Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: kaC+Et6OfwArHI4g6SosWPMF+rAi5CmcN2A9JADHNyE=
Subject key identifier: 7A:B2:6A:67:B3:66:AE:88:4A:9F:D8:A6:2E:9C:B8:02:B7:8E:1F:46
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019A51BE8D9324EF2640850313BDB2F1B54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 16CD
Signing time: Wed 05 Nov 2025 02:00:33 +0000
Manifest this update: Wed 05 Nov 2025 02:00:33 +0000
Manifest next update: Thu 06 Nov 2025 02:00:33 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: jD76FpWvXDC9Om+kllyaU86NHovIwmCEeQQFjBDY6AY=)
2: 1-kqFnbhB2LCPJU3KtgP3OhHNEbM.roa (hash: sYai5O0I+e4s9fEjeNx81CRmECPgFmQDJeWhDrbRAeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:8d:93:24:ef:26:40:85:03:13:bd:b2:f1:b5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Nov 5 02:00:33 2025 GMT
Not After : Nov 6 02:00:33 2025 GMT
Subject: CN=7ab26a67b366ae884a9fd8a62e9cb802b78e1f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:6c:01:7e:7c:f6:20:15:3c:b1:bb:38:9b:
fb:a7:97:97:6d:fb:f7:0a:5a:f7:6e:8f:e5:5b:75:
5d:b6:0b:57:eb:2e:28:dc:b8:7b:8a:fa:f4:ac:28:
16:2a:7a:51:a3:1f:8d:5b:25:6e:c0:d6:5b:8b:bb:
89:3b:08:79:dd:28:86:3d:9a:2c:a0:b7:f1:ea:f6:
4e:78:b3:bc:fa:10:ca:e1:7d:ee:b6:e8:cf:1b:c2:
d1:be:37:c8:4c:c1:57:e2:83:fb:31:98:55:4f:4a:
0e:14:6f:a0:da:3c:c3:dc:1f:af:ad:37:b3:30:23:
12:1c:d3:9a:b5:f2:79:2b:ca:0a:61:37:1d:84:8e:
ca:d0:64:b1:ca:fa:b9:26:5c:35:39:da:1a:29:f6:
10:8d:ea:03:77:c7:c6:80:73:a7:eb:2d:03:b0:2f:
c7:e6:91:80:c4:9b:47:29:5b:9d:69:d4:1f:62:a2:
bb:4d:be:36:b1:79:44:17:92:49:09:7d:cc:64:75:
fd:30:0e:ab:c5:cb:93:3f:ec:51:19:11:c1:a7:79:
f2:db:11:d7:7b:a2:f2:ce:4f:d1:d4:fe:0e:3b:4f:
06:c2:7f:3e:17:ab:55:ee:ee:16:ec:56:07:0e:89:
3f:74:8b:d0:ac:2a:9e:90:a7:ae:f7:22:5d:4a:6d:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:6A:67:B3:66:AE:88:4A:9F:D8:A6:2E:9C:B8:02:B7:8E:1F:46
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:af:e1:5f:77:61:cd:9c:71:6f:90:ec:68:c6:36:78:f6:
8e:52:df:ed:7e:b4:e4:78:8d:2c:2e:e8:b9:5b:db:07:08:49:
ac:12:61:10:08:46:dc:49:08:d6:b0:2d:88:4a:4a:d7:5b:bc:
d9:3f:af:01:9f:78:52:07:8e:e0:e7:2b:63:6b:24:ae:20:16:
40:c5:14:f7:ba:30:8a:c9:bb:45:4f:24:2f:e5:87:c6:44:2d:
96:30:b7:1d:9a:c0:36:7c:33:f1:c4:b7:0c:61:c7:63:1c:79:
2c:94:4a:a5:f1:28:03:be:3f:fb:e6:b3:7a:67:8c:2a:62:0b:
86:75:bf:d6:ee:f1:be:55:02:a9:b9:58:83:99:41:aa:12:a3:
b8:e1:10:65:b6:fb:7e:08:61:5b:4f:5f:76:0c:a4:c1:e7:22:
da:b8:e0:9e:fd:26:f0:3c:b7:1c:fd:19:43:ab:f2:e2:96:9d:
73:dc:28:0e:21:b9:98:66:63:1b:e8:7c:41:df:5e:98:c8:6c:
97:be:31:a1:46:ca:29:42:6a:4b:89:71:08:c7:9b:cb:03:1d:
eb:1f:ff:be:83:67:1f:54:53:bf:56:a2:09:3c:ff:6e:7e:23:
0b:d8:0b:fd:77:48:31:3d:d2:c6:34:9a:f7:60:ee:c3:21:6d:
59:f3:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:05 2025 by rpki-client