Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
File: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft (raw, json)
Hash identifier: sLO6T1dyqm7fRqqVrqnl0pX59JJd0spN4bBg0l33ZMY=
Subject key identifier: A3:0A:75:E1:57:2E:E1:B5:35:4C:8A:00:B1:A7:94:B3:BB:40:60:74
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Certificate issuer: /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial: 019A240A26C14238276614F010600D1AC282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 05:00:36 +0000
Manifest this update: Mon 27 Oct 2025 05:00:36 +0000
Manifest next update: Tue 28 Oct 2025 05:00:36 +0000
Files and hashes: 1: IwZ3Z1oDg1FS827JU1tSlj8eb74.roa (hash: yIwUb6bD8Yu/MZmIZhvd3q5td4NtibwxlrC7RDOCuHM=)
2: SMQ9QVGYhC0I8pIMSi7pgpsFW1c.roa (hash: P/Liu3FMs1RtZp34UhptoqasRnmxQc/4vGzdeX20sw8=)
3: _1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl (hash: AU4sRq5t5ED21PmX7k4IUp0qsBkcXaqn8uo58uHHjo0=)
4: hyDMWUWDOwPLRhTXHqAvo0HE2Eg.roa (hash: qhk5EHJ02rRG0lhE9onju5bJfrP0rsBjK4tlKrdzuZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:26:c1:42:38:27:66:14:f0:10:60:0d:1a:c2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Validity
Not Before: Oct 27 05:00:36 2025 GMT
Not After : Oct 28 05:00:36 2025 GMT
Subject: CN=a30a75e1572ee1b5354c8a00b1a794b3bb406074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:b2:2c:94:fc:a8:f7:58:a8:95:9f:d5:c6:
82:6c:09:15:6e:29:c8:b5:53:f4:b0:75:b2:ea:ed:
43:ff:04:17:32:ef:f3:85:46:d0:dd:55:57:91:29:
59:81:f2:c0:99:f7:34:fa:8f:e1:6b:26:17:60:21:
34:12:46:86:81:5e:91:06:0c:91:3a:ad:97:18:85:
30:7c:f0:89:22:5c:7f:d9:e8:45:ee:16:41:85:27:
46:81:0f:32:fe:c5:1d:dd:80:46:a2:ec:7f:28:81:
6b:ae:45:32:03:ef:c3:b1:69:04:4d:37:ce:ee:7d:
76:35:09:00:90:e4:be:bc:fe:1f:d9:e3:ce:de:5d:
7a:ec:a2:3c:4a:46:68:ac:ba:99:c4:69:5d:2d:0d:
ab:1e:a6:86:dd:0c:2a:44:01:96:12:46:5e:1c:8a:
5e:b7:d6:c1:e3:f6:6a:df:ca:48:63:3d:13:06:d2:
06:ea:e2:76:ec:15:a9:ab:55:bb:8a:e0:68:d2:ad:
d0:52:4d:1a:19:68:54:d9:a7:44:2c:35:fa:3c:0e:
ff:cf:4f:a5:a8:6e:16:c7:17:42:30:e1:c0:5f:16:
a7:bf:16:c6:5c:88:5f:81:c8:9e:41:96:ac:92:7b:
4a:68:c4:b9:bf:1e:bf:9f:42:9a:76:29:28:ac:59:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:75:E1:57:2E:E1:B5:35:4C:8A:00:B1:A7:94:B3:BB:40:60:74
X509v3 Authority Key Identifier:
keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:28:9c:33:53:12:43:7a:84:27:9d:56:d0:9f:33:4b:9f:
58:99:ec:ce:d6:d8:96:93:97:26:6c:b9:78:1a:49:9b:ef:06:
74:14:45:0e:86:61:66:e2:ec:86:82:0c:43:36:7f:27:05:62:
0c:81:fd:c4:e6:d6:58:40:c8:3c:1d:80:8d:8c:05:8a:32:9f:
f6:23:05:a0:c4:e6:a5:97:bb:4e:47:b6:55:0a:2e:4f:d3:d5:
b8:1b:cf:0c:48:e7:4c:c6:66:38:c6:9d:4e:fd:e7:a5:28:cb:
3b:f6:65:19:d8:cb:74:a0:86:02:d3:1e:c5:6e:96:9b:d8:06:
ed:78:db:b4:ab:b9:86:dd:18:97:7d:ba:8c:a4:6f:b3:93:9e:
10:8f:eb:f3:41:da:34:4f:83:74:a3:72:c0:00:de:a7:ca:c5:
29:3b:63:de:6e:7c:ee:fa:03:3c:21:5a:d2:2d:95:17:e0:17:
98:07:d9:88:a0:7e:05:05:d0:49:0a:72:bb:29:41:a6:4e:6e:
c7:2d:d7:e7:ec:74:a5:cc:60:67:35:3f:06:29:e6:4a:77:a0:
e9:39:27:09:aa:d6:bf:24:f6:5f:0e:2e:7e:bd:8a:04:95:ee:
d0:6b:d6:5a:f8:a5:4f:e0:38:2b:97:83:29:e4:97:25:2f:84:
14:09:95:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:48:52 2025 by rpki-client