Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: 3TuNTcPt3Ainh2TOGRBEfNS2HBd/ksNmWGa4nvPrTlU=
Subject key identifier: 99:0E:BF:72:6B:AA:6C:6C:2C:2F:6E:2D:98:28:EE:01:11:EF:50:E1
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019A26674205B2D4EE112732F6D803DCBBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 141F
Signing time: Mon 27 Oct 2025 16:01:32 +0000
Manifest this update: Mon 27 Oct 2025 16:01:32 +0000
Manifest next update: Tue 28 Oct 2025 16:01:32 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: I8N1QpbrSuXNXnTfzwarO9zbj8jlM6T0yVhrwpCFQt8=)
2: tZasuPD6JQA_ahjp5Ij5d_DOYcw.roa (hash: m55Anp1468NYkjmZHCfthwEnWOmLpA6A1Rbb77d5auw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:42:05:b2:d4:ee:11:27:32:f6:d8:03:dc:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: Oct 27 16:01:32 2025 GMT
Not After : Oct 28 16:01:32 2025 GMT
Subject: CN=990ebf726baa6c6c2c2f6e2d9828ee0111ef50e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:0e:d2:ec:f4:28:27:8c:63:e5:1b:6e:97:
d7:91:22:34:a6:06:ad:70:70:e9:8c:3b:42:cc:b4:
87:fb:bc:a1:f9:fe:f4:ba:a0:e0:ff:e5:a4:3f:21:
06:5b:1e:b8:2b:1a:fb:29:76:e3:be:ee:a4:a2:cd:
bf:8e:98:02:3a:d6:9e:2a:9a:20:c0:91:eb:32:d8:
df:5b:3d:57:8e:2f:d4:a0:0f:84:91:ec:1c:d1:c7:
3f:4a:f3:7d:24:1f:6c:49:71:01:26:a1:7a:5d:8c:
ae:5f:2e:ea:c5:9f:20:bc:e3:d6:99:b4:9b:42:6e:
2f:f6:54:cc:8f:ff:ac:92:05:79:cb:d9:1a:35:ce:
26:5e:90:03:50:f4:ee:b1:7c:c8:7f:cd:4d:fa:a7:
3e:87:ec:11:49:5f:2a:fe:13:de:b9:53:c6:fa:9b:
08:e7:78:c6:7c:84:9c:d8:ce:ce:1e:0c:df:e6:f4:
71:eb:99:fa:eb:84:4b:c3:a8:43:32:d8:f9:6b:9f:
37:ca:9e:d4:60:3a:25:fe:2e:62:c9:f8:40:dd:f4:
59:38:ed:99:72:e2:32:3e:93:49:aa:85:be:b7:c2:
2f:88:d3:c9:5b:b4:c5:77:2c:ec:57:2f:25:53:66:
27:18:1d:19:25:ec:27:df:a1:00:c0:53:01:03:af:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:BF:72:6B:AA:6C:6C:2C:2F:6E:2D:98:28:EE:01:11:EF:50:E1
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:31:2b:e6:2c:3e:14:ea:0b:30:b6:e9:63:90:62:ab:4e:30:
c3:7c:b4:38:6a:b1:80:91:b1:a6:8f:12:a6:b0:17:bf:e5:20:
a6:5c:ff:c4:c7:ff:9d:3b:d7:42:43:7a:b3:d1:2b:51:37:21:
c3:19:36:46:e5:8d:83:98:85:46:ef:ce:40:a2:19:9b:f7:34:
34:6c:ef:0d:38:e4:7b:4e:96:a6:dd:35:0a:01:ed:35:9e:44:
c4:61:d3:4d:88:e2:6a:dc:35:1d:e2:7a:7a:4f:f0:29:69:12:
61:14:0f:69:e4:a4:62:70:1a:d6:7e:3c:63:31:e8:2f:c6:b7:
4f:72:d1:4e:47:b2:46:c4:39:d2:f2:19:af:54:64:6c:48:fc:
85:d2:8f:5c:77:f4:12:50:25:57:05:16:17:a3:e4:ce:d8:75:
63:16:a2:19:ef:88:d8:a1:57:db:c9:a6:43:40:7c:9d:43:3f:
b7:42:69:38:9c:83:e1:08:15:d3:f1:87:ff:dd:1e:47:90:46:
71:5f:07:56:ee:eb:58:35:be:b9:91:ec:ca:58:98:87:fa:3f:
4c:c8:01:4d:a0:1b:02:ce:23:05:c3:b6:18:e7:01:df:d7:7f:
5a:55:98:fe:6f:55:3d:2f:e8:f5:3c:1c:4e:26:cc:5c:7f:f6:
2a:a7:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:28:02 2025 by rpki-client