Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: iK6uS+k9FQfiAz3TBIpuq4pHmx+8xU/iXMezi6bREMo=
Subject key identifier: 49:02:E9:B9:C4:90:0E:D8:95:80:25:C4:3A:08:2A:23:BC:94:50:67
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 0199C34435198AB6863BF9748D313D9C90C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 16C6
Signing time: Wed 08 Oct 2025 10:00:51 +0000
Manifest this update: Wed 08 Oct 2025 10:00:51 +0000
Manifest next update: Thu 09 Oct 2025 10:00:51 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: aVGNRE2e2uNYrzKiCMRlYbVB08JRukgiTKvvhBkdQRc=)
2: SeJ_MUIfyEphmZtsrhRCas-Zt7E.roa (hash: 8yf8UNspB0AXwJ0f5mj6a36u/vut8a8srUMh6OwnuMY=)
3: nE72fRq5x2AdGCpsReX1DOqVoW0.roa (hash: LAILnXnxyWYExTH4qCTlNLIx2ujkg7Q+2T14oqEfAzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:44:35:19:8a:b6:86:3b:f9:74:8d:31:3d:9c:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Oct 8 10:00:51 2025 GMT
Not After : Oct 9 10:00:51 2025 GMT
Subject: CN=4902e9b9c4900ed8958025c43a082a23bc945067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:04:eb:b6:2e:12:ba:e2:94:24:49:be:af:fe:
9c:6f:0f:be:61:ef:05:71:45:d0:6a:83:2e:4d:a4:
51:27:92:5a:80:21:71:86:74:9a:a2:b1:65:98:e2:
6e:b3:c1:2a:6c:e6:85:82:a0:27:07:22:5e:19:4b:
4a:40:46:24:e7:e5:83:86:6b:b0:96:04:6e:dd:da:
6f:97:6d:21:d8:05:10:cd:75:e6:aa:41:44:a5:bc:
ca:43:81:69:4a:ab:82:f5:e9:3d:d0:a0:99:aa:ee:
62:a7:e4:55:97:d7:08:0c:9a:1b:04:bd:99:f1:7b:
c1:32:4d:21:2d:8a:27:93:8c:58:8e:96:93:95:ff:
95:3a:df:38:d9:3d:59:5e:56:9a:70:01:a7:fc:67:
0c:4e:ad:41:0c:0e:f3:b7:cf:cb:4a:17:c7:d9:58:
0c:68:03:8c:38:7d:d0:cd:d2:17:6a:f6:ec:15:80:
5d:71:ae:5f:73:93:9f:9a:82:76:1c:55:82:c6:fd:
47:40:71:dc:2a:5c:e6:34:53:26:18:c8:0c:e1:88:
02:c1:74:31:f7:2f:ef:02:a9:72:75:b2:4a:d4:6f:
16:37:0a:d4:5f:a1:ae:06:ca:52:6c:00:ef:be:04:
5e:7f:28:2b:db:a0:b8:fd:59:16:82:d0:e7:c1:5f:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:02:E9:B9:C4:90:0E:D8:95:80:25:C4:3A:08:2A:23:BC:94:50:67
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:21:42:99:12:0c:7a:b4:75:6c:62:35:3a:29:0b:29:c0:e3:
6d:fc:3f:c2:95:11:63:75:63:43:2f:62:8d:58:35:e9:b8:48:
d0:07:98:e2:18:e0:75:ea:8b:71:72:3e:13:e9:eb:e4:85:c1:
f9:71:96:5e:31:4c:cd:8f:81:09:93:6d:b6:20:da:f1:09:d8:
be:0a:da:13:36:1d:5a:7d:dc:81:c6:8f:98:58:de:a1:fd:df:
14:0f:c7:33:5d:1e:a5:98:50:d2:3d:f9:61:d0:97:34:a9:62:
c9:51:2a:ba:99:bc:96:9c:37:1e:0a:a1:93:f8:7a:64:23:cc:
ee:cf:bd:80:2c:bf:ca:fd:56:5d:7d:d8:c5:19:a8:f6:4a:3a:
6f:2f:54:6a:9b:4b:ef:c7:0d:6b:6d:ce:b4:3f:7d:57:cc:2b:
94:2d:02:cb:b3:36:3f:d4:e7:0b:f3:0e:24:27:b2:6f:38:37:
0f:cf:55:0b:75:1e:02:bf:a3:af:3b:b7:09:bf:65:01:51:f7:
dc:78:48:42:8c:70:a3:21:8b:fb:d9:39:66:bd:62:4a:7c:ba:
63:bd:67:62:bc:95:2f:00:17:d0:dd:b4:80:cc:98:a9:6e:a5:
a1:e5:2f:e8:7a:ba:e1:e3:16:03:71:51:dc:01:03:18:c3:47:
ce:de:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:22 2025 by rpki-client