Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: u1Fu6NknYDC1JQMPSjrrCXxxL0yE3GhXguuiEXzyKiA=
Subject key identifier: A4:65:AA:4A:F2:B3:AB:D0:4B:3E:24:DB:91:F8:19:A0:26:98:0B:19
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019A729332C503C543714708690A5388EB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 16DE
Signing time: Tue 11 Nov 2025 11:00:40 +0000
Manifest this update: Tue 11 Nov 2025 11:00:40 +0000
Manifest next update: Wed 12 Nov 2025 11:00:40 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: J7WjbbpQbT3Yq+BU//FlU7sT65tylc5KDexQ81eypXc=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:32:c5:03:c5:43:71:47:08:69:0a:53:88:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Nov 11 11:00:40 2025 GMT
Not After : Nov 12 11:00:40 2025 GMT
Subject: CN=a465aa4af2b3abd04b3e24db91f819a026980b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:e3:9c:78:88:d1:b4:ff:04:7a:f1:9a:ec:
b4:e7:33:4c:19:88:4e:f9:75:79:1a:c8:03:af:73:
07:fa:d5:40:82:cb:ca:4d:a7:fd:3d:06:05:73:6b:
17:60:1a:aa:31:91:9a:f7:4c:77:a0:1a:d6:75:98:
c7:8e:07:46:75:87:ec:0b:bb:f2:ad:94:3c:e9:97:
81:4f:1e:a0:ef:db:67:69:25:9d:a4:ad:63:ef:4b:
c6:f0:5e:1c:bf:cc:2f:cd:ff:41:10:9f:41:0a:69:
73:5f:8b:40:e1:66:fc:44:c0:a2:4a:af:ae:fc:5b:
b4:bb:6d:26:68:92:9f:ce:bc:41:a4:b9:17:59:8a:
c1:3b:c0:99:37:1a:b4:6f:b4:4a:85:74:bd:27:1e:
97:be:e4:ce:34:66:82:ea:2a:dc:2f:1a:67:1f:7c:
79:bc:f5:1c:1b:f9:a9:61:0e:d3:af:f5:d9:05:70:
d0:3d:c3:b6:a5:43:da:04:1f:88:1b:54:f8:04:7d:
98:6b:c6:e6:94:ba:9c:26:4f:18:76:70:d4:60:b9:
e9:d3:c5:b4:9f:f6:a4:cb:24:72:e4:b9:a1:fc:5c:
27:7f:38:1d:8c:ea:1d:67:08:7a:72:f5:84:f5:41:
73:ae:e7:cd:0e:2b:aa:2a:28:eb:4b:2e:e1:58:07:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:AA:4A:F2:B3:AB:D0:4B:3E:24:DB:91:F8:19:A0:26:98:0B:19
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0e:23:0f:de:84:77:2d:74:99:7e:c7:39:ef:4d:3e:db:38:
eb:93:64:cd:8a:e9:28:1b:b1:a4:eb:cd:e8:c3:d5:74:83:a0:
89:9c:37:e3:30:e4:33:aa:02:3e:86:26:82:0a:b7:c2:f7:db:
54:e2:35:4f:8c:9d:ad:69:46:b1:7d:f1:81:db:5a:a0:0c:8d:
d1:78:5a:de:b0:d5:52:47:d3:63:fc:ac:40:1c:98:9e:7c:80:
bf:c6:dc:21:f6:52:8b:cd:e9:2c:7e:bf:7b:92:6d:ab:7d:02:
c0:9c:a5:ef:a5:f1:80:b1:01:59:fc:99:db:72:bc:aa:5f:11:
87:d9:a8:78:35:32:7e:4e:51:52:99:35:f0:97:84:82:93:2a:
c7:93:19:b0:e1:ea:63:b3:b6:f1:c7:77:70:34:bb:36:91:74:
b2:2a:f5:e4:3a:95:57:30:68:da:80:a6:94:37:c4:31:11:9d:
63:74:f2:aa:df:25:d5:29:fa:e6:83:c7:3e:46:ba:c3:da:02:
82:6c:66:6f:47:ee:34:a8:5a:b1:37:57:58:51:16:3e:0b:4e:
f1:89:b0:7c:4e:da:13:51:69:66:23:be:55:d6:33:8b:71:fb:
f4:c3:eb:5e:e9:21:af:e5:76:67:34:17:c1:d1:ff:5c:71:6d:
a2:fe:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:45 2025 by rpki-client