E1584CD7B7CF5CA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:00:44 +0000
Manifest this update: Mon 27 Oct 2025 07:00:44 +0000
Manifest next update: Tue 28 Oct 2025 07:00:44 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: 9piirt2itOpdXAfcalVMCKbUApDNZnxItwMb+OXrRxQ=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:24:fc:e6:91:4d:7e:15:84:cd:7b:7c:f5:ca:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Oct 27 07:00:44 2025 GMT
Not After : Oct 28 07:00:44 2025 GMT
Subject: CN=bb9035b33e882a805f1dc48e9660d6658623405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:6a:d9:8b:13:25:76:9d:8d:7d:60:4c:54:
eb:ab:62:db:cc:06:26:20:73:5a:46:2e:2b:1e:9e:
ec:5b:7e:8c:da:30:90:e7:e9:c8:e7:77:9c:bd:3f:
07:00:9d:82:5c:8c:06:86:00:94:26:dc:2f:dd:80:
46:e9:85:08:40:ce:ac:c0:9e:85:97:73:7c:af:88:
7b:e1:ec:1f:7f:fb:17:60:32:2f:37:89:f1:b9:00:
6d:d7:a4:ff:d7:33:77:b1:03:d8:e7:37:a6:cc:08:
9f:c2:f6:84:90:24:b3:0d:86:e6:fc:b1:b4:d1:68:
39:60:5f:d3:8f:61:ff:64:4d:cf:8a:e4:e0:21:69:
9d:e9:46:48:e0:83:61:14:5b:18:b3:ef:6c:b2:dc:
fa:87:e3:be:53:fc:bd:d6:9e:e3:68:82:d7:e1:28:
cd:b3:99:c5:96:f5:97:fa:cb:c9:04:71:d4:3d:65:
a5:8b:47:b9:51:f9:28:21:5f:d9:ff:7c:13:8a:0f:
10:23:4a:58:15:35:31:a0:b9:bf:a3:b8:d6:f4:62:
37:4d:9c:ad:a3:fc:6c:1f:14:27:7a:d8:68:a5:0a:
fa:0a:fe:a8:ba:cf:a6:b4:5b:b4:31:5a:d6:7f:28:
fd:47:c3:71:30:bd:0b:eb:99:2e:63:26:c5:66:b3:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:90:35:B3:3E:88:2A:80:5F:1D:C4:8E:96:60:D6:65:86:23:40:5D
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ad:80:75:26:e4:24:b4:ec:71:c5:6b:df:ca:b5:49:58:99:
61:d3:fb:e1:a4:e5:7f:06:32:fd:68:62:e1:57:6d:13:f1:a5:
81:b4:dd:59:a6:d5:e7:ef:78:b8:07:72:74:6c:78:63:9a:e3:
31:2d:66:ad:85:f7:9a:e8:9b:18:55:0a:ca:97:59:71:f3:9b:
72:4d:30:61:b2:72:3b:e8:18:12:b0:d5:d9:61:ee:bc:46:4e:
f7:b7:03:25:44:e0:e3:17:d0:2b:82:27:56:a3:df:ec:2b:a5:
74:bb:64:a2:64:2a:be:59:dd:f4:f2:7e:5c:17:3d:dd:51:8e:
39:b1:61:d5:a9:72:7d:de:c2:91:ac:6b:74:cf:c2:99:a2:f7:
04:33:6c:34:99:57:d1:9d:66:de:d4:ad:52:38:88:54:8d:c5:
5c:55:c2:32:da:80:72:f4:33:e0:c6:dd:80:ea:ee:50:96:53:
25:2e:ad:5f:3a:5a:6d:29:77:28:14:fd:7d:11:37:5a:d6:9c:
52:c1:f2:94:9a:5f:ea:59:77:5d:6b:cb:0e:42:60:f5:b6:36:
b2:96:5f:86:a3:f7:04:8e:f8:cc:df:29:e7:29:6f:b8:63:c1:
dc:08:02:79:da:af:ad:f2:ba:7c:36:87:3d:ea:13:11:e8:78:
53:5e:14:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:56:22 2025 by rpki-client