Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: FUVdwHBDLQ5oa8g0sXS2EcOovcRQ9HE/JykXFutMRZM=
Subject key identifier: A6:C7:CF:25:49:F9:9B:42:3D:77:1B:56:DC:D0:C9:BE:D2:C7:CE:88
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019A55D28F6BB3E56FD0E5AC09D162A5C64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 16A3
Signing time: Wed 05 Nov 2025 21:00:53 +0000
Manifest this update: Wed 05 Nov 2025 21:00:53 +0000
Manifest next update: Thu 06 Nov 2025 21:00:53 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: tC1ka7npxThySuO/TJ8C7Jyk+RYijYm2draRsV3oKes=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:8f:6b:b3:e5:6f:d0:e5:ac:09:d1:62:a5:c6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Nov 5 21:00:53 2025 GMT
Not After : Nov 6 21:00:53 2025 GMT
Subject: CN=a6c7cf2549f99b423d771b56dcd0c9bed2c7ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:eb:09:02:ca:95:76:8e:21:36:e7:b2:e9:
e4:e3:a9:14:b6:86:ff:03:6b:0e:28:86:2f:8b:55:
28:f0:30:63:cf:aa:b7:9a:78:92:8a:9c:df:0d:93:
de:4e:9d:83:42:ce:a4:95:dc:ca:25:0a:2a:22:d7:
ab:7f:7a:4a:71:60:ab:c5:4b:e6:2d:72:89:84:77:
02:a1:0d:93:3f:c0:39:2a:bd:3e:d6:65:02:f0:7a:
8f:8d:8f:08:1c:3c:1c:69:4b:b0:3a:1f:e8:88:2a:
79:a0:60:e9:c7:a7:de:20:14:d9:9e:09:76:4a:d8:
36:f1:6c:76:9d:a8:7b:1d:0b:93:f6:c3:f6:81:61:
09:62:4a:96:f4:d1:8e:8a:c9:dd:c9:f5:d1:78:fd:
b5:b6:08:bc:72:47:80:4c:f3:dc:03:8f:86:b7:86:
fb:c8:c4:bc:83:31:d2:30:a0:f2:34:89:90:70:e9:
91:20:72:4e:61:81:ed:7f:a0:6d:f2:5f:fd:e5:1a:
4b:ea:5b:70:01:2f:ce:7a:ca:b1:fb:10:83:9e:fa:
25:3a:3d:22:70:54:9a:cf:26:3f:cd:9f:4b:f3:be:
f1:28:37:64:94:d1:57:fe:09:b9:7c:2b:b2:1b:30:
a5:b0:cc:7f:94:99:cf:06:c6:90:20:89:72:8e:7d:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:CF:25:49:F9:9B:42:3D:77:1B:56:DC:D0:C9:BE:D2:C7:CE:88
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:32:c2:c4:ca:32:38:95:b8:6e:fa:fb:39:c5:56:00:ae:f1:
9b:77:db:a2:46:af:e3:79:e2:e5:6e:13:c4:fa:47:b2:3e:7f:
de:64:d2:8d:8e:c1:de:d8:45:c8:8f:01:6f:9f:90:45:a7:0f:
dd:6e:af:fa:04:7c:73:58:26:9b:11:d5:74:d4:51:63:20:7a:
9b:b5:15:4f:31:c2:d7:24:fe:16:cc:d6:2f:9f:7a:dd:40:75:
66:b7:12:e5:17:c8:5a:1e:4e:f5:db:4e:82:38:d8:6c:9e:cd:
3a:b1:80:2a:2f:75:79:54:34:a6:f2:8e:0e:4a:2e:fa:b7:5a:
62:db:c1:62:64:d4:48:73:d3:ea:92:93:3b:71:fa:b7:f6:ca:
7c:71:86:a5:68:43:32:ef:91:51:d1:9c:1c:0c:f0:04:77:ad:
c7:42:07:a7:9c:8b:49:f8:0a:57:04:b8:29:1c:e9:b5:be:eb:
72:09:ac:74:72:a8:c7:09:2c:d4:f7:be:6e:1c:85:1d:c5:b8:
4f:f8:fc:90:6f:6d:3c:90:01:88:fb:cf:17:05:9c:5a:26:92:
89:56:b5:83:4b:a9:d1:d5:f6:aa:71:34:6f:80:1b:4b:c2:b3:
4c:f8:80:0e:fa:19:6d:6f:63:86:40:7c:57:33:66:2b:0b:ab:
2c:63:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:28 2025 by rpki-client