Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
File: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft (raw, json)
Hash identifier: rmUzhK9XfIeI4fq43lpzVgNL9nUdCiK0kbyr91h3qdQ=
Subject key identifier: 14:7C:63:27:CB:7A:AD:77:28:9D:01:A9:65:3A:12:90:D5:DC:9A:45
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 019A269D6002EC822752C3DA1528B0AD043C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 17:00:39 +0000
Manifest this update: Mon 27 Oct 2025 17:00:39 +0000
Manifest next update: Tue 28 Oct 2025 17:00:39 +0000
Files and hashes: 1: 1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl (hash: inIkdmplrGsUitbwCU0A9w03VxA/iOEwnEckywX/WQM=)
2: D2WLBhbXEMdDEu6VoSCBX9kwKxY.roa (hash: L98txIeHFCVTE5FfZdJjhE+NAuboMbn59/Tg8vXNf1Y=)
3: FPWYS5FPdi_36PocHDQv9w20hsM.roa (hash: lc1AFnplH2+Ms7H/N6TFQmmzCrwqddRkrKSWWiBizwU=)
4: GD4Ao9B2cz5WTYzecC-kGpGE8PU.roa (hash: EMPtxZQPJUmcPd6jCs0XXLsuloEWz1y/aD3A32qr1zk=)
5: W1awuHaHMUM8Quc80WAi-XtdIzY.roa (hash: +ggiQE1BpawHqA/zPCH8mung319bbE2FMHPQr3Jv5zk=)
6: dL_cPR3BvEV2FZeLKttQtUtkTJA.roa (hash: sW6C8Oel7oIOAbSvnZNd6R3ZV3AqqC/NBWFrXS1er6s=)
7: jgF2CfkLgJ6QhMF-SdjdJSTJwMg.roa (hash: mvV2l5CpWyu6M49qXSrw0SVIhjTViniokzpN0H6YY+0=)
8: vRRL6lXZDT1QQeeextawYFp6dTk.roa (hash: OGSPwUDB+II0bvau8QxtXKLAR/Lr2UnzedciO1U9Xfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:60:02:ec:82:27:52:c3:da:15:28:b0:ad:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Oct 27 17:00:39 2025 GMT
Not After : Oct 28 17:00:39 2025 GMT
Subject: CN=147c6327cb7aad77289d01a9653a1290d5dc9a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:9a:90:be:c0:ce:d5:b5:f1:8c:66:f8:87:
2a:71:43:4e:a1:e2:06:ca:e3:fc:fe:89:e4:a2:98:
91:f8:18:3e:98:53:23:61:ea:18:89:ba:06:01:aa:
af:3b:f5:a0:06:9f:f7:ce:1a:89:cd:44:f7:72:a8:
76:86:7d:d3:6b:25:e1:61:8b:d0:f0:17:9f:69:57:
31:92:de:97:22:7e:a4:a5:44:a1:38:6e:c9:57:7c:
b9:7c:93:bb:6e:b3:f5:26:3f:72:2e:49:d5:4d:54:
2c:59:09:15:d0:24:cd:ed:ec:e7:e3:7d:b3:93:9f:
b4:24:4a:21:61:5f:72:69:33:fc:bf:44:2e:92:06:
9d:20:a0:9e:71:c1:c7:43:0a:b7:e0:12:59:0f:87:
ca:d9:90:64:53:2e:4f:48:d0:46:d1:46:72:1e:8b:
8c:25:17:e4:b3:1a:86:e2:99:4e:5b:fd:79:d2:29:
19:d8:3c:f6:fc:b8:a8:ad:5e:66:d4:b5:c3:8d:a9:
3b:63:62:d4:0d:34:02:21:bc:24:31:27:e9:74:02:
95:4a:e6:51:03:3b:5a:da:28:ce:fb:c0:68:13:b5:
22:8b:fd:1d:bc:c4:88:e0:1b:3d:63:d8:9f:f8:19:
99:19:0f:f6:7d:3c:0d:e8:68:fe:d4:20:98:77:d0:
32:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:63:27:CB:7A:AD:77:28:9D:01:A9:65:3A:12:90:D5:DC:9A:45
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:ff:e6:56:e0:00:5b:fe:8e:ea:a5:b2:b4:08:3e:f6:86:
6f:07:23:47:48:cc:fc:5e:04:86:62:28:ed:21:2a:b3:91:ab:
a1:49:f2:df:29:82:93:60:cc:b5:eb:62:5b:0c:0a:56:19:37:
61:58:f8:df:ef:37:1c:2c:5a:05:4a:4a:a3:b8:ee:59:a6:b1:
b0:e8:85:d8:1f:31:93:d5:41:c5:94:0e:9a:7d:fd:f4:22:fa:
57:c0:f1:5f:9b:22:b2:d1:7a:f9:d7:c8:eb:12:7a:3c:1f:4a:
09:17:32:a4:42:16:2f:55:7c:51:3e:5c:79:3f:18:df:ed:e4:
1c:da:72:af:42:70:60:83:e9:b6:d0:ca:dd:d9:e1:62:29:31:
c0:e5:72:78:0a:2d:c1:e5:17:ee:e9:11:03:37:85:36:6a:b4:
bf:13:91:77:7f:7a:96:81:4b:ba:e7:0c:f1:f3:fc:6f:03:5c:
e8:01:78:81:bf:b5:b7:82:cc:7b:16:46:5f:e3:4f:43:00:f0:
bc:76:59:8a:02:0e:6a:bc:d5:85:6b:e6:e1:ed:2c:72:62:1f:
3d:dd:99:c4:a0:b1:72:67:dc:59:32:99:04:11:44:21:c2:77:
34:67:2e:ba:02:42:1f:b5:4d:41:4c:ce:46:67:c1:d0:ae:73:
36:90:70:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:43:53 2025 by rpki-client