Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: wzj8ZiSuS4VfKuNJLhZ7C7j2TN/JwaUAz4oHBdHnN0U=
Subject key identifier: 5C:63:52:DE:E4:E0:62:17:21:DE:B7:76:B3:19:C7:53:C5:50:43:A7
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 0199FB7CEB3F1A8A8D1428180FB666AC49E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: aUUEizBogSSpWFP2zVAVIxBS5rQyPB5DCvj8fiyinOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:eb:3f:1a:8a:8d:14:28:18:0f:b6:66:ac:49:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=5c6352dee4e0621721deb776b319c753c55043a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:88:76:fa:d2:b2:60:3a:e4:88:8c:e3:06:fc:
e0:27:c4:d4:00:7e:fa:de:a1:ac:35:4e:b8:4d:53:
99:ad:d5:63:8c:89:c7:51:bd:1c:ae:bf:33:ff:0d:
d1:b0:7b:11:01:1c:10:3b:94:80:72:0a:e5:1c:6f:
e8:10:b8:c9:06:f1:c2:e7:02:d8:62:4a:06:7f:c8:
7a:2d:39:1a:7a:26:f4:1e:19:d8:4e:e6:9c:27:21:
47:d0:cb:d5:ac:b1:ef:1f:ac:8c:6f:ce:f4:15:e3:
54:b3:e7:b7:de:8e:40:5d:da:a2:b2:d0:ac:76:3c:
d7:58:93:90:6d:94:b2:62:aa:85:b2:6d:1c:b2:e9:
63:c5:2c:9c:0a:dc:13:d2:f4:f9:36:90:0c:30:ba:
aa:bc:ac:44:6e:94:c3:fc:77:2c:23:2f:7b:2c:f8:
d1:37:dd:23:91:49:4c:1b:98:0f:84:ae:c3:e1:db:
19:c2:6b:da:c3:59:3a:82:e6:e3:d6:61:09:d6:23:
8f:ea:d8:fd:05:90:6c:b7:7d:e4:63:09:df:d8:6f:
56:c5:97:a0:7b:5b:d8:80:cb:cc:da:b5:91:bc:53:
5b:f6:5b:94:b3:82:87:74:7d:01:3f:74:fc:2b:f1:
23:da:a1:21:f5:d5:4f:ac:09:5d:8a:be:ff:ec:7e:
82:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:52:DE:E4:E0:62:17:21:DE:B7:76:B3:19:C7:53:C5:50:43:A7
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:08:ab:f1:4b:e8:b2:96:2c:54:a7:08:ce:e6:60:47:f4:
e5:7f:fe:4a:f1:3e:09:19:8e:5e:b3:7e:30:bf:f8:2c:45:80:
74:58:95:0b:37:ca:8e:67:85:ac:5e:b8:6e:0f:d8:f0:ca:73:
89:e3:1e:4a:3e:d0:08:28:f0:25:53:f6:7b:1f:a9:3d:a4:f5:
b2:75:ea:9b:77:0f:e7:d0:4e:ca:ed:4a:cb:ad:c9:bf:6d:79:
f9:56:77:c7:33:f2:39:d1:d8:d9:c3:1d:e0:ad:23:87:af:6c:
30:77:04:bb:4a:cd:54:66:fa:ae:97:01:7c:44:4d:82:37:ba:
21:c3:e0:a0:6d:a1:f7:49:9d:a4:55:d1:78:44:fd:39:37:2e:
16:3f:5a:3c:19:ad:2d:4c:5f:cd:eb:79:af:58:14:cf:0f:fa:
f1:99:b7:24:be:d3:c0:3d:66:ea:64:0d:90:c3:cc:0d:dc:ed:
83:c7:67:c0:a3:28:46:74:d1:8f:6f:64:64:87:d4:b7:a7:67:
40:dd:0f:df:2d:be:92:01:7d:7a:03:f4:46:28:7c:fc:4c:1f:
74:2e:6b:ac:4c:eb:41:8e:e0:fd:d4:eb:5c:c1:99:0b:2e:c4:
de:80:91:74:8d:9c:e8:19:a5:a7:c8:e1:42:3e:b8:d5:df:cb:
24:5e:89:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:09 2025 by rpki-client