
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier: LruR49lM3tVdN9LTwpSZSdGJ0UJ/XlnewlE0rcXOsB0=
Subject key identifier: D8:49:34:0F:0E:A2:DE:60:2D:A6:5B:28:66:2C:63:2E:4E:EE:C1:DA
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019A209C15B804A88FE6DF4E0C0A2A5D3DFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 13:01:31 +0000
Manifest this update: Sun 26 Oct 2025 13:01:31 +0000
Manifest next update: Mon 27 Oct 2025 13:01:31 +0000
Files and hashes: 1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=)
2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=)
3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=)
4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: Firt9ODlnCnPLkY3zj91HECtSEF3Iw/1lHlWleiaIpA=)
5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=)
6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=)
7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=)
8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=)
9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=)
10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=)
11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=)
12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=)
13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=)
14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=)
15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=)
16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=)
17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=)
18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=)
19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=)
20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=)
21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=)
22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:15:b8:04:a8:8f:e6:df:4e:0c:0a:2a:5d:3d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Oct 26 13:01:31 2025 GMT
Not After : Oct 27 13:01:31 2025 GMT
Subject: CN=d849340f0ea2de602da65b28662c632e4eeec1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:ba:02:0a:0a:6a:60:4e:6a:df:f1:6a:ba:
10:cb:58:4b:cd:82:a5:ed:34:98:61:03:3f:97:19:
6e:31:7b:a9:d8:55:ab:4d:3b:5b:f0:1d:8d:05:da:
da:d4:45:ad:33:38:9d:58:30:17:e3:9c:fe:af:db:
d7:6e:a6:01:23:22:64:c5:ef:71:2e:1f:02:3b:14:
2e:d8:d4:c9:80:6b:aa:03:24:ea:95:0d:64:78:2d:
ff:d4:47:48:78:39:43:75:f0:2d:c3:ab:a0:0e:66:
bd:24:d8:c2:e9:9f:3d:93:b0:db:fe:32:90:4e:62:
eb:3a:9a:1d:36:f7:c7:33:8d:ed:45:a2:c1:56:d6:
eb:f2:f0:94:5b:e2:7d:37:bc:0c:99:6a:94:23:18:
dd:95:80:7e:ba:69:3e:39:50:eb:45:bd:9d:ed:21:
53:12:10:38:bb:63:ca:86:01:72:2b:4e:0d:87:d2:
6e:da:da:fb:46:fc:05:d8:dc:33:20:a5:9c:e6:9e:
bf:2b:a9:9b:50:3e:5d:26:31:87:73:ab:3f:11:4c:
5d:e5:d6:46:ab:36:e3:cc:af:98:03:c1:3b:ec:3f:
b8:58:20:67:7e:0a:82:de:47:fe:cf:57:44:b9:ea:
f7:44:b0:c5:c7:f0:1b:17:55:af:1e:46:c0:c2:30:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:34:0F:0E:A2:DE:60:2D:A6:5B:28:66:2C:63:2E:4E:EE:C1:DA
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:fe:83:e8:b4:0a:b2:76:8d:0d:40:4c:2f:35:44:73:d7:0e:
5a:b8:95:e9:93:ef:f2:3d:ce:77:ee:29:d5:4b:9e:92:e0:d1:
8a:a1:67:10:58:73:20:eb:69:78:3f:4d:05:12:e1:39:48:5b:
39:56:9c:32:14:95:e8:21:bc:c2:06:85:1c:14:f8:78:32:65:
5b:54:ef:83:d2:12:1f:41:14:c5:df:f0:cc:03:0c:0a:54:08:
01:07:1a:0d:9c:93:6c:c9:38:b1:21:7d:c2:20:1e:ca:37:b7:
41:72:be:bf:4c:91:85:a7:be:0a:e8:6c:77:4a:41:bc:d9:5c:
ba:f6:ad:49:42:38:5b:54:dd:72:b8:d6:94:7b:86:c1:51:b3:
16:b4:10:53:ad:82:c1:8b:f4:e8:d5:26:10:a8:67:f0:17:b9:
9d:33:88:93:67:49:1d:98:87:f8:9a:f5:e7:5c:5a:4b:b8:bd:
fc:0d:a3:e5:da:6a:3a:c7:d2:b7:36:85:d6:85:db:98:20:77:
ee:ce:51:f9:99:e1:b4:8a:35:7f:ae:d4:74:62:f3:63:bb:05:
43:7f:07:8c:e2:b8:a9:f0:41:3f:11:6b:2c:66:58:e6:62:2f:
f6:73:5a:6b:03:79:00:32:92:2b:ac:7d:52:13:fa:03:1f:e6:
d4:64:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:53:36 2025 by rpki-client