Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: 0iJGmf+Ap9N7ocFxtpikcmGdnL5TD9TRvRemojN8CEE=
Subject key identifier: D1:69:0A:93:41:23:B2:56:81:24:0D:BB:95:65:98:61:F9:57:0A:98
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 019A32338716209F77BB3CEDC273D59A5B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 16FF
Signing time: Wed 29 Oct 2025 23:00:28 +0000
Manifest this update: Wed 29 Oct 2025 23:00:28 +0000
Manifest next update: Thu 30 Oct 2025 23:00:28 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: mNCDxoYGsELtb+El7qCH9tEgQBMzjOLhSs+E3sswbgc=)
2: k5WIi1Ejnq2UPqn3UpkS8V7jf1M.roa (hash: 0oCwakpSZkb6NAb4lGAZ4tdDGnYcuoaTcDYTLBa8fHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:87:16:20:9f:77:bb:3c:ed:c2:73:d5:9a:5b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Oct 29 23:00:28 2025 GMT
Not After : Oct 30 23:00:28 2025 GMT
Subject: CN=d1690a934123b25681240dbb95659861f9570a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:ae:f1:0e:76:03:43:70:d0:76:d2:0b:06:
21:6e:ae:c2:69:1f:51:8b:ad:f1:4e:66:8d:01:d3:
a2:39:a2:2a:58:80:dc:e8:a5:ae:d0:7f:17:61:b7:
42:a1:fd:34:89:1a:46:bd:3e:59:be:93:63:63:bd:
a5:9a:71:fd:66:21:73:0d:f7:87:3f:8d:3f:77:ca:
62:d7:76:91:08:68:56:a5:2e:c4:a4:ab:b4:9b:72:
80:f9:5d:25:46:eb:5e:87:bf:c7:2c:15:63:0b:63:
af:a3:a3:fe:7f:47:b0:01:79:46:0a:ae:01:df:d6:
da:e1:31:8b:e8:59:81:5f:06:de:7b:63:8a:5f:10:
2b:90:74:43:aa:7b:5e:3f:5f:ec:8b:b3:9f:97:21:
ee:91:b5:97:93:3e:e1:0f:34:ef:2d:46:b3:dd:f0:
73:de:e5:ca:59:0c:f7:2d:ac:d4:95:55:f0:9a:bb:
95:72:10:da:15:6e:e2:f7:ed:1c:6e:47:73:fd:8c:
64:0d:ca:b9:f2:ec:39:63:de:0c:b6:ab:ec:42:c6:
09:70:87:67:13:c2:f6:34:24:f2:1e:7a:eb:dd:47:
a8:a7:e1:cb:4d:d2:03:66:66:27:d7:f9:0f:33:25:
06:66:50:10:e1:9a:39:82:b7:d2:7c:a7:df:fe:75:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:69:0A:93:41:23:B2:56:81:24:0D:BB:95:65:98:61:F9:57:0A:98
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ff:1b:15:be:e6:36:c6:1a:88:ea:56:36:dc:87:a2:52:06:
43:ce:86:6a:05:4b:90:22:33:74:35:b0:64:e6:33:cb:83:36:
b6:87:47:60:fa:85:64:5d:26:4a:90:2d:a5:2b:c1:70:55:81:
b7:e8:50:a5:99:30:ce:fc:40:58:6d:5d:dd:76:dd:c0:09:57:
8e:49:e4:a8:fe:58:be:21:da:7c:74:a2:b3:19:2b:5e:57:13:
30:5a:e9:6c:58:07:1f:cb:8a:9f:20:cb:85:46:66:65:31:85:
49:17:98:70:f7:71:e1:01:3e:45:06:66:9b:7a:60:b9:ac:e3:
39:82:08:5d:26:eb:23:89:03:4a:28:c3:0e:fe:2b:3b:d3:c0:
77:2a:be:6e:27:a9:cd:08:78:0f:b1:9d:6a:39:ab:5a:98:e6:
a7:da:36:7c:14:08:1c:f0:35:79:e4:b1:75:94:ba:1b:03:b7:
c4:67:4a:f8:fe:39:c9:20:71:45:62:b8:fb:a8:9f:0d:2d:5b:
99:63:1f:aa:c5:43:58:d1:ce:c7:5b:e4:9d:ed:46:58:cf:fe:
92:d1:d6:69:04:ff:23:03:e6:b1:4b:cf:9b:00:82:84:45:ab:
6b:38:13:df:eb:4e:91:e0:da:41:f6:c3:44:1f:a4:ef:3d:b5:
30:09:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:21:01 2025 by rpki-client