Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
File: d7yR94ozULrLv743b4gTIS0UmTE.mft (raw, json)
Hash identifier: c8sdAa43HA/1a+BZV2HhxJsYpnU87O9Con/dM5pn0MQ=
Subject key identifier: 1C:AC:24:70:0D:7D:33:74:22:30:56:25:03:BA:E0:35:9D:1E:F1:A1
Authority key identifier: 77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
Certificate issuer: /CN=77bc91f78a3350bacbbfbe376f8813212d149931
Certificate serial: 0199FB7CD6C30E29CAF11A4C5DBBA0F056A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 1-1kKr9VJ8bw_SUqQcMUBecH1TKg.roa (hash: 3o6hb5np+9u5Gu9cp0jYxsJnhLz7Y1oIDpNf2dIi2oE=)
2: d7yR94ozULrLv743b4gTIS0UmTE.crl (hash: pdJlxDgHx5dI/EkoLaD1j0ykQEMqjvhM3O4yIxOOv2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d6:c3:0e:29:ca:f1:1a:4c:5d:bb:a0:f0:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bc91f78a3350bacbbfbe376f8813212d149931
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=1cac24700d7d33742230562503bae0359d1ef1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:4e:ac:96:2f:eb:d1:cc:1e:b5:24:d6:b8:
d1:71:60:a7:c8:b1:f6:06:5c:43:53:4c:e5:9d:aa:
18:13:26:f2:a7:fc:3d:8c:55:4e:8e:ce:5b:ab:8c:
82:3d:2b:c9:63:d5:86:d8:2a:d8:5a:b5:cf:79:77:
b9:f0:f0:24:87:d0:0b:df:e7:a6:a7:35:56:65:04:
6f:9e:9a:82:31:fb:7f:88:d8:1d:f0:fb:14:c1:4e:
e3:c0:ea:1e:bc:e8:ce:e6:79:17:c0:5a:c9:ce:fe:
83:bb:7a:76:f5:8d:85:14:c0:74:6b:66:b6:6e:94:
e7:85:d0:d1:cd:96:e1:c8:6b:d7:6b:3f:f2:04:50:
7b:7c:41:54:d6:c3:a1:b6:db:39:b1:33:8f:d4:49:
1a:6d:95:ae:ec:cb:a2:7c:c8:36:8f:7f:9a:48:c9:
24:37:33:87:1e:6d:42:9c:4e:0f:2d:03:80:8c:6a:
a0:72:c9:f2:46:d3:61:ce:e2:c1:fb:4e:87:02:e1:
f6:d3:79:84:2b:63:7d:e9:34:8d:37:c6:0b:f7:cc:
2f:7d:42:f7:9d:9c:88:a7:42:f0:4e:64:af:ce:51:
61:05:0e:6f:38:50:b9:ed:f7:bd:72:09:28:64:73:
8c:01:50:b8:31:89:ad:2b:44:18:4f:1b:5f:97:fd:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:24:70:0D:7D:33:74:22:30:56:25:03:BA:E0:35:9D:1E:F1:A1
X509v3 Authority Key Identifier:
keyid:77:BC:91:F7:8A:33:50:BA:CB:BF:BE:37:6F:88:13:21:2D:14:99:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7yR94ozULrLv743b4gTIS0UmTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f92b9f-4758-4428-a22c-9db57c3fe41d/1/d7yR94ozULrLv743b4gTIS0UmTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ed:87:b1:b9:72:f7:58:47:4c:7a:5c:b1:24:86:be:1d:c3:
89:42:86:62:3b:e9:c8:25:4f:d9:f0:a3:48:94:32:ff:21:f1:
74:90:47:fd:5d:d5:8f:ec:bb:0f:e9:d8:68:0f:4c:23:6d:02:
02:e2:d6:ad:36:08:33:94:b6:53:c2:66:bc:ea:9e:1a:86:b7:
4c:87:d3:f5:ed:e9:67:da:96:19:ab:0f:f9:01:12:d8:43:ad:
2a:a2:49:65:7d:fa:e6:48:14:58:04:16:d7:19:84:bf:96:b4:
f6:67:0a:ee:4a:7f:8e:ae:5b:fb:dc:60:30:74:ef:ad:dd:80:
07:e1:31:2c:8c:21:2e:b3:a6:e9:33:d0:e1:b0:b3:14:d3:01:
dc:12:59:1f:91:f1:2a:81:60:9c:4d:51:3b:52:87:4e:50:36:
fd:4a:88:dd:0a:95:a8:c6:07:5b:77:30:d5:94:62:9f:7c:65:
b9:ba:2a:4a:ed:3c:11:12:a7:5f:d0:91:53:0e:66:d9:9c:a2:
58:a9:5d:ab:ad:41:c2:87:90:5a:7d:c1:90:bd:e6:26:bd:af:
a6:a8:f1:0d:98:a5:33:24:63:8b:4e:9b:a4:ca:ed:88:b6:71:
2c:25:63:7d:14:15:9f:53:21:44:8e:cb:46:a0:ec:46:e5:98:
bc:1d:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:03 2025 by rpki-client