Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File: 0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier: hGlDhXuhUOHF9QzmcMqTLXT7vWAle9zPoNI63T0pVBE=
Subject key identifier: 43:18:27:5C:7D:6D:DD:62:D6:76:95:D9:9F:C2:8D:34:67:A3:FF:79
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer: /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial: 0199FF22D5446735A69F15FEA5CD15BF841D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:36 +0000
Manifest this update: Mon 20 Oct 2025 01:01:36 +0000
Manifest next update: Tue 21 Oct 2025 01:01:36 +0000
Files and hashes: 1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: oOEkWABUyefd2cQnbGAT/5bYxuGGGu5i6MpgkXz22Rk=)
2: 8XGnOFo1FHSecbZbo8eEhjcVsfE.roa (hash: andmj5YDiGTGVfrRQg/eep/3FAAkG8C2BqXOT6WzLpo=)
3: qRGjLQntvBAqN_Xt7aIS90yUBHc.roa (hash: 2bXJCM8WwuebfGJQ/9C7eiLENqlhXscF/6cLG5KAEvE=)
4: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (hash: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d5:44:67:35:a6:9f:15:fe:a5:cd:15:bf:84:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Validity
Not Before: Oct 20 01:01:36 2025 GMT
Not After : Oct 21 01:01:36 2025 GMT
Subject: CN=4318275c7d6ddd62d67695d99fc28d3467a3ff79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:44:d1:66:cd:ba:82:ff:50:80:e9:0f:f6:
ff:99:03:8a:f7:e6:f9:0d:22:fb:5e:0f:1c:3b:e0:
3a:d9:a0:95:e9:92:e7:27:9a:d0:2f:9d:42:bb:1d:
fa:8f:72:92:32:9b:18:b7:e8:69:0a:15:73:6f:38:
dc:36:78:17:92:d3:f8:bf:83:dd:63:cb:a7:0a:e6:
f0:69:30:90:03:bf:b9:d1:63:3d:38:79:5a:f3:42:
f3:71:2d:9e:61:f3:4e:93:87:a9:b4:f4:9c:63:ad:
e3:45:85:d0:77:b8:7e:f6:b8:f2:00:d9:f0:e9:a6:
aa:ec:38:10:3c:1f:b0:55:b0:00:df:49:b6:39:24:
b2:ac:18:7f:de:f6:6b:fd:b5:f3:f6:1b:d4:11:82:
35:03:40:8a:c3:70:3a:03:4e:78:3b:1c:43:39:4a:
77:1b:2a:36:9c:4e:0e:be:3a:e4:ab:9c:78:91:f3:
16:08:53:da:9b:15:09:85:0c:d7:19:58:f0:6a:8c:
61:ba:07:6b:62:e2:bc:c3:7f:9b:37:12:21:fe:ae:
32:0b:ae:53:ad:36:63:66:99:4e:7d:84:e4:e9:47:
f7:5e:f6:17:d1:b5:79:6f:da:b6:89:cb:34:5f:42:
93:be:62:45:cb:8f:30:94:a7:6d:42:4b:3c:13:65:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:27:5C:7D:6D:DD:62:D6:76:95:D9:9F:C2:8D:34:67:A3:FF:79
X509v3 Authority Key Identifier:
keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:01:29:0a:1c:a1:f5:b0:4a:39:df:b6:7e:49:20:00:4c:
cd:52:07:af:1d:e9:ec:00:09:44:d6:0b:93:1c:a6:13:09:72:
07:60:f9:72:60:59:8d:b3:08:e0:85:cc:29:a9:6f:86:45:0c:
5d:f7:a3:fc:fd:75:f2:31:af:d5:ae:f1:81:d4:a6:b1:10:b4:
fa:e7:4b:80:03:5e:5f:40:2f:c5:6c:e4:ec:b3:29:c8:b9:6e:
50:3b:d2:50:7b:27:b3:ae:a6:a7:35:df:44:0e:c4:2b:d6:27:
f0:bb:bc:86:13:c0:e7:bd:e8:ac:f9:f4:a6:1a:6e:12:8b:f5:
d7:30:41:dc:bc:25:43:cc:23:0a:65:6a:b6:e4:6c:a6:65:d3:
8f:43:55:1f:d3:0e:4f:76:82:0e:00:ea:56:7f:e2:5d:45:c7:
d9:28:61:15:82:65:dd:c2:18:ea:68:05:24:84:4c:90:d7:e7:
7d:e9:23:59:34:73:eb:49:c0:a3:1f:67:46:89:a7:c2:d4:a8:
24:d3:a7:3a:10:e7:12:5c:15:bb:d8:7d:98:a5:41:5b:53:e1:
74:da:56:fc:be:0a:b0:a8:bc:70:f8:3a:b7:7a:f4:c4:9f:79:
3e:7f:fc:fe:19:08:35:d5:ee:cd:8d:66:73:4a:15:5a:0d:9d:
b1:67:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:19 2025 by rpki-client