Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: tH9EbRfsCSibAGtmRvCR2dzzA5fvKf2zV8e2jt+ZEM4=
Subject key identifier: D1:DE:A7:10:0D:89:41:E4:18:6E:68:4A:0F:4A:0D:50:08:FE:6E:F5
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 019A1AD1815F19F79B20E128B39EE4953DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 10:02:08 +0000
Manifest this update: Sat 25 Oct 2025 10:02:08 +0000
Manifest next update: Sun 26 Oct 2025 10:02:08 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: QZakQmMHMCrB3hne/uZK5HzeVxUXt8yDT7U7WM/SpHM=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:81:5f:19:f7:9b:20:e1:28:b3:9e:e4:95:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Oct 25 10:02:08 2025 GMT
Not After : Oct 26 10:02:08 2025 GMT
Subject: CN=d1dea7100d8941e4186e684a0f4a0d5008fe6ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:3a:7e:a9:81:94:a1:05:09:ed:fd:bb:ac:
ee:a0:7e:5b:58:4b:09:8c:01:66:4f:a9:4c:2e:d3:
b2:cd:0d:4f:10:38:41:35:fd:20:d5:40:7b:a8:45:
f6:4a:1f:10:06:22:06:41:6b:fd:50:df:5c:c5:c1:
f1:6e:ad:f1:64:fb:49:12:01:3c:d9:85:6b:51:81:
09:31:75:9e:c1:8e:81:34:a6:5d:d2:cc:14:04:03:
ab:b6:ab:ca:18:5d:cc:c5:80:e3:4e:35:17:4f:99:
bd:41:6b:3a:64:30:61:4a:b5:02:2d:d9:69:7c:5f:
b9:de:18:18:fe:ab:2b:c1:ca:c7:0d:4e:b4:6b:e9:
6c:5d:23:dd:0d:73:a5:dd:20:4e:17:e3:07:d8:63:
b9:d4:b6:ad:99:9f:d6:41:fd:98:da:ca:d5:b1:5e:
b4:89:f2:1a:fd:d9:52:5f:e8:73:a4:f3:e2:72:8f:
21:d6:e6:43:ee:91:8b:1c:83:73:ab:f5:6e:42:92:
1d:62:ca:90:fc:4a:9f:56:bd:9b:35:94:e5:3e:cb:
c4:b6:16:74:e1:c4:7a:20:5e:41:18:54:cf:74:5a:
b2:1b:c4:b6:d6:53:ed:5a:9f:ff:f6:e6:f4:99:6e:
c1:d5:ef:7f:e9:6d:4e:f6:91:07:f9:b0:fa:52:89:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DE:A7:10:0D:89:41:E4:18:6E:68:4A:0F:4A:0D:50:08:FE:6E:F5
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1b:33:68:0c:1f:25:5a:b7:54:33:51:f7:ac:33:12:f0:f4:
48:a1:cf:fd:e0:68:87:14:93:62:db:5b:d5:64:7c:79:07:06:
5d:37:1b:5b:57:1d:47:78:e0:12:09:c5:68:c4:68:bd:fc:67:
2b:03:fa:e4:30:13:1c:d7:53:73:34:0d:c6:36:76:8b:3a:26:
a7:6a:24:89:1e:13:34:ff:bd:1a:1a:d3:c8:6f:dd:7c:d5:a3:
63:0e:07:e9:62:eb:65:2b:55:6a:71:06:4f:6f:fc:30:f4:06:
28:8a:11:a0:06:18:27:94:16:80:de:03:8e:dc:60:c5:99:64:
33:b2:10:de:79:fa:82:c0:90:0a:4f:f9:92:6c:28:e5:62:08:
f2:31:af:0b:81:52:0d:2a:91:7f:eb:75:7d:d4:38:cb:ec:58:
a8:57:36:11:70:8e:68:af:fa:e5:ff:2c:8c:b8:2d:69:1b:3e:
65:f1:b9:16:90:17:d9:fc:94:de:5f:ed:ee:81:e5:e0:51:2d:
34:31:fe:85:6f:4d:5a:c8:64:57:37:40:c1:0b:e8:c7:95:23:
91:60:b0:d0:7b:cb:29:c5:d5:07:74:90:e9:61:7e:6b:d7:22:
4d:52:9b:17:04:94:48:ee:bf:e5:26:ff:3f:07:7d:7a:78:1c:
3d:8d:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:14:22 2025 by rpki-client