Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: 3J/oe3Pxq5Rhw0JInFh6Pr7knTTpb5Zcc4VFY2xWTus=
Subject key identifier: 6F:FE:5D:09:F1:0E:4C:D2:30:C5:A5:21:48:17:43:B9:B2:1C:C7:43
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 0199FC589337107B3E8210E2576C4848D936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: gwUbfj+LvUzKno2fbhHYWztz4wa9EniLez81RuslRAs=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:93:37:10:7b:3e:82:10:e2:57:6c:48:48:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=6ffe5d09f10e4cd230c5a521481743b9b21cc743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:4b:f5:99:23:88:df:20:bb:dd:16:43:19:
43:a9:d3:9b:59:55:5c:8b:4f:f3:27:bc:e0:cb:83:
4f:4a:04:61:74:e7:a6:45:a2:65:e6:94:53:9e:26:
9b:1d:95:76:c4:32:f9:61:be:ec:90:a0:ef:39:b6:
40:78:d8:41:d9:fe:f8:cc:65:53:f1:00:df:f4:01:
be:5d:6f:ce:93:61:89:71:7c:0d:c9:50:c1:75:17:
2c:4a:99:06:20:9b:9d:51:1c:7b:7c:dc:d3:87:8f:
77:f2:ff:0d:16:bf:6f:52:36:00:f7:da:32:2c:94:
e5:78:e1:43:28:dc:d6:cf:03:a7:23:7f:ba:c8:61:
20:45:74:63:65:60:dd:6e:0b:b7:5f:a1:b1:2b:3c:
5c:3c:f9:0d:54:80:82:c2:d4:5f:1e:b2:e5:9a:cc:
45:c5:f1:58:86:4f:37:27:4d:bb:0f:3a:4f:0e:a3:
48:26:de:00:0e:0d:90:85:fe:83:5e:9e:80:84:30:
35:42:1c:39:9a:fa:76:81:19:0c:8a:6a:48:8f:5d:
d7:73:27:c3:90:21:bc:88:76:e2:39:cb:5b:11:24:
33:07:54:9c:82:79:5e:7e:e2:14:66:90:71:fb:59:
c1:b9:58:68:fd:ef:2d:76:a2:71:73:b5:16:79:d7:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FE:5D:09:F1:0E:4C:D2:30:C5:A5:21:48:17:43:B9:B2:1C:C7:43
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:53:cd:7f:2c:11:0a:1e:12:21:a6:24:37:94:86:50:9f:
b1:42:8a:91:96:35:27:1f:7a:3a:24:85:6e:f8:8c:87:7f:d4:
ee:69:09:fd:1f:de:80:f1:ec:97:cf:7b:7e:41:6b:74:0f:53:
ec:d0:f8:c6:5a:9b:fa:38:7c:3c:07:d3:69:05:ac:13:15:6f:
d0:84:7b:8f:df:f6:f4:13:fc:72:11:66:41:62:99:c4:60:6e:
06:35:75:3a:ad:8e:d9:17:9c:8c:d6:dc:81:0d:8a:81:3d:35:
f4:f3:02:8f:e3:7c:f4:8d:ed:6f:0c:79:fa:1e:e6:ee:a6:7d:
78:0a:b6:4f:c8:47:30:33:c4:14:90:4e:e4:5c:07:c1:1b:f5:
01:ad:fe:9f:07:2a:e5:75:68:52:ce:ea:b1:f6:2b:de:8c:3d:
d8:e2:03:a7:ec:c0:ee:b0:06:28:41:ee:aa:42:dc:a6:8e:ac:
b8:33:bd:fe:1b:6e:8c:35:b6:dc:d6:70:45:7a:2a:61:1b:e1:
64:ae:4e:eb:e9:be:1d:40:8e:86:67:55:0e:ee:6c:ce:cb:c4:
b7:06:80:59:c7:36:69:c3:66:a8:d4:54:ee:4e:34:59:2c:65:
cc:60:0f:46:14:b7:51:af:4d:9d:3c:7d:32:dd:b1:f3:54:b2:
f2:2a:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:58 2025 by rpki-client