Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
File: 1LDBHmZmz8G38baZTg9Dcymt7AQ.mft (raw, json)
Hash identifier: gXeRBwMoFzCCjuxnk93UmzvIiP5U0mD0JInxvxycTUo=
Subject key identifier: FD:CE:F4:41:1B:7E:BC:F0:8B:A7:B5:E5:A3:B0:B4:82:25:4E:72:0D
Authority key identifier: D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
Certificate issuer: /CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Certificate serial: 019A53AD27FC7CF04155BC348264058407C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 11:00:48 +0000
Manifest this update: Wed 05 Nov 2025 11:00:48 +0000
Manifest next update: Thu 06 Nov 2025 11:00:48 +0000
Files and hashes: 1: 1LDBHmZmz8G38baZTg9Dcymt7AQ.crl (hash: q0De2lcLfC7lsvloRCK9KCCsj3HBTXJR2E+xDIiQmdo=)
2: nAGjUH3BeWIEK9-k8ffw9jMuhWs.roa (hash: N9b9YD5gQ9tOvsi0VtQodQ64t3uD6Y7lDV2UpiLAUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:27:fc:7c:f0:41:55:bc:34:82:64:05:84:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b0c11e6666cfc1b7f1b6994e0f437329adec04
Validity
Not Before: Nov 5 11:00:48 2025 GMT
Not After : Nov 6 11:00:48 2025 GMT
Subject: CN=fdcef4411b7ebcf08ba7b5e5a3b0b482254e720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fd:0c:16:c4:9c:46:d1:9c:2e:65:bb:f9:7b:
59:b9:93:37:d0:82:04:3b:ca:53:22:15:f2:ba:34:
3d:7f:a5:80:6b:53:bc:53:a8:76:6f:aa:29:9c:34:
20:b2:b1:0b:ba:a0:e0:8d:72:d5:c4:28:40:05:df:
34:6a:a6:8b:d3:12:c2:8a:7b:6e:03:91:5d:c9:aa:
1c:91:c6:de:a4:c2:10:74:20:68:80:29:72:3b:bc:
26:44:c2:24:3e:f0:47:3d:14:c7:7b:cf:ca:76:58:
7d:6d:f7:f8:d0:f5:9b:ab:23:26:06:78:0e:34:4e:
80:50:c5:3a:b3:55:a0:a3:58:19:15:c4:13:30:15:
80:f0:40:49:b8:c3:0d:5d:d4:e7:f6:77:da:f8:b2:
67:d0:9f:a6:4a:a7:f3:6d:6c:c7:a9:6d:6c:a3:34:
db:36:55:38:d7:23:5e:be:fd:71:2e:df:e0:a7:c6:
09:8a:44:3d:43:0b:c6:29:34:d6:0e:bc:a4:75:1f:
7e:7b:d7:42:8c:90:a4:cf:f8:10:e8:9d:84:3a:43:
03:d7:3b:0d:fd:8f:f8:16:68:8d:1b:99:5b:5e:64:
31:b4:1d:87:85:7f:3d:7b:a3:fd:13:00:cd:8b:cc:
4e:c8:2f:9f:bd:fc:23:33:9f:ad:9d:70:d2:3e:35:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:F4:41:1B:7E:BC:F0:8B:A7:B5:E5:A3:B0:B4:82:25:4E:72:0D
X509v3 Authority Key Identifier:
keyid:D4:B0:C1:1E:66:66:CF:C1:B7:F1:B6:99:4E:0F:43:73:29:AD:EC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LDBHmZmz8G38baZTg9Dcymt7AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4db93d-fc87-4e16-9b3b-79453b474e2e/1/1LDBHmZmz8G38baZTg9Dcymt7AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a3:aa:34:0b:fa:36:85:a4:c3:70:dd:aa:f0:e6:d5:0d:b5:
42:c5:1f:af:d0:bb:a4:53:49:c2:fa:38:74:d9:3b:4d:50:78:
ed:37:43:34:ca:79:09:45:b3:28:5c:53:83:7e:51:68:6a:95:
62:58:1d:b2:ba:55:c8:0e:02:56:13:a3:db:95:56:c6:2b:16:
d9:11:41:de:ff:63:b1:19:5e:6a:7f:a3:94:bb:36:e7:9e:38:
bd:8e:d1:57:05:46:29:3d:fa:61:be:02:63:6b:de:a2:6c:9c:
ab:11:d6:e2:8d:c3:6d:60:00:b8:99:8b:7d:c9:99:63:a0:c5:
67:12:b2:df:36:69:62:d5:84:7f:bd:ee:a8:f7:1f:c5:02:84:
fb:28:f7:8a:83:d8:16:ce:46:19:74:52:e2:76:48:e0:ba:c7:
59:df:e6:7a:c2:0f:af:e7:85:2f:0b:74:10:b8:b0:f2:b5:63:
cf:8f:ea:6a:dd:a5:ae:a2:68:45:63:11:8c:47:49:fb:fa:6b:
4a:37:d6:fc:3b:0e:fd:22:e0:5d:7f:26:d4:3d:d2:90:d1:04:
e1:4d:1a:6d:a2:f3:8f:6b:ae:50:d2:68:ad:75:f8:3f:f3:9d:
9b:d7:54:5a:ed:13:d3:1a:9f:e8:73:4e:40:c9:6e:be:8f:cc:
d3:ba:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:23 2025 by rpki-client