Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: 9ZTRK0DWtSfXCwsVSVA3ND8Ne/KwIOey9jI/CpFyolE=
Subject key identifier: 6F:F2:78:BA:35:5E:60:DB:85:F4:98:B6:4D:49:38:28:00:A2:0B:AF
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 019A21E4C4C997BE8360F6C6AB00F7746B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 19:00:31 +0000
Manifest this update: Sun 26 Oct 2025 19:00:31 +0000
Manifest next update: Mon 27 Oct 2025 19:00:31 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: Clx9pMaAGvn0wUau3gQ9J9dOYpY2DYpDUwfD3g/04w4=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:c4:c9:97:be:83:60:f6:c6:ab:00:f7:74:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Oct 26 19:00:31 2025 GMT
Not After : Oct 27 19:00:31 2025 GMT
Subject: CN=6ff278ba355e60db85f498b64d49382800a20baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:e1:45:4f:19:4b:ed:63:bb:83:aa:b3:05:
d9:26:97:59:41:82:94:46:fd:35:c2:f6:b2:82:de:
a0:8f:53:1e:e7:73:8d:9e:3b:b7:e2:f8:44:99:96:
23:84:3f:b6:5c:3e:e8:ad:39:c3:c9:0f:f6:63:50:
ae:44:d1:1f:3d:f2:7a:f4:c5:ff:73:97:37:94:81:
a4:cf:10:5a:82:a7:1a:29:f0:d7:87:05:74:a6:b5:
b2:e5:a3:00:86:01:11:72:78:20:9b:42:82:10:8d:
db:e8:8c:d3:1b:86:ea:57:86:7f:0f:05:3a:ae:9f:
54:56:ef:43:63:36:e5:a4:8c:5d:3f:c8:4f:03:c4:
de:af:e8:0f:25:5f:44:59:86:8f:05:0b:0a:0e:2d:
96:fb:83:fc:d2:f4:6c:da:8c:c2:2e:6a:bd:7d:32:
b1:92:09:44:18:04:27:21:12:a5:4a:cb:32:8b:52:
76:93:2c:0c:cd:a4:e6:8d:fe:ab:70:f0:0a:f6:00:
1b:7a:0c:22:47:d9:7d:73:f0:d2:ec:86:d7:32:1d:
8d:2f:d4:50:d1:3d:c1:60:84:81:93:09:c3:8d:bd:
48:24:37:28:0c:2d:e6:36:e0:2a:dd:9f:2a:09:3b:
e9:d3:38:0b:3d:7f:cc:7b:fa:31:aa:a9:2e:6a:62:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:78:BA:35:5E:60:DB:85:F4:98:B6:4D:49:38:28:00:A2:0B:AF
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:61:6f:60:c2:a4:97:c4:bc:95:41:01:3b:86:08:d1:ce:7e:
05:98:56:52:ab:b2:e0:cc:a5:00:8d:3b:d7:12:86:2a:20:75:
db:62:4f:54:50:89:1d:d1:1d:4e:05:32:31:05:a6:a3:70:10:
0c:c9:48:3c:1b:ce:a0:9e:db:8d:22:15:61:46:b2:44:49:94:
d6:68:61:f6:de:48:38:1b:05:99:fb:c2:98:2b:63:87:12:a3:
c5:cf:e6:00:7a:ae:fc:88:6f:a4:f3:30:78:61:da:7b:4a:a3:
00:5f:5e:3b:46:6f:61:cb:9a:14:b9:d3:ce:36:b2:36:11:e0:
64:d6:37:59:b3:97:36:56:58:a4:78:96:1a:18:c0:fa:4c:dd:
de:58:70:b2:0f:17:a0:35:49:49:f8:e9:c4:d8:f2:a0:ad:30:
ea:13:e1:17:96:ac:3b:9e:ea:f9:38:a8:c8:7b:06:d0:15:9e:
1a:b5:4f:ae:cb:40:60:e0:27:dd:a4:90:4c:88:11:e5:67:03:
0a:13:03:6e:97:dc:18:2f:d6:1a:77:4b:05:00:7d:6f:b7:fe:
21:97:24:ff:7d:24:a9:1e:45:84:c1:2a:7f:16:96:9b:57:26:
eb:23:47:2c:20:5f:55:8a:ae:03:fe:52:96:80:2e:76:17:08:
03:8d:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:38 2025 by rpki-client