Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: WLwkh6YFdEeWtJdDmyIOf0we+On3UP0uj3b8KTiae3w=
Subject key identifier: C2:75:00:13:4B:67:7C:51:90:4E:F9:DF:01:63:CF:71:95:93:22:8B
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 019A1CBE1DCFE099BF7C3CA17F5D2F284BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 082A
Signing time: Sat 25 Oct 2025 19:00:12 +0000
Manifest this update: Sat 25 Oct 2025 19:00:12 +0000
Manifest next update: Sun 26 Oct 2025 19:00:12 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: MEfg2rChxqCdzNScrImT4+7H45Yyy7xU/qx/BKxoCvA=)
2: ngDDmkyYAF9itPtooLnD-4aIxnc.roa (hash: xRemSKj2s+7N5AQoS3YswgNjXP01ldeAV619NqxAwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:1d:cf:e0:99:bf:7c:3c:a1:7f:5d:2f:28:4b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: Oct 25 19:00:12 2025 GMT
Not After : Oct 26 19:00:12 2025 GMT
Subject: CN=c27500134b677c51904ef9df0163cf719593228b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:e5:27:8e:1a:4e:57:e4:08:f5:64:d2:ef:
4d:18:48:d8:ee:86:10:9f:88:3d:1b:bd:0d:c4:b4:
d3:b7:fa:b0:e2:a4:e9:86:3a:1c:30:d2:86:1f:8a:
18:1f:2b:98:13:53:05:f6:7b:b3:60:14:d1:57:3a:
3d:3a:86:e8:b6:f3:23:ef:d3:de:9c:d2:db:59:2c:
4e:4c:fa:db:9b:02:4c:75:2d:d1:5d:d6:9b:0a:1d:
ca:06:be:c2:2d:fa:70:59:d5:e0:d3:b4:fa:e2:53:
5d:e0:f6:4e:6c:e8:b0:99:61:61:3d:17:ee:e4:81:
c7:19:f5:52:26:94:e2:a0:03:ca:8a:93:e4:ac:a4:
dc:c0:bd:55:fa:e5:1d:e3:5a:ef:5e:71:d6:bd:45:
9c:02:e6:22:d1:85:58:78:ce:d8:05:a2:22:b1:26:
bc:e1:a4:60:17:f6:62:0b:25:8b:2f:e9:9f:b5:9d:
88:cb:c1:aa:1c:5f:b4:2e:76:64:58:f1:f4:41:b4:
28:ae:3b:0a:23:56:8a:66:a9:8f:31:29:f6:e9:03:
87:fa:8a:f5:a6:73:46:3c:97:fa:91:a3:2c:cd:fc:
c5:e9:43:6e:d4:77:e1:7e:e9:6e:97:c4:68:f1:e7:
0d:de:23:7f:16:0c:43:d9:0a:eb:e1:ca:7c:97:d9:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:00:13:4B:67:7C:51:90:4E:F9:DF:01:63:CF:71:95:93:22:8B
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3d:90:9a:16:8b:72:ff:12:70:c7:c2:3a:2e:ad:84:c8:1b:
42:58:8a:b6:45:11:68:46:70:4e:95:f3:4f:51:b2:7e:1c:7a:
3a:b2:20:4a:c2:af:fc:2d:6f:57:2c:55:8e:ef:41:60:05:e0:
fe:34:57:59:74:22:9c:99:79:08:d3:99:80:10:88:3e:5a:a1:
c8:d6:b0:b5:06:b5:95:96:03:bf:e6:5c:66:9a:b1:e4:2b:0d:
22:81:46:43:30:97:4d:ac:37:1a:66:dc:f8:5e:68:96:54:5b:
87:5d:2a:4b:9a:8b:d4:1a:41:57:03:a8:c2:79:6e:b1:87:29:
d3:fc:85:7e:85:35:36:d3:08:de:d6:bf:9e:ed:89:ca:0f:84:
b1:f1:50:3b:4c:e0:77:d1:50:89:d0:77:12:8a:7e:1e:33:38:
2e:cd:8c:74:f3:16:85:f4:17:94:73:a1:99:4c:84:c6:cb:61:
86:9d:dc:71:e6:2d:70:d7:9c:9a:e7:59:75:c4:4c:01:de:90:
26:41:ef:bf:16:49:98:04:da:bf:26:97:c1:22:bf:58:6f:a2:
96:f2:7a:4e:f6:9d:32:96:5d:5b:ea:f8:d3:3e:20:76:61:54:
2c:47:27:6a:d7:d6:e9:f2:c5:bc:07:68:5e:d5:01:0d:8b:4c:
73:81:14:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:59:39 2025 by rpki-client