
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json)
Hash identifier: Ii0oqzbRiMxYj04y8K+6bvEuK7aIS7jW9/K2MoJ2zKQ=
Subject key identifier: 10:4B:35:51:9F:38:ED:A6:B0:8B:FB:BC:F6:AA:F5:0B:66:1F:F7:1F
Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Certificate serial: 0199FB7C7A7BF34A02A47016E127D039693A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: BIvNtEOXSMMRQHraNas0DchrIuwJ0adFHiZtdJzWabI=)
2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7a:7b:f3:4a:02:a4:70:16:e1:27:d0:39:69:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=104b35519f38eda6b08bfbbcf6aaf50b661ff71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:91:22:69:60:23:81:b1:6f:27:8a:2c:cd:
33:43:58:0e:d6:f0:41:96:83:fb:42:dd:62:d0:ca:
3e:66:8d:7b:74:dd:d9:2b:3d:c3:c8:db:c3:87:41:
3d:39:ce:2f:1b:37:00:2f:4f:54:b1:9f:45:29:e8:
60:de:f2:1d:82:0d:6d:95:41:f9:ad:ae:92:6e:87:
84:43:c7:86:60:d0:67:52:61:82:5d:7d:62:b8:c2:
c5:58:64:ad:e7:b0:e9:2b:b4:6d:80:2f:6f:39:a8:
d0:86:82:f8:62:1d:e1:13:fb:ea:ff:9d:89:25:61:
80:5f:63:72:fd:7a:b0:db:08:99:20:e4:50:8e:ab:
a1:53:44:a4:df:db:84:43:06:fb:cf:0a:2d:fb:d8:
31:ac:05:d7:87:ac:c1:c8:8c:bd:fa:56:fa:c9:fa:
7b:4a:13:a8:4e:e4:12:cb:2d:89:7d:3b:f1:ed:d1:
f0:da:ba:e5:d4:d2:32:3e:ae:1e:4d:3b:68:fe:90:
e2:dd:86:77:5e:b8:db:1f:8a:59:6b:9d:d5:b6:20:
00:af:99:0c:e2:4f:81:64:f1:c4:53:f4:34:d0:38:
a9:28:78:20:c1:55:2f:ce:eb:c5:57:53:6c:3d:25:
25:09:8b:f2:b1:24:65:26:e1:2b:d2:41:e0:fd:3a:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:35:51:9F:38:ED:A6:B0:8B:FB:BC:F6:AA:F5:0B:66:1F:F7:1F
X509v3 Authority Key Identifier:
keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:9e:57:cb:05:4e:7b:bc:e3:e8:d1:b6:d4:55:76:bb:ed:
c3:d1:98:c5:fe:1a:27:ec:ed:b1:48:28:e8:56:c8:e9:a8:c2:
01:74:8f:f4:65:03:95:2c:5d:8b:2f:97:e7:14:ae:1a:33:f7:
6f:15:5b:80:5e:5f:d1:be:e1:e4:ba:93:82:1f:b2:9b:a6:6e:
1e:27:54:1c:70:95:42:7d:44:67:59:1f:d0:81:ad:d9:8b:b0:
64:33:ac:db:b7:59:87:33:00:ec:1b:52:b8:60:4b:52:c5:40:
2d:b4:2b:92:01:f0:ef:16:bc:13:0b:23:bd:fe:9b:e5:49:28:
92:f1:10:d5:c9:de:f8:35:7e:75:5a:a7:0b:e0:f9:04:43:86:
cf:8f:ac:19:c7:a4:41:88:8f:ee:33:bc:a3:bc:2d:6b:62:c9:
e2:73:b9:13:83:82:3e:f5:7d:bc:cc:4c:9a:93:b3:45:07:4f:
1d:96:74:6c:a7:ac:3c:94:e7:b8:8f:5e:82:d4:35:b6:06:57:
b5:bb:da:b6:ad:ce:88:8c:47:04:f9:d8:d5:ce:ce:14:73:b5:
f7:8e:24:24:9f:09:2c:08:07:89:a0:fa:94:41:af:90:25:93:
7b:72:f2:79:03:ac:31:1f:d1:c7:32:96:3d:44:9d:7f:5c:31:
72:ee:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:50 2025 by rpki-client