
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File: 1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier: BamvDEYisPWyPdyEfviQnK4r3lNVf/zdPTJmk7u98sg=
Subject key identifier: AC:EB:FD:A0:A1:5E:7D:A8:5A:58:93:67:68:20:61:AB:FA:35:F8:13
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial: 019A4FD017FD51E26D1EECABD651AD2F48B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number: 1645
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: IYvaYpbNqIlnsRuSy6cYzMS0r35RvpOymSYiFn1/B2U=)
2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:17:fd:51:e2:6d:1e:ec:ab:d6:51:ad:2f:48:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=acebfda0a15e7da85a589367682061abfa35f813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b5:73:7a:9b:0a:2e:a3:8d:45:de:84:ab:a4:
f0:fe:ac:a6:8e:4b:69:2f:fd:91:64:d6:52:62:dc:
3a:20:2f:e5:11:86:2c:ef:58:38:49:55:d4:c2:81:
2e:4a:c7:41:74:84:98:be:dc:5c:23:9c:df:37:4e:
07:83:64:f7:70:2a:5c:da:6c:a7:35:f2:77:b2:47:
5a:6d:5a:31:b0:16:ea:7a:6b:82:07:43:e8:01:f1:
4f:d5:b1:df:95:d6:f9:4b:16:fe:a0:13:01:a7:d1:
a6:20:18:0a:1f:19:1a:29:e6:b7:00:0a:4b:dd:de:
5d:4f:c5:f4:da:f0:b6:04:39:80:41:bd:be:50:4c:
35:4d:ce:1c:f9:a0:cd:8e:1f:c5:63:dc:50:e5:fc:
ff:83:98:c7:d4:fd:2a:9e:07:16:74:58:4c:71:91:
1b:4d:36:cd:fd:c0:d8:c2:36:50:da:cf:04:0e:9c:
ee:40:d6:89:83:31:5a:d1:8f:5e:26:36:a6:d8:f7:
ef:42:f5:49:b8:11:71:25:97:fd:cc:06:32:d4:db:
6c:ea:6d:35:71:2e:8c:cc:2b:0e:c2:e8:59:da:88:
9e:ab:72:fa:71:97:40:90:60:54:6f:00:f3:ce:bb:
c0:53:8b:a8:26:11:31:ce:dc:34:8a:40:ce:68:be:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EB:FD:A0:A1:5E:7D:A8:5A:58:93:67:68:20:61:AB:FA:35:F8:13
X509v3 Authority Key Identifier:
keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6d:48:86:2b:5c:f7:4b:3a:64:2b:7f:8b:fd:06:90:45:47:
8d:76:27:18:d1:ad:9a:c8:4f:38:17:a4:d4:06:71:75:44:24:
aa:5d:c6:e7:e1:a0:26:5e:dc:60:b8:c7:49:07:ee:29:5c:0a:
f2:8a:2c:18:59:cd:0f:92:23:48:cc:eb:77:eb:fc:d4:06:4c:
3c:6c:ed:f5:8b:81:d4:71:fb:c0:c4:6f:cd:46:5d:fc:1b:4b:
20:4b:69:72:61:52:49:39:ec:5a:ec:c1:fc:2b:af:2e:d2:97:
a7:07:25:e3:99:da:80:8f:6e:82:bc:e9:93:b0:f4:3e:4f:e2:
d9:cd:63:b5:21:26:a8:75:ea:c9:7a:1b:1d:5c:19:ec:0a:c5:
21:5d:97:7c:f7:ad:06:8f:b9:95:83:4c:62:ec:f5:bd:d8:c1:
b1:b4:fb:96:29:e8:81:80:be:32:59:41:10:83:69:a5:8d:e0:
65:cd:b9:db:76:5f:5c:81:08:c6:af:10:ca:15:ca:5d:d1:de:
6c:ec:69:af:d6:fd:21:c1:a0:26:5f:5e:3b:58:19:07:e4:fc:
a8:fe:1e:ce:20:08:d1:d2:0c:28:a7:dd:50:da:08:14:e6:2d:
51:85:ef:ee:25:15:b2:90:7c:d8:fb:8b:a6:25:dd:db:44:97:
8d:a3:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:34 2025 by rpki-client