Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: rsfZELOdPkGZLiXNMTnEzfGMklNlyQW/OOBj+cjFIak=
Subject key identifier: 95:78:08:78:7E:A8:5E:08:91:5D:21:DB:C5:A5:1F:50:F5:59:5C:00
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 019A1617B19BB1FC9269403771B1E006A992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1682
Signing time: Fri 24 Oct 2025 12:00:42 +0000
Manifest this update: Fri 24 Oct 2025 12:00:42 +0000
Manifest next update: Sat 25 Oct 2025 12:00:42 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: h+Y3zpisr0Rioo7yLZRfr2G0DE7lfr827jQUdSJjt3c=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:17:b1:9b:b1:fc:92:69:40:37:71:b1:e0:06:a9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Oct 24 12:00:42 2025 GMT
Not After : Oct 25 12:00:42 2025 GMT
Subject: CN=957808787ea85e08915d21dbc5a51f50f5595c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:b0:70:aa:06:51:22:90:f3:bf:d3:d7:41:
14:0a:59:bc:3d:b9:22:99:b4:b2:7e:7d:37:77:2f:
76:85:91:9c:e9:54:5d:c8:ef:d4:f9:43:17:95:99:
5d:28:81:5f:07:ca:ca:7b:0a:a4:f6:69:c6:ab:a4:
d2:32:66:9a:ff:3e:6a:e6:6c:db:e3:a4:58:8b:1b:
e8:40:89:f1:4a:d1:86:1b:a0:81:bb:c5:3c:e2:b1:
67:28:db:b0:c7:98:b8:b8:c9:c3:ca:f9:a3:7e:11:
10:c8:1f:32:21:1f:ca:64:73:69:e3:aa:13:18:e0:
0c:9f:84:a5:34:be:95:74:f0:5b:2e:4d:1c:a9:ee:
36:e7:7d:a1:ff:45:91:ae:fd:4e:0a:62:38:bb:4d:
4c:92:e8:c1:51:2a:0a:34:98:ed:38:91:ef:ba:5a:
a3:58:2c:e6:fd:a7:64:af:ef:1b:72:af:2f:bc:80:
30:6f:58:52:22:40:d7:a7:2d:a6:b3:b8:6f:08:99:
41:29:8a:bc:fa:66:8e:75:d6:ef:b0:62:38:bc:1f:
b2:9f:80:ac:70:e5:93:65:f3:22:7b:a4:4f:99:da:
80:98:15:2e:16:07:79:89:a4:07:52:6d:2d:bf:e8:
37:f9:d0:79:9c:72:c7:aa:5f:6f:e4:42:de:86:8d:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:08:78:7E:A8:5E:08:91:5D:21:DB:C5:A5:1F:50:F5:59:5C:00
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fd:00:7e:b6:30:72:e0:5c:ac:bb:4f:f6:e9:f2:f3:11:ba:
b4:03:df:8c:69:6e:31:d9:8c:4c:77:22:86:76:56:57:c4:f1:
18:2e:ff:b5:0a:91:65:93:a2:0a:a0:af:dd:a7:cb:82:20:a4:
d9:87:48:88:f0:04:87:cc:ff:83:19:68:4f:2c:d5:da:fc:5b:
7d:78:a6:5b:da:96:4c:b1:59:6f:c1:d3:47:49:6a:ad:a1:76:
a5:2b:2a:ea:cc:e6:88:a1:d8:7d:59:75:f9:94:7d:5f:a7:80:
08:dd:ce:1e:62:16:a1:5e:8c:ea:8a:1a:b2:db:fc:0b:dd:a9:
4b:f2:87:66:1d:34:5e:70:25:c7:96:c7:5a:95:5f:cb:c1:4f:
44:98:da:8c:d7:21:3f:09:40:02:61:0b:bc:22:e9:ee:cb:3d:
81:b7:12:87:02:48:f2:a7:6b:27:ba:41:93:4f:f4:a8:c3:7a:
37:95:99:3d:bc:b6:df:1e:3d:06:bd:44:0a:b7:3c:a4:9f:99:
55:39:2f:f9:b5:62:de:5c:83:65:4d:4f:1d:91:ad:a4:79:72:
64:51:91:ec:4e:a8:bd:39:62:c7:5a:01:c1:4f:90:70:55:95:
53:6a:e8:ca:e0:0e:f6:f2:e5:2f:36:23:5b:9e:c3:41:cc:7c:
12:90:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:53:00 2025 by rpki-client