Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: FW9+Du/gfsEIQ7/yP82QPXFEQ27hDdZxqGBQ7P84Ino=
Subject key identifier: 8B:AF:0E:20:DF:0C:98:23:00:7E:87:07:FE:39:11:3C:05:DD:62:83
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019A1EE3F1A8D96A9556244CE87043FFAFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 04E3
Signing time: Sun 26 Oct 2025 05:00:46 +0000
Manifest this update: Sun 26 Oct 2025 05:00:46 +0000
Manifest next update: Mon 27 Oct 2025 05:00:46 +0000
Files and hashes: 1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: APWE/1GKE0OUUOXUjxGc9eq/DQVkeQoDgAjjFC7RcvA=)
2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
3: UjWNhRVDS1dQtyrLqu8XE8cVl2c.roa (hash: VP+asIeQeiE6n/s3d0KCeiS8nBmXkURRsgcwQHE149Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:f1:a8:d9:6a:95:56:24:4c:e8:70:43:ff:af:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Oct 26 05:00:46 2025 GMT
Not After : Oct 27 05:00:46 2025 GMT
Subject: CN=8baf0e20df0c9823007e8707fe39113c05dd6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:d1:43:88:c8:e9:50:2d:7f:08:91:93:b6:
3e:2d:80:aa:27:86:d9:1e:5c:76:77:20:16:e3:df:
60:5a:27:d9:16:9d:4f:e5:60:dd:07:12:be:cf:91:
f3:6e:53:2a:90:4c:73:40:50:c8:81:ea:d0:9b:a1:
49:b0:fd:c7:4c:0f:ba:40:79:f6:44:48:83:e4:66:
ed:70:09:7b:d5:40:d1:7b:94:c9:2a:b8:ac:4d:fa:
5c:e3:54:69:4e:d9:2a:71:48:79:ce:9d:37:86:5c:
40:1e:19:f1:d8:5c:2f:47:b9:46:d9:0a:e6:ca:fc:
59:6d:31:8a:4a:64:43:85:ba:c4:15:a3:fe:0a:e3:
11:e3:41:41:86:9c:00:51:14:14:da:8f:2b:11:07:
09:fe:b8:1c:68:12:1e:9d:33:57:e4:4f:58:67:6f:
30:ce:c5:aa:c8:45:47:93:2b:69:e8:cb:72:40:ef:
1f:ef:9a:87:de:fe:c8:9d:19:05:1f:53:0b:01:13:
8c:9c:4c:d8:5a:0c:68:3a:8d:e3:a0:30:9f:22:9f:
bb:97:5e:b1:a1:86:1b:ff:65:c1:27:59:6e:2f:3f:
f8:04:a0:05:a1:32:4e:de:7c:c4:e0:a8:45:96:1e:
45:7e:5c:33:26:b7:0c:85:20:65:e8:56:19:f5:a4:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:0E:20:DF:0C:98:23:00:7E:87:07:FE:39:11:3C:05:DD:62:83
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:99:ac:3e:73:e5:32:7f:db:b9:f7:c6:66:21:b9:c0:dc:
00:86:a1:86:c0:ec:fa:c8:58:32:b2:07:2e:9c:e2:d9:a0:d1:
a5:a6:00:05:08:79:7a:f9:8a:c8:2f:ce:0a:42:fd:ab:4f:0c:
3c:d1:82:d0:a5:ed:81:cc:24:e2:ed:bf:14:ab:d3:6f:7d:e9:
f9:30:2b:0d:e3:0c:d5:63:c4:51:7c:f4:cd:db:e9:ea:87:a1:
f7:ee:6a:ac:27:35:2b:58:f2:7e:b3:a0:61:e6:b8:29:d0:9b:
1e:2a:32:db:c8:58:2f:d2:89:ff:7b:76:99:06:5d:74:71:ad:
6a:83:0c:4a:48:2d:56:f1:78:bf:da:05:37:92:17:48:87:41:
43:00:2c:9e:04:33:65:46:4a:5e:a1:3b:87:5b:16:77:5d:f3:
c9:95:99:af:83:54:81:0c:9a:62:3a:97:0b:87:82:4a:50:e0:
e6:69:e9:39:67:59:6b:16:70:74:2e:34:d4:74:28:56:fc:71:
0c:cd:2d:d6:63:e0:55:bf:f6:84:99:22:98:a1:87:c6:b0:5c:
23:40:dc:0b:b5:0b:80:79:d7:51:ff:2e:79:a3:92:b7:4c:8f:
f2:36:87:86:18:7d:a7:4a:21:eb:a9:40:e6:bc:ca:68:6b:57:
9b:28:f4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:12:44 2025 by rpki-client