Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: Gr0wQEHVtDGIXV5LfQdbTvTM03t5XRMRuFHsQrcVowU=
Subject key identifier: E0:DA:52:DD:5A:A1:1C:3C:88:04:68:06:E3:81:76:FB:58:85:49:11
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019A066D8BFC1F14C5F23C6D6A49E9DF650A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 16E8
Signing time: Tue 21 Oct 2025 11:00:33 +0000
Manifest this update: Tue 21 Oct 2025 11:00:33 +0000
Manifest next update: Wed 22 Oct 2025 11:00:33 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: LYzozRxpqdv1Fa9A/bkQU+Nr17iujin42UT0grSsQPA=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:8b:fc:1f:14:c5:f2:3c:6d:6a:49:e9:df:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Oct 21 11:00:33 2025 GMT
Not After : Oct 22 11:00:33 2025 GMT
Subject: CN=e0da52dd5aa11c3c88046806e38176fb58854911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:95:57:2e:a7:52:a7:56:c3:67:34:17:a9:
2c:db:a4:2b:26:d6:35:5b:9d:4b:18:c4:85:41:56:
e8:fc:6d:e4:50:b6:fd:3b:1b:1d:50:ac:70:76:b9:
88:51:f3:8b:9b:6e:cd:29:ab:60:05:64:49:74:61:
82:91:09:47:42:20:44:f4:aa:3d:3d:af:15:3f:35:
15:ec:28:79:75:fa:2e:da:f8:ca:9d:9e:db:3b:43:
c8:25:3b:8c:e5:8d:28:ac:62:55:87:44:b2:75:94:
ec:a0:41:3d:3d:7e:26:68:ba:c5:55:b1:39:73:8e:
dd:0c:71:a2:ff:74:67:9f:c4:cc:51:ea:b4:c6:dd:
4b:ba:8b:55:ee:d7:7c:bd:bb:15:a8:2b:d1:3a:26:
b8:44:d8:25:27:4e:8e:eb:ec:bc:d3:21:14:3b:55:
3e:95:bb:c4:0a:f9:0c:e1:9d:c6:47:69:e9:09:43:
78:93:3b:6c:fa:ef:e5:ec:81:fe:06:8c:34:75:46:
09:4d:02:7a:a6:ba:60:b4:96:3d:2e:d4:e8:fe:1b:
00:b8:0c:83:5e:4c:fd:5d:2e:49:51:79:ae:80:6b:
d8:9f:d3:f0:12:68:29:f5:b9:7c:22:a8:8e:b0:bb:
79:f0:68:5c:53:3a:50:93:62:2d:78:c1:2b:10:29:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DA:52:DD:5A:A1:1C:3C:88:04:68:06:E3:81:76:FB:58:85:49:11
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:87:bc:41:e3:96:cf:22:21:b4:63:b3:73:1d:a9:bb:59:5a:
ba:a8:3d:6f:f6:42:d8:68:0b:c3:bc:55:4b:55:f2:83:0b:27:
7d:91:37:c6:6f:fd:df:2a:2e:f8:f4:89:b5:57:67:a2:05:80:
9c:d3:86:ff:19:8c:e4:28:28:af:f7:8c:bc:f9:8f:5c:da:92:
83:ea:dc:fa:1c:a8:f0:6b:f1:d5:4a:5b:00:3b:09:6a:57:f7:
05:d5:76:4b:1c:e7:c1:5f:e6:23:cf:c6:99:f8:a8:8d:0e:ac:
c2:c9:49:e6:f4:0c:34:51:af:81:a7:4d:04:8c:06:f6:49:91:
84:31:dc:63:34:e5:76:72:b2:b7:7f:ee:24:bf:13:0f:85:8f:
68:bb:6b:89:31:85:db:d6:cb:e4:4d:5d:d0:cd:b0:df:c7:92:
85:6e:4a:52:7e:7f:d9:ff:c6:41:38:f2:86:34:3d:20:04:cc:
a2:bf:ff:3f:d4:c3:26:5a:f9:a5:a1:06:78:5a:5d:77:75:37:
aa:af:92:62:fb:fb:78:e7:ef:b9:a4:78:89:6e:7d:db:e6:0c:
be:ad:dc:64:d0:2c:70:e4:06:66:5b:c7:ed:0e:c2:81:8a:b3:
ed:01:dd:4a:ee:5a:43:3a:aa:d7:4c:f0:09:f8:41:8f:4a:91:
c2:cc:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 13:53:43 2025 by rpki-client