Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json)
Hash identifier: Ki0+nsiP7pVci/NJqloziIRciqCUry00kqxykaMUsOI=
Subject key identifier: 28:9C:DE:2F:23:0B:99:7B:98:76:DB:E7:19:AA:9A:64:4B:07:93:08
Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Certificate serial: 0199FD34508CDAE8556D2036ADCD18FAF179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: HNQkxpvBEm15AdIPHbffrX/HJk+SUSGNd8lBHq/zyeM=)
2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:50:8c:da:e8:55:6d:20:36:ad:cd:18:fa:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=289cde2f230b997b9876dbe719aa9a644b079308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:db:08:2e:e0:e5:44:8f:ff:77:9b:37:d9:
36:69:aa:47:1e:cf:97:8f:30:66:a7:c0:e2:71:a4:
dd:c9:f9:57:43:e2:f6:e5:c1:32:34:cb:aa:e0:56:
91:2f:66:54:6f:de:4d:65:ae:07:7a:20:9c:80:28:
61:a6:f4:be:96:a0:65:6a:9a:2d:bf:77:8e:50:43:
4d:b5:d6:07:71:25:ea:1a:a4:df:45:19:4c:ae:01:
20:58:ff:5b:52:f8:f6:7e:0e:64:5e:83:40:1c:8f:
5d:5b:16:a6:cc:ef:d2:96:24:ab:07:79:4a:99:ae:
74:75:b1:58:a4:37:8a:a3:c0:4e:08:d6:05:3c:85:
57:96:45:77:b4:5b:7a:f3:fc:a6:40:96:23:ad:79:
2c:9b:3b:4d:1b:46:8c:c6:8c:db:e3:64:72:11:ec:
6e:c0:c3:cc:84:ba:94:10:58:ab:71:32:52:db:1e:
07:e4:25:9a:df:dc:64:1c:0c:0a:c0:1b:4d:b7:29:
34:d0:d8:43:59:78:84:5c:26:4c:d5:92:60:b5:de:
37:87:43:20:df:ed:ef:17:e0:14:fc:e8:f6:2d:c6:
38:41:10:26:1d:05:a1:1f:8d:3b:68:7a:23:f8:b3:
2c:c7:04:d3:dc:35:2d:ef:0f:a6:21:3e:36:6f:09:
90:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9C:DE:2F:23:0B:99:7B:98:76:DB:E7:19:AA:9A:64:4B:07:93:08
X509v3 Authority Key Identifier:
keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:23:c2:68:1a:85:66:0a:70:44:34:40:4c:2d:75:a2:56:2d:
72:a8:4a:74:4f:0e:aa:c5:4c:2e:30:47:4d:cd:6c:78:21:80:
57:a3:b5:a3:60:9a:f0:45:5d:98:65:18:89:9b:f1:2f:83:b6:
3c:90:ce:c4:f1:43:3d:9a:38:7f:52:ef:3a:89:9d:6f:dd:6e:
8c:a8:4a:3a:93:c0:1b:47:dd:e7:ba:53:c4:29:e4:d7:59:dd:
97:2e:94:98:ad:73:5b:17:c5:ef:19:6a:87:1e:4d:a2:c4:cb:
41:58:58:56:21:8d:56:ae:68:23:12:79:28:3d:63:55:e7:a2:
e9:e4:8a:4a:5a:39:c9:7a:fc:ea:2d:a9:e9:56:34:f1:98:98:
a0:42:aa:2e:a9:f3:bf:11:7a:c9:cd:58:94:d1:54:0a:70:63:
b4:53:ee:57:65:53:c0:b2:fd:82:15:3d:68:3f:07:bf:87:cf:
37:e9:99:ae:f8:40:7c:8e:bf:20:d1:12:3f:3f:ff:7b:77:61:
f4:3e:9f:25:6f:f1:e6:93:90:06:84:6d:25:96:2a:60:83:80:
f2:66:38:c1:9c:8a:6b:dd:fc:f7:2c:6a:f4:12:c5:1c:ed:ce:
9e:e0:8a:d4:97:1d:e9:3d:58:d5:d6:57:14:3f:04:15:3f:a0:
b6:6d:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:53 2025 by rpki-client