Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
File: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft (raw, json)
Hash identifier: RYvDibwLKcqFVSi7W2uC2+3AYhhMsKitu01eyQFShaE=
Subject key identifier: 84:38:1D:BB:E6:EE:9E:73:8A:E5:E5:37:35:5C:F8:3F:85:33:B3:FC
Authority key identifier: D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
Certificate issuer: /CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Certificate serial: 0199FD33FA40032EBB0E2F669812B0D3CFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: 0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl (hash: RduUWHOCh0XCUHvWeZM6yXohdidI/WhA/dIWvliifxs=)
2: 9-3CRoQW_QjusaOMGpyHscSTGa0.roa (hash: hSgLJd/C+rhopgNVHjf6fxNZLuf8+Okfp+V4kR/UeS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fa:40:03:2e:bb:0e:2f:66:98:12:b0:d3:cf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c4c3806e1f88e99bd8c5e490077f8de5d7cf06
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=84381dbbe6ee9e738ae5e537355cf83f8533b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:01:65:f0:4c:33:2d:2a:74:c5:64:8e:f6:d2:
88:8f:8e:93:94:d8:4a:99:cd:f8:24:cb:36:ee:85:
81:d7:06:55:9a:16:d3:4b:c9:8e:6b:e9:60:e3:78:
76:a5:3d:7c:7f:8f:b9:4e:0b:64:91:18:7f:a8:c9:
2f:92:29:05:32:fe:57:19:bb:28:5a:10:17:5d:82:
2a:c9:60:d4:66:ef:fa:b9:74:77:6a:80:bf:d1:d9:
41:3e:20:c2:9f:43:1d:eb:63:c1:00:75:b2:ff:b9:
7a:87:b2:11:87:f4:5e:df:af:6b:f6:3d:ac:94:36:
f2:b4:5e:be:b3:3a:9d:ab:8a:77:51:7b:91:12:4c:
45:75:0b:6c:e2:c8:33:5f:5f:74:9d:6a:85:19:98:
c8:5b:ba:8d:8e:16:fd:c0:f7:dc:6f:57:c9:37:d8:
72:d5:30:14:58:11:29:13:8d:0e:b8:3b:43:1e:d5:
aa:60:12:5b:5c:b2:ce:07:83:0c:db:02:58:b5:6e:
35:6f:eb:89:4f:df:86:79:03:38:1c:60:d1:6c:62:
64:a4:37:ad:00:71:d2:4d:7d:68:e4:d0:7b:55:7e:
25:45:bb:3d:d0:b7:fc:d7:47:37:9c:07:ad:9c:f5:
90:46:7f:4f:73:e9:d0:af:05:e4:ba:81:f0:46:00:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:38:1D:BB:E6:EE:9E:73:8A:E5:E5:37:35:5C:F8:3F:85:33:B3:FC
X509v3 Authority Key Identifier:
keyid:D2:C4:C3:80:6E:1F:88:E9:9B:D8:C5:E4:90:07:7F:8D:E5:D7:CF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sTDgG4fiOmb2MXkkAd_jeXXzwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d2b0a2-95e3-41a0-8cdf-ff809e7daeca/1/0sTDgG4fiOmb2MXkkAd_jeXXzwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:b3:f5:e1:5e:02:43:a2:e4:47:69:00:2c:bc:af:29:f5:
73:13:15:ea:67:d5:92:50:2d:f0:be:7e:6b:ca:51:ce:f7:58:
1a:7e:3b:f5:7e:91:45:0f:2d:69:d9:2c:2b:2f:f0:a0:a5:08:
ca:70:c9:7b:a2:56:f0:50:e5:dc:46:b7:6b:51:da:c0:4a:ba:
61:02:66:8a:2e:a5:f0:e8:8e:8d:53:71:e5:da:ca:79:54:b6:
17:40:e0:33:f6:aa:05:e9:69:49:7b:a6:37:80:df:23:a6:d6:
e6:a3:67:d2:42:39:7c:ac:73:9f:cf:71:03:da:91:1b:1d:b0:
fc:04:b3:f9:2f:f1:34:ea:00:7c:22:f6:00:93:8f:ba:7c:8b:
2d:17:7e:c6:a6:2d:d2:2c:e0:49:1d:74:0a:f6:49:a1:95:5e:
e3:5f:9a:c7:05:e7:3c:35:30:f7:70:87:71:2f:aa:10:15:2d:
39:d9:f6:7d:5c:f4:e7:a0:a1:45:e0:86:34:c2:71:9c:bf:cc:
79:6b:ee:1c:76:b8:0a:78:44:9e:cd:34:cd:1e:de:a4:cd:41:
f7:9b:a5:14:4d:3c:b9:39:0d:7e:47:9e:8c:95:63:86:b2:78:
dc:7b:1f:a5:e4:a5:2f:3c:cc:1f:15:d9:28:9e:49:28:30:e1:
78:f6:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:06 2025 by rpki-client