Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: +UUCMYD2t7JyeF+7QXA3vFYLOydxc2jtF5S10okQ6sE=
Subject key identifier: 88:25:B8:FA:11:65:77:31:3F:01:C7:69:74:CC:7C:69:48:BA:B0:4D
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 0199FC5831A534FC2FDBBEB8DDCD86B73957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 7YjIHIIcnz2oRYHd2C3vSmMWUjJCUrduzgv3ejMMI38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:a5:34:fc:2f:db:be:b8:dd:cd:86:b7:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=8825b8fa116577313f01c76974cc7c6948bab04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:8d:34:51:3c:fb:77:cb:11:db:52:90:08:
a5:ec:e8:7a:a5:ca:c4:8b:b8:00:a5:13:df:7c:23:
ef:0b:cd:af:4e:b3:6f:78:ee:14:5d:d2:3d:7f:fd:
c0:6b:93:8b:13:e5:93:5d:17:49:80:70:0e:6f:65:
77:ed:45:6a:5c:8c:8d:dc:86:d6:93:f1:f7:58:89:
4a:b4:98:d2:50:f3:ed:38:b5:32:50:21:a0:1e:07:
35:67:48:9c:54:c4:c8:e9:0c:cb:4f:ef:90:9e:93:
6d:26:4c:dd:a0:d7:be:54:2b:e3:91:16:97:e9:15:
2d:63:62:bc:95:2a:2d:0d:97:1a:91:ef:60:2f:2f:
04:1a:b1:7c:fd:9f:34:35:34:19:e2:29:ee:09:43:
6a:ac:d9:5b:62:0a:bd:81:01:cb:c5:24:c8:85:20:
77:88:d2:72:96:07:34:65:94:1b:72:77:3f:49:77:
d9:43:08:ec:04:00:5c:c1:99:1b:1d:62:99:04:32:
19:2d:0b:d6:1f:5d:ed:28:76:40:89:e3:d6:8f:0a:
de:2a:0d:ac:ca:d6:7f:a2:7d:3d:19:ec:f9:e0:cd:
73:34:3a:73:76:b1:f7:51:f3:05:4b:50:51:c5:46:
32:37:51:50:75:aa:a0:07:b3:ca:ff:0a:f9:97:a8:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:B8:FA:11:65:77:31:3F:01:C7:69:74:CC:7C:69:48:BA:B0:4D
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:6d:57:3c:d9:4a:60:11:2f:36:9c:f6:57:51:b4:3c:41:
96:4d:5c:a1:73:d9:c2:1d:04:44:28:ea:1a:ee:cb:35:c5:08:
c0:15:3c:ec:0a:26:a1:96:e1:9d:44:cb:89:89:40:a7:93:0b:
6e:0e:1b:1c:02:da:e6:2b:32:78:e0:cd:4f:40:c5:78:fa:51:
4a:65:da:0d:c6:93:84:eb:1f:9c:78:52:79:16:fd:5d:b5:80:
f0:8b:03:4c:98:4a:9f:45:9c:fe:7e:7e:b0:c6:6e:0a:42:91:
b7:92:88:da:bd:33:34:fc:30:91:d8:98:b6:68:e0:10:8a:ac:
9e:f3:0b:1b:5d:7a:60:91:a1:a3:36:ee:ce:f0:d7:1c:0e:79:
81:3a:7f:b2:f9:23:c9:0b:27:f7:aa:89:92:94:0b:dd:47:b9:
a3:7d:22:48:3e:26:13:8a:47:56:a2:38:e0:df:4d:0f:3e:20:
86:e4:39:80:f4:0f:ae:9a:93:06:b9:cb:ca:e3:42:cf:da:71:
2c:94:e4:41:48:bf:e8:2a:c6:da:04:75:9f:5c:31:ff:0f:cf:
36:ab:ce:0f:24:90:54:38:0e:ae:ac:a5:2b:64:16:2b:51:5d:
31:7f:9f:61:96:60:40:1e:db:b8:b1:3e:6b:e9:01:d2:cf:86:
54:30:57:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:26 2025 by rpki-client