Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: 8VFpRVr4aLc15juDEYvaqlUhIBZGi+ERCde5ywX0STI=
Subject key identifier: 71:C7:88:25:4F:37:7F:67:D8:11:30:83:20:FE:F4:F3:A8:4E:8A:D6
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0199FBEA937119053184F7CCAC4B53A4C164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: TbToEU275GQVLtn3cQqcNznqHmmqC/cexSGTQ34yZu8=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:93:71:19:05:31:84:f7:cc:ac:4b:53:a4:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=71c788254f377f67d811308320fef4f3a84e8ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:ca:d5:9f:be:07:3c:60:cf:53:4f:ba:e4:
d3:8b:23:db:45:52:39:da:8d:c4:ee:f8:b2:e0:d3:
e2:9d:e7:78:8d:d1:b5:22:f7:3f:3d:d1:8e:59:b3:
1e:15:10:bd:96:40:0c:48:cc:25:58:92:d0:a8:da:
77:1d:d3:5d:43:52:a8:d7:d9:7f:ee:ca:fb:ed:35:
fd:d6:93:f6:03:e6:d2:97:c2:6c:58:24:97:39:56:
97:16:5a:e1:92:d7:c8:cf:da:1c:bb:53:4f:87:fb:
6d:bf:83:e7:fb:f1:30:b5:68:59:8f:30:b2:0d:54:
a4:0a:27:4d:ea:bd:a3:c4:e9:85:c8:08:ff:6b:c0:
ef:93:e7:c2:ff:0b:0d:13:05:87:77:4b:e5:53:86:
19:03:de:db:62:96:9e:7b:34:96:08:78:42:28:14:
5c:f4:73:e9:2d:48:56:a7:40:18:89:6c:64:d9:00:
bc:3d:97:d5:62:57:ab:94:be:71:bf:4f:ae:0c:8b:
ed:af:dc:e7:2a:84:f8:f6:96:55:54:01:6d:16:0e:
44:f0:76:c3:a0:a8:86:e6:97:7b:4e:7f:ef:44:a0:
13:81:a3:50:85:94:88:5b:a2:53:2a:05:c1:8b:8d:
3d:b4:f9:ab:d7:54:36:de:a3:9b:68:28:61:3e:8a:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:88:25:4F:37:7F:67:D8:11:30:83:20:FE:F4:F3:A8:4E:8A:D6
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3d:08:18:90:c8:68:d0:c0:d2:fd:11:49:0e:bb:d9:df:f7:
df:4a:eb:bd:6b:89:70:c9:8c:56:58:1f:b7:18:69:ce:1d:50:
be:28:ab:5f:5f:a1:bf:20:6b:36:ed:15:db:5f:1e:2e:d1:a4:
21:27:c5:8c:f5:45:ec:1c:a9:e2:1f:dd:67:f2:93:e9:cf:10:
7a:a2:8b:fc:1e:6d:17:f9:11:96:3c:76:17:6c:61:ac:ca:8b:
77:f9:eb:ed:ea:73:2d:83:c1:d0:07:6f:88:b0:39:e4:60:00:
9f:aa:65:29:cf:cf:e4:89:c8:66:56:e6:08:77:f0:1b:73:fa:
e7:7d:9a:92:9c:dd:8f:49:2a:a0:59:34:43:28:0c:21:fe:bd:
db:80:85:2a:05:f2:7a:f1:db:2d:96:0d:6e:e8:53:64:5a:e0:
d1:35:69:b5:6d:1b:96:5a:72:16:18:3b:1c:73:8b:5e:61:73:
be:3c:48:1c:d0:c1:d0:66:d4:f5:6f:40:d9:db:16:ff:fe:e1:
d0:93:d3:77:9a:a7:a6:b2:e6:f1:c3:46:ec:1b:ef:be:9d:ee:
1f:e5:a5:ff:ae:14:45:58:2b:9a:16:91:1d:b0:57:40:8e:80:
39:7c:94:ff:6f:cd:eb:46:b3:36:44:e9:fa:e4:67:ca:55:95:
eb:44:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:13 2025 by rpki-client