Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
File: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft (raw, json)
Hash identifier: Qc2fr04syb3jEwMalkcMUIL1mdDz7xKJe+zr10Uf64A=
Subject key identifier: 72:24:D0:53:CF:28:66:6D:84:AC:F0:99:1F:E1:CE:51:79:6C:5C:16
Authority key identifier: F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
Certificate issuer: /CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Certificate serial: 019A221B768076CC71729D10B875BD7AB728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 20:00:16 +0000
Manifest this update: Sun 26 Oct 2025 20:00:16 +0000
Manifest next update: Mon 27 Oct 2025 20:00:16 +0000
Files and hashes: 1: 1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl (hash: Uk+ydMti4tZKu1HCzt9BgJS1pyhgy2xz3H6ww2WosxI=)
2: mab9pSsP0hPfmw5pFW9oVdvDO3s.roa (hash: QMgbTzBaUnDZaZXtIzkU3/zhP2tD7XocJ5teoU1UGow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:76:80:76:cc:71:72:9d:10:b8:75:bd:7a:b7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad110d39e95b542df8d2071d9245469a1b9f42
Validity
Not Before: Oct 26 20:00:16 2025 GMT
Not After : Oct 27 20:00:16 2025 GMT
Subject: CN=7224d053cf28666d84acf0991fe1ce51796c5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:c5:a0:ce:f9:96:c5:a0:47:4b:23:63:ea:
07:5f:5d:27:0b:e5:6a:e8:85:6d:da:4a:f9:d1:ca:
61:3c:79:7f:11:0d:62:c8:63:61:2a:f7:58:45:58:
35:5b:8b:ab:fd:ef:8a:38:4e:05:25:b9:09:17:08:
d0:6e:99:15:4a:f5:51:a8:49:3f:0a:29:aa:4c:11:
f4:29:87:73:b3:9c:8b:73:8d:c7:c7:1e:be:a9:2d:
ea:7b:a3:57:55:34:a8:e7:46:13:0f:f2:1c:00:9f:
72:ec:1d:86:33:06:58:51:64:13:6f:ee:f3:60:c9:
a9:d7:2f:15:df:4a:12:0d:4f:fa:9f:a8:75:55:0b:
8c:99:f7:b4:07:5a:b3:69:e3:60:0d:61:7e:70:18:
9f:9a:b9:b9:f8:ae:60:3a:4c:df:6c:ad:49:75:d3:
89:b2:30:a0:a3:f7:af:f3:96:8b:15:6d:3a:7d:be:
68:39:d8:65:b0:89:fb:7a:99:6f:31:9b:e3:7f:1b:
a7:34:7b:d8:6c:0d:1a:92:30:a7:78:8d:34:af:7a:
af:1b:9b:ee:2a:75:a4:b7:23:89:fb:11:ac:55:82:
8b:49:10:98:22:24:a9:73:36:41:e5:bc:cd:a0:26:
17:16:58:56:8e:8c:9b:c6:fc:a1:e3:be:5d:ad:f5:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:24:D0:53:CF:28:66:6D:84:AC:F0:99:1F:E1:CE:51:79:6C:5C:16
X509v3 Authority Key Identifier:
keyid:F8:AD:11:0D:39:E9:5B:54:2D:F8:D2:07:1D:92:45:46:9A:1B:9F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/60e63c-e63b-4e16-a5eb-79a5b3978ff2/1/1-K0RDTnpW1Qt-NIHHZJFRpobn0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3a:ea:bf:05:22:59:1e:ee:81:b6:44:b7:d6:85:f2:15:98:
17:0f:04:63:d1:35:cc:7f:42:82:26:ad:63:f6:04:ec:88:fb:
46:4d:fd:e1:cd:26:82:b3:99:51:a2:0e:b6:52:1c:25:b3:f6:
f3:ac:53:83:a3:66:a6:18:ce:51:3f:59:a3:61:fa:a4:5b:69:
57:94:5b:be:c4:c8:b3:b6:66:81:0e:7b:16:47:b1:18:e7:a0:
40:d8:4e:13:e7:a7:55:85:0c:7e:c6:b5:c0:54:16:9c:04:0c:
fb:84:19:64:c3:9b:f9:78:27:9e:f7:74:5c:d5:68:3c:ea:79:
93:81:07:36:a3:65:93:fe:a6:0d:74:f8:b2:f7:ed:b2:fe:28:
44:b9:10:81:72:9f:f2:ac:9f:84:2b:6e:5a:5d:fd:09:1f:e5:
e8:3a:4f:6a:8f:db:1e:9f:b7:a7:ec:66:50:22:9b:d0:3a:1f:
b5:6a:d1:c2:d8:69:81:70:5c:49:f5:82:ba:84:ba:d3:86:e9:
47:be:f8:42:cc:b7:07:fc:54:c6:58:00:07:93:e2:c4:dc:d7:
4f:4d:44:1a:99:5a:da:fd:f7:d8:7f:d7:9f:81:ba:69:d3:7e:
6d:ce:32:46:bc:62:4d:b4:de:d0:3c:6b:6e:6c:52:de:4f:fa:
cf:80:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:52 2025 by rpki-client