Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json)
Hash identifier: 3aauaF6HKjQkdQZZpB2S4Oqhzw4lxkHZhXmG3HJusPs=
Subject key identifier: E9:E1:AE:D6:E0:E0:57:79:A3:16:FD:CC:37:DF:E3:06:0C:AD:E3:36
Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Certificate serial: 0199FFC7A73F539D33A0A0CA367C699D4346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:38 +0000
Manifest this update: Mon 20 Oct 2025 04:01:38 +0000
Manifest next update: Tue 21 Oct 2025 04:01:38 +0000
Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=)
2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: 5f0s+3L9Zeowdb6WdaVpGpSaud8Tv4MAIKjyvJFQ/Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:a7:3f:53:9d:33:a0:a0:ca:36:7c:69:9d:43:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a
Validity
Not Before: Oct 20 04:01:38 2025 GMT
Not After : Oct 21 04:01:38 2025 GMT
Subject: CN=e9e1aed6e0e05779a316fdcc37dfe3060cade336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:c8:4f:4a:8e:1a:4b:f5:ba:4b:ac:53:fc:
80:d2:63:f0:32:a3:72:10:af:27:04:84:b2:f9:81:
d0:1e:85:8e:4d:84:4b:18:f9:74:8d:6a:0a:64:63:
b5:07:6c:5b:1b:eb:d2:3a:53:2b:36:3c:6d:37:3b:
d8:a6:1e:53:7a:e5:5e:78:9c:07:da:b4:c2:dd:49:
e3:0c:d1:18:8d:55:62:f5:3c:a8:a4:9b:31:48:51:
91:41:c6:e1:66:99:2d:54:a1:ad:26:49:22:72:25:
f8:5d:85:5a:fd:6d:da:41:23:f3:d1:b5:41:fd:fe:
7b:1a:8a:e9:1c:df:9f:53:f1:06:94:94:c9:00:de:
4c:36:68:fc:5d:f5:cc:90:7f:ef:41:92:2d:b1:c8:
6c:6b:5d:c7:0c:d5:b6:7d:c6:bc:fb:48:1d:b8:d9:
7f:df:64:9a:fb:36:bb:62:72:fb:ad:ce:93:26:00:
da:4a:0b:02:d7:0a:2e:91:ed:3c:4f:94:f2:04:29:
69:40:c0:d5:da:a4:31:63:15:3b:1c:a0:18:28:d9:
48:34:e6:e0:91:fa:5f:6f:9b:88:b3:c9:4c:ab:76:
5a:57:61:3d:23:b7:1b:05:07:31:05:9d:a5:0d:87:
f1:12:09:38:59:39:68:df:d8:ea:8f:22:aa:b3:4c:
c1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:AE:D6:E0:E0:57:79:A3:16:FD:CC:37:DF:E3:06:0C:AD:E3:36
X509v3 Authority Key Identifier:
keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:84:d3:c8:44:5c:74:82:cb:8b:a3:45:e2:8d:63:b6:87:79:
67:99:b3:a7:9c:a3:d0:df:12:1d:2f:ce:c7:72:31:99:b1:a6:
67:f6:0d:4b:b7:9a:87:c6:2e:70:8f:bb:e6:66:93:30:e4:66:
aa:6b:7f:e6:14:46:a1:7f:a7:34:ee:f1:e8:c3:44:68:d0:3f:
bb:2c:94:f6:bc:b1:fd:39:8d:d5:e7:6b:c8:2f:58:af:a4:e5:
2c:28:b5:7a:19:7a:c9:01:d3:f5:85:c4:ab:bd:f0:22:97:6b:
1f:c7:8c:37:1c:73:d1:24:f2:85:b8:51:ca:45:a7:8a:79:f0:
1f:2f:44:14:81:d2:70:7d:89:4f:d0:5d:af:70:70:93:f6:a0:
6a:dc:7f:8d:81:db:c3:3e:db:d3:ad:69:fe:a3:e9:98:3c:e8:
0c:d8:ee:7d:8d:0b:4b:46:32:fd:91:f8:be:3f:bd:94:86:fe:
55:da:be:51:c4:6d:d7:22:58:5e:cd:93:fa:9d:1c:17:e1:e9:
0e:1c:75:22:31:6c:33:da:81:86:29:20:0a:e9:42:a0:e0:e2:
0b:31:3f:78:72:88:16:14:86:ab:fd:cb:c6:ca:fe:b1:c3:bc:
1a:99:d8:58:42:cd:94:ec:fc:d5:72:5c:49:c6:84:26:89:1f:
48:1f:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:20:49 2025 by rpki-client