Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: GbSU9Q3brg7JWjA9aq1UzQaeRDqnnjUYLHnzXnAlXoI=
Subject key identifier: A3:BF:CE:C7:7F:44:B1:4A:94:D8:F5:62:2C:B9:44:59:4C:3F:1E:1B
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019A1F88D5A37CE7BC9EDE30DB7262F43220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 13AB
Signing time: Sun 26 Oct 2025 08:00:52 +0000
Manifest this update: Sun 26 Oct 2025 08:00:52 +0000
Manifest next update: Mon 27 Oct 2025 08:00:52 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: eINv02yU54IXlwdPcokhX3xkno8VUZ/Slk5UmWEGnHo=)
2: OwskQb4uWXAM3BST7CyJITEmG0A.roa (hash: kimIk4ViTfOZBO8RES3wd5ZfNkXzL5WJCpaQ5TXVjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:d5:a3:7c:e7:bc:9e:de:30:db:72:62:f4:32:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Oct 26 08:00:52 2025 GMT
Not After : Oct 27 08:00:52 2025 GMT
Subject: CN=a3bfcec77f44b14a94d8f5622cb944594c3f1e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:d1:48:ba:d1:3d:d5:b2:50:65:ff:eb:5b:
be:5a:d1:81:40:36:3a:15:ac:c1:74:38:b9:37:19:
0f:cb:9d:24:c6:99:e3:30:37:d6:5b:3f:3d:77:7e:
c9:f7:2c:fe:16:26:a0:14:35:e4:22:cf:66:04:9c:
ac:00:8b:c3:4b:e5:2c:0a:2e:a3:09:4a:3a:58:65:
aa:ed:70:6e:e6:44:d8:28:43:af:b1:b0:51:a7:70:
19:f4:ea:de:3c:cd:af:ee:57:f3:d9:c3:ab:63:2e:
21:b6:f3:a2:5a:05:90:6f:cb:8c:68:1a:d8:f5:09:
0e:a4:1c:5e:34:0e:56:d0:87:8d:a1:02:47:7c:d1:
85:96:d4:6a:17:bd:98:62:f3:95:f7:da:34:63:5d:
1e:70:7e:28:e1:b5:cd:cd:5f:9e:a3:43:13:ef:d3:
3f:6b:18:2f:19:8d:50:ea:1b:6f:c0:15:e6:5a:9e:
aa:e6:58:df:7e:78:1e:f7:12:d1:ae:ba:61:f3:11:
b1:9c:9b:4d:22:9b:83:32:ed:67:96:6d:99:c8:01:
e8:27:12:25:22:28:2f:80:d4:b6:b3:d5:e7:79:81:
da:db:a5:86:a8:c9:07:d1:52:0f:d9:af:16:97:80:
4f:a7:8a:c3:33:ce:b5:c0:f7:19:7e:f1:9f:3d:6a:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BF:CE:C7:7F:44:B1:4A:94:D8:F5:62:2C:B9:44:59:4C:3F:1E:1B
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d0:3a:ff:c1:bb:8d:16:5f:bd:4d:f8:2b:fb:29:1e:eb:b1:
f9:51:3d:cf:c3:ac:ef:17:5a:50:55:80:38:5d:c3:fd:4a:35:
ca:a3:9f:6c:58:11:f3:24:3b:46:70:5c:85:e0:20:e0:23:81:
8c:f9:25:f1:c1:2a:fe:03:c5:65:3a:1a:05:ed:40:73:29:f6:
c9:d7:55:cf:5f:ff:5d:9d:ca:7c:f4:96:31:5d:e1:ed:fc:7d:
38:35:4b:4f:60:fa:36:64:b8:c7:4a:91:11:2b:d6:f2:2f:c8:
99:94:23:92:bb:4e:a8:5f:6a:90:8e:88:04:70:2f:62:3c:3a:
58:04:24:9f:51:00:86:26:ad:87:ed:f3:63:b7:39:f7:7e:4e:
55:81:03:af:25:46:ab:59:ec:fa:b6:c9:a1:49:e5:c5:5e:c7:
f6:af:82:4f:16:f6:84:30:3c:39:e4:04:89:f0:2c:21:f5:2b:
fd:90:22:97:a4:44:fc:cd:db:f4:58:27:67:8a:70:99:30:a5:
31:dd:c9:c3:12:db:c1:92:1d:3f:7b:fc:8d:7c:16:f0:97:4f:
43:7f:29:47:0e:e3:fe:be:66:62:ce:07:61:bb:9e:52:b6:61:
cf:e8:1f:12:5d:2e:24:f5:2e:46:04:70:0a:9e:79:f7:2d:d7:
0d:c9:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:12:45 2025 by rpki-client