Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: LrfDIX0/+jth47CSxx38ePv0nro+p22N+IOC7c0rtBY=
Subject key identifier: A7:20:9B:57:43:1F:17:FA:2B:DE:47:D4:AE:E1:16:33:2D:7C:B4:C2
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019A2108F224D7C38747C050A6D196C31984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 15:00:25 +0000
Manifest this update: Sun 26 Oct 2025 15:00:25 +0000
Manifest next update: Mon 27 Oct 2025 15:00:25 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: owu2nhXAOkg0bsvaHgjLs+k9VH4kU5gWsMyiulkcSKo=)
2: _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (hash: WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:f2:24:d7:c3:87:47:c0:50:a6:d1:96:c3:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Oct 26 15:00:25 2025 GMT
Not After : Oct 27 15:00:25 2025 GMT
Subject: CN=a7209b57431f17fa2bde47d4aee116332d7cb4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:a4:cd:1f:5f:96:5d:5f:5a:4b:e7:87:73:
d9:15:92:63:7e:65:42:5c:74:88:ca:c4:91:a6:ad:
e4:b4:6c:18:54:29:15:78:96:98:1d:8f:28:b3:f7:
f4:fd:7f:81:05:e9:35:12:70:87:d6:06:80:85:5f:
ad:d2:c2:5b:69:9a:5b:da:1c:b5:6c:c6:70:25:14:
75:bf:4f:62:f7:6f:96:ea:56:3f:90:31:b7:3b:29:
9a:23:dc:b5:26:52:c0:9c:36:74:53:c6:26:05:c6:
09:b3:8c:9e:b0:11:83:7f:68:c5:28:01:93:a8:fc:
04:a1:eb:35:6d:e9:79:69:7e:32:02:dd:3a:e0:21:
07:c5:ef:07:fa:d2:39:d6:23:ef:91:e3:46:a0:20:
2b:1e:4c:5e:3c:d6:4f:95:5f:b3:b5:b2:8b:06:41:
36:61:a5:80:06:99:f2:bb:40:0f:7f:1f:c8:3c:9f:
fa:a5:b4:f4:15:49:25:2a:e0:da:8e:bd:d5:7e:d9:
e0:f6:85:94:b3:45:e9:a4:aa:79:83:27:96:81:77:
ad:77:f2:13:82:9a:ea:81:13:e2:3d:4b:ab:d7:35:
8f:01:e5:57:ae:b4:00:ad:c6:1f:b7:28:4e:c6:a9:
4b:4e:26:47:eb:88:73:62:d4:fe:f5:f2:1a:9b:be:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:9B:57:43:1F:17:FA:2B:DE:47:D4:AE:E1:16:33:2D:7C:B4:C2
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:97:bf:ca:92:e2:a4:74:e0:93:87:40:e7:25:98:0e:f6:75:
5b:97:60:52:26:bc:13:5d:39:f9:bf:3c:4b:ab:69:62:9f:8d:
1e:66:e9:7a:ce:81:b8:2f:47:69:a1:7f:62:88:35:0c:dc:a1:
85:ef:fe:bf:9f:5c:ba:91:e4:c0:fc:d0:ec:10:50:b1:9f:fd:
50:e2:49:f8:eb:22:c4:a7:73:87:08:39:1a:d5:7a:d1:07:18:
66:94:63:9c:3e:5e:80:c7:17:28:8d:ba:50:fd:d9:5d:c9:e1:
a8:16:5c:0b:71:41:15:30:93:c3:b4:01:f1:82:ed:9c:32:e2:
25:40:ac:10:d2:73:3b:cb:2a:e2:9b:a3:97:85:64:22:6f:cd:
c2:e9:5b:0e:db:b7:9f:a2:99:78:10:44:60:c4:d0:f3:28:42:
d4:c2:ec:57:71:72:d7:4e:43:65:29:1f:ba:66:69:78:86:75:
4a:3a:6e:3f:8a:0f:f0:01:bb:81:92:dd:ec:0b:92:c0:f5:1d:
b2:64:1b:92:d2:66:6a:d7:41:97:67:cd:5b:0a:ca:50:b3:e1:
ee:3b:d1:d8:94:ca:67:13:1d:ba:bf:67:bc:3c:6d:0b:4a:51:
f4:48:38:54:92:83:7d:c8:5e:db:fe:a5:34:02:81:74:46:e3:
b4:40:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:19 2025 by rpki-client