Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
File: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft (raw, json)
Hash identifier: 3LRcWOWJTVh+sY7ciXVSKKYJMSzR54SqLdz+3XCkFaQ=
Subject key identifier: 6B:1A:7E:09:A5:F9:E9:68:95:AB:1C:93:62:A6:45:32:48:80:E8:30
Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Certificate serial: 019A1EE38FFDC5031F55FFB2530B42711960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 05:00:21 +0000
Manifest this update: Sun 26 Oct 2025 05:00:21 +0000
Manifest next update: Mon 27 Oct 2025 05:00:21 +0000
Files and hashes: 1: 1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl (hash: 1kdXbVrULQQXsGgHtBMkOUhxIVozJySoWHGT83Z8ins=)
2: xQ0omeh3E5iF_d8mj3AQ2WbCPhs.roa (hash: sdJrwUwtet9ZCSeZ4e/k+xUzLUvSkTzP6eqgxhGOZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:8f:fd:c5:03:1f:55:ff:b2:53:0b:42:71:19:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd
Validity
Not Before: Oct 26 05:00:21 2025 GMT
Not After : Oct 27 05:00:21 2025 GMT
Subject: CN=6b1a7e09a5f9e96895ab1c9362a645324880e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:00:f8:59:16:96:51:74:74:27:bb:e2:90:0e:
26:38:23:ac:44:77:4d:9e:93:1f:70:ba:c0:a7:27:
5b:44:08:04:98:43:2e:53:7a:f7:69:1f:61:f6:dd:
08:d7:e6:64:cc:ab:97:a1:a4:75:dd:74:f5:87:95:
66:f3:c2:d1:d4:7c:85:a3:45:0f:69:f4:9f:de:03:
40:94:04:b0:3f:6d:9d:15:13:bb:f9:36:16:59:62:
a6:fa:a7:9d:f3:a2:45:16:f9:7b:56:a9:5b:aa:e3:
3b:29:8e:be:93:7b:e2:8e:5c:82:08:78:c6:2d:b1:
93:c0:e9:05:45:1c:34:d3:cf:c3:73:06:3b:f9:f0:
5d:02:e9:c1:20:c9:d1:ac:3e:6f:95:81:6f:e2:e3:
9b:8e:6a:57:36:35:18:2c:cd:e1:f1:eb:24:62:ba:
76:76:87:a7:3c:c4:44:23:57:26:ce:9e:e0:6a:7b:
cd:35:66:5e:bc:3f:2f:a8:00:1b:0c:2e:86:04:99:
05:43:37:26:94:a8:e7:12:5c:ac:41:1c:b4:d2:38:
4e:8f:d5:f9:cf:0c:f2:04:8c:a7:8e:ac:76:01:4e:
f5:df:2b:f3:1b:d9:2d:49:ae:d2:fd:08:45:bd:fe:
4e:03:8b:0d:08:83:6d:51:17:55:d0:4e:8b:e5:0a:
f6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1A:7E:09:A5:F9:E9:68:95:AB:1C:93:62:A6:45:32:48:80:E8:30
X509v3 Authority Key Identifier:
keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:4f:65:cf:79:2f:c5:04:51:61:6b:da:ac:4e:f2:45:0f:
8d:21:f6:aa:7e:95:9a:59:ac:c9:00:b4:49:e3:90:72:8d:70:
9d:a8:dc:30:0c:ec:4b:e8:90:31:aa:a8:89:54:81:16:16:2c:
7b:72:71:95:1d:39:5a:4e:25:c1:7c:f6:ea:77:e8:91:cf:76:
f8:5f:03:e6:f6:17:58:7f:40:9f:ff:15:cf:e8:48:dc:74:70:
2f:16:2c:57:6c:d6:27:28:5c:d3:89:09:54:08:76:85:bc:80:
4c:75:94:4b:2e:a6:a4:55:d3:93:22:3a:ce:a3:67:8e:81:61:
cc:c0:5b:ec:53:54:2a:59:d3:24:f6:b0:a8:f3:cb:cf:ff:9b:
ea:90:14:90:bf:3d:3f:9f:19:56:d5:38:7a:d2:df:85:c4:e4:
d5:3e:2c:94:ff:fa:f4:b0:6e:f3:32:37:1a:0e:0a:13:23:29:
56:19:8c:8e:9c:c4:e7:10:32:58:72:5e:d5:0f:db:9d:c5:bd:
1b:9a:7d:e3:9d:48:9d:b1:33:71:ea:9e:67:24:20:fa:17:18:
87:3e:0e:4c:3d:9b:03:9b:24:63:06:df:6b:50:97:d3:29:e9:
8c:c5:a2:d8:54:21:d9:c5:2a:0f:1e:d1:aa:c7:3d:ee:29:a8:
97:9c:3e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 07:44:05 2025 by rpki-client