Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
File: 1z6DFGpDhp9ldFHnbQowXxWnruk.mft (raw, json)
Hash identifier: XXXQPJ2DEjYBb2t3uj/QGYecKqdwnDTzfagLl9eDZf4=
Subject key identifier: 98:95:97:69:4A:7B:78:D0:33:4D:4D:EB:20:E6:5A:A5:47:DF:90:71
Authority key identifier: D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
Certificate issuer: /CN=d73e83146a43869f657451e76d0a305f15a7aee9
Certificate serial: 019A270AE5DEA793DE3E855CCC8BF9CDEE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 19:00:16 +0000
Manifest this update: Mon 27 Oct 2025 19:00:16 +0000
Manifest next update: Tue 28 Oct 2025 19:00:16 +0000
Files and hashes: 1: 1z6DFGpDhp9ldFHnbQowXxWnruk.crl (hash: PIPtwJZDT5Dp/FxkzQBALIwxpZ9YmkdBFC1GC/ZMFaM=)
2: GjRTUlniyanmn4Afv90LXdtB2CM.roa (hash: H05QDr/ZorYcXmze9XYmHh1Yk5vgO9UM/lypXH5003s=)
3: fpuO1KgXHawIqKkMRIDlnRPTQ7U.roa (hash: ue6Kig6bA97Pget/ASgsuFmh3TVF1nlHcCgCcC+PS30=)
4: iDcx17jqSt5evXMH3ZR7hspxCwo.roa (hash: HtASD4funhOSBzbbYi7dYm93HfUK3vhLncjZn0KAr1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:e5:de:a7:93:de:3e:85:5c:cc:8b:f9:cd:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73e83146a43869f657451e76d0a305f15a7aee9
Validity
Not Before: Oct 27 19:00:16 2025 GMT
Not After : Oct 28 19:00:16 2025 GMT
Subject: CN=989597694a7b78d0334d4deb20e65aa547df9071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:06:f2:cc:76:00:42:89:cd:d6:6a:86:ec:
b3:76:17:21:9a:01:b2:c8:03:df:6d:4e:29:fa:0f:
19:29:c6:76:65:19:9f:01:26:54:a1:54:3e:a1:dd:
19:41:4e:e2:f4:1c:aa:dc:51:a2:af:5f:97:a3:5a:
e8:3b:05:03:8a:b4:08:68:81:c9:31:c5:99:68:63:
7d:6a:a9:00:3b:3c:89:ba:4b:93:90:8b:15:3c:36:
20:db:04:bf:79:54:43:c8:ca:3c:11:3c:6f:af:7c:
d1:31:3d:c6:b6:31:8c:93:9f:58:09:a1:db:f0:69:
9f:4c:a4:74:13:c6:c8:71:1e:5c:48:02:08:dc:66:
c8:37:24:7b:62:9b:73:f0:4d:fa:be:45:6f:8a:95:
be:44:15:14:fb:e9:99:08:bf:9d:34:ff:0a:81:dc:
59:a5:3a:22:ba:9e:72:ae:18:a0:de:26:e6:69:90:
f5:ab:88:b3:ce:ee:87:40:46:7f:cc:ce:f0:b1:4e:
21:02:f1:cb:8d:6c:8d:87:58:5e:bf:78:56:e9:14:
0a:9c:7e:73:fc:c1:d0:15:fe:61:d3:84:04:7c:d8:
a8:23:e2:c6:8e:aa:9d:16:ad:38:69:19:b1:72:cd:
fc:02:f9:77:2d:9e:3b:69:28:6b:54:6e:4e:11:b3:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:97:69:4A:7B:78:D0:33:4D:4D:EB:20:E6:5A:A5:47:DF:90:71
X509v3 Authority Key Identifier:
keyid:D7:3E:83:14:6A:43:86:9F:65:74:51:E7:6D:0A:30:5F:15:A7:AE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1z6DFGpDhp9ldFHnbQowXxWnruk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/1z6DFGpDhp9ldFHnbQowXxWnruk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3c:85:43:5c:a1:2c:f1:05:93:ec:8f:2c:b1:80:aa:94:15:
dc:1a:dc:1d:4e:ab:4d:9d:e3:8b:43:6d:2b:30:e6:bf:72:3a:
04:94:2f:68:13:9a:e1:f8:4f:8d:64:61:7d:3b:79:aa:1b:6d:
2f:2f:87:33:6b:8c:3f:12:cc:c2:33:0d:f0:07:06:10:93:f2:
25:db:59:1d:57:51:d7:75:31:76:4a:90:e9:1f:97:00:bd:12:
f8:55:08:6f:0f:7f:2b:44:c8:06:0c:4b:d1:8d:8e:14:d6:7a:
a7:0c:a9:29:42:4b:0a:89:b6:db:82:f7:cb:27:ed:fc:46:07:
fe:f1:4f:13:f4:e1:a5:02:bb:c3:aa:3f:fb:a7:a2:02:36:2c:
81:4f:e8:56:4d:a5:19:6f:ec:6b:3b:dc:47:89:d4:71:a9:1e:
96:75:33:55:fa:8a:f3:a4:1b:3d:66:28:5e:da:b5:44:ec:cf:
9c:aa:8b:f9:85:b2:8f:c8:12:50:d8:0c:47:e1:17:10:4b:eb:
6f:5d:ed:5a:8a:63:65:f6:d5:18:1b:0c:67:08:4f:e0:fe:e1:
79:f8:0b:14:2b:c5:22:97:55:63:42:0e:7a:c8:d8:1f:bf:c7:
b2:b0:86:e8:72:82:1e:82:84:d9:c4:bf:11:17:69:6d:1a:c0:
9a:19:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:50:25 2025 by rpki-client