Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: 4I7qifEKRNBzeOZCOYlzRdSWgcXaLpkA0BayTIRTVpk=
Subject key identifier: 3E:71:FB:79:98:C8:D1:31:8B:D0:7F:8A:0D:79:56:2D:F9:DB:C3:EF
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019A2B1F0089C3FF34CC0E4869A9E5F6311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 14:00:43 +0000
Manifest this update: Tue 28 Oct 2025 14:00:43 +0000
Manifest next update: Wed 29 Oct 2025 14:00:43 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: /KlJuubAYFUHOhCx3cW8bj9sBJR+/gvzjuASHcE+V9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:00:89:c3:ff:34:cc:0e:48:69:a9:e5:f6:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Oct 28 14:00:43 2025 GMT
Not After : Oct 29 14:00:43 2025 GMT
Subject: CN=3e71fb7998c8d1318bd07f8a0d79562df9dbc3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:eb:65:cf:f1:d7:28:84:5d:d1:8f:e7:ef:
c6:05:b2:a9:f8:80:21:30:15:bb:54:70:5c:3a:08:
1b:c1:91:64:80:bb:7a:16:3e:e4:a9:f2:f6:29:f9:
0f:28:fa:57:20:3d:a3:22:73:f7:ca:38:c8:2a:8f:
f4:6a:3e:8e:50:81:2a:46:00:c4:23:b1:52:c3:39:
c6:e2:17:c6:e5:88:f3:c9:30:d4:a5:18:14:35:e9:
8e:0c:c5:f5:98:4d:e3:ba:9a:4b:7a:1c:ce:a6:bd:
fc:93:eb:45:12:44:68:e7:c3:c2:f9:1c:c3:48:16:
f3:0d:cd:82:43:97:42:58:f0:24:7a:db:b5:6b:47:
1e:71:50:f3:85:19:20:37:9d:40:37:3b:b6:9d:63:
a2:61:57:91:92:8d:fd:79:b7:13:f7:37:6b:e8:d0:
89:e1:8d:e6:b3:d9:a0:05:9b:44:42:52:d0:a2:91:
f8:f3:a6:71:55:45:a6:e5:31:59:6c:75:94:0a:ed:
19:2e:e1:b1:f0:cf:0b:e7:ac:95:c7:73:92:34:3a:
4c:c0:14:7b:3e:11:42:84:45:2f:8b:ed:71:e4:b1:
c5:a0:f5:c0:26:49:fe:97:ae:76:f2:2f:55:f5:5f:
7b:df:44:95:c8:44:da:cd:01:51:c9:e8:a0:cd:8c:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:FB:79:98:C8:D1:31:8B:D0:7F:8A:0D:79:56:2D:F9:DB:C3:EF
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:20:bb:19:7b:73:fe:a7:f6:75:1b:a4:f5:25:36:61:74:
57:51:a0:ec:b3:ff:30:e5:73:45:48:fd:bd:a5:fe:3f:5a:bb:
ee:2d:7e:64:d9:41:28:21:27:d0:34:30:2d:42:47:87:5d:1b:
c1:c8:9f:6d:4f:dd:23:5b:80:d3:f5:08:42:08:5d:f7:0e:2c:
c6:79:71:10:b1:70:28:c9:0c:b8:da:83:42:9f:8c:5e:cc:c4:
19:0f:87:6e:d4:17:70:fb:ee:0f:29:fb:17:da:09:fd:de:f8:
30:91:57:bb:27:ad:2f:90:b3:a8:cc:ac:7a:c0:4d:28:82:db:
c9:a9:8d:67:80:fd:4b:d2:80:44:5c:68:5f:c9:95:ac:8e:4e:
8e:7a:18:b1:b2:c4:c3:b2:bd:4b:19:27:fe:d5:85:cc:53:74:
9b:be:54:38:24:04:bb:36:60:31:2c:27:d6:6b:67:25:e4:e8:
8e:a6:77:e1:1e:e8:b3:37:fe:53:c8:0e:36:0c:37:c8:1f:aa:
86:fc:e4:14:b9:00:c5:5f:2b:e2:d4:4c:92:cf:53:80:6e:4a:
32:e6:71:37:a0:b3:df:d3:24:1f:ed:e3:7c:4e:8f:a1:6a:dd:
c7:59:0f:4d:ca:f2:ed:83:f8:f0:0f:3f:eb:9c:bc:a1:aa:b0:
2e:13:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:26:24 2025 by rpki-client