
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: JI3f24l5t3wwlSaFBmbDdGHOayir+gpxHNxQIIPKL2k=
Subject key identifier: C8:37:43:76:05:34:92:ED:8D:CE:F4:CF:A7:CC:AC:2C:BF:2A:13:F9
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 019A503E297F8C83A4ABB0722F2C96E5EA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 19:00:42 +0000
Manifest this update: Tue 04 Nov 2025 19:00:42 +0000
Manifest next update: Wed 05 Nov 2025 19:00:42 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: hyn0GSW5wkgcgtwzqs+c+2fznHSN5sYUHHuONNQ3YrI=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:29:7f:8c:83:a4:ab:b0:72:2f:2c:96:e5:ea:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Nov 4 19:00:42 2025 GMT
Not After : Nov 5 19:00:42 2025 GMT
Subject: CN=c8374376053492ed8dcef4cfa7ccac2cbf2a13f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:6e:c6:23:29:b9:0f:18:3f:36:f4:47:67:
e4:bc:6a:50:b6:83:ab:68:1e:38:a6:79:82:d4:f1:
ad:1e:f9:b7:21:33:4c:2f:7c:db:65:3c:4e:cb:54:
6a:55:fc:91:6f:72:4e:e8:36:d3:0f:e0:10:60:06:
4d:bc:76:52:92:0b:b6:58:c6:45:df:2b:e8:f9:c3:
e4:aa:10:00:48:5c:28:07:98:b3:95:79:51:1f:38:
ab:cd:68:6a:1b:6a:80:4a:8d:76:87:ae:7f:a9:df:
c2:f8:91:47:7b:f4:a3:7c:e1:32:55:13:8d:49:e9:
df:6d:d6:70:9c:c6:95:00:59:5d:94:72:2b:35:df:
0e:84:5c:e7:3c:e1:83:03:7e:6a:18:d2:c4:b0:d2:
6b:4f:0a:e1:f5:3c:be:8c:c7:56:ec:e2:59:74:ad:
e9:63:ec:a6:09:6d:e5:54:0e:a7:56:b7:9d:35:5b:
50:66:5c:3e:71:77:e8:6e:3a:a6:a9:b9:3d:a6:13:
d2:a3:39:5e:52:59:ea:3a:0e:b0:56:cc:88:bd:c2:
f1:4f:65:c1:b4:d7:ba:9f:82:f4:93:8c:e0:74:ae:
84:d5:02:58:62:14:34:c4:5e:56:40:84:17:53:4d:
d7:de:a0:55:10:b6:22:38:57:c3:68:76:be:4b:c8:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:37:43:76:05:34:92:ED:8D:CE:F4:CF:A7:CC:AC:2C:BF:2A:13:F9
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b8:9d:5c:30:b0:ce:ae:b8:eb:2a:9c:d4:c1:f6:5d:da:02:
3d:91:4d:45:48:5b:57:2e:8b:72:10:ed:cb:8a:31:b3:96:aa:
b7:e3:c0:7c:0b:90:ba:df:7e:7e:d8:dc:a4:73:18:ba:8a:e7:
80:d3:f9:99:16:8d:6c:1e:59:6f:f5:8e:83:0d:fc:77:bb:f9:
cb:1a:14:4b:64:08:9a:20:57:9d:7e:1e:68:26:35:76:84:5d:
bc:7e:c2:7c:93:7d:f8:79:87:4b:fa:7d:a4:64:18:1e:45:e2:
f7:95:f0:7a:16:98:09:c2:47:7f:65:94:55:16:3f:a3:7b:d1:
a5:ed:ee:ad:a0:a3:6e:02:7e:d1:4e:c3:9c:40:41:dd:07:3c:
b7:0c:18:31:53:c1:8e:58:f0:e2:5c:df:4a:0a:bc:88:cd:90:
59:12:de:42:0d:73:d9:46:b4:3a:c4:46:25:d2:9c:7d:75:a6:
87:06:fe:9e:06:c2:b4:96:49:24:28:4d:e1:3c:45:25:e2:f5:
5a:10:f7:ee:00:6f:64:3c:f2:26:84:32:f2:f4:ae:d3:1b:48:
04:4f:25:e5:1d:62:42:63:3b:82:2b:e0:03:1b:44:1e:3e:6c:
47:bb:21:89:46:ef:17:ad:06:29:a4:a7:b2:41:62:b7:6f:8d:
c0:45:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:24 2025 by rpki-client