Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
File: 70QOE80mESzLWVF2D8-y1JFtcSc.mft (raw, json)
Hash identifier: 66JbzhnT9QugSuPITqCPE0FMx7sT/7cS2gbQ6zVmGGQ=
Subject key identifier: 26:3D:61:AB:CE:71:8A:39:CF:8B:E5:02:FB:BB:5B:B1:72:7C:EE:6E
Authority key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
Certificate issuer: /CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Certificate serial: 0199FD3451ACA337AB584635F0F8B2BAB532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: 70QOE80mESzLWVF2D8-y1JFtcSc.crl (hash: LP2mPfhMWTCqbjPgQDqnVOwai16oG3Hz4lvlcABlVL4=)
2: W0KEQ42eAsjOaTiDlKrXfXSH1aw.roa (hash: MjWN2D0Y+IB6RDhAWue+MqeEjuWUWzQKaH29Oe4TfRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:51:ac:a3:37:ab:58:46:35:f0:f8:b2:ba:b5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=263d61abce718a39cf8be502fbbb5bb1727cee6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:ab:cc:5d:98:e8:ee:2f:67:1e:fc:a7:3a:
d5:ba:80:a1:d2:e2:09:e1:b0:f8:41:a1:e2:ae:06:
ae:c4:3d:ae:e3:73:ea:43:6e:32:7e:59:9f:4a:00:
1d:e3:d4:e3:59:dc:16:97:bc:df:23:7e:85:9f:4a:
0e:91:42:5c:3f:89:9f:02:a1:01:2b:ef:97:06:e6:
5d:54:66:4f:75:e0:88:19:a6:f7:29:52:97:2e:d4:
83:2f:bf:b6:ed:f8:1b:54:06:c4:a7:c2:9f:3d:25:
13:4e:0c:27:a9:fd:93:c9:98:f7:47:af:d0:92:2b:
3f:97:1e:54:35:59:a8:37:74:03:ef:06:8a:aa:78:
58:38:8c:a3:94:de:4c:e4:78:8b:df:a3:cc:96:f7:
3f:1c:ea:4c:ff:ec:1d:56:53:d3:1f:4a:ef:4a:84:
4a:8b:98:00:9e:54:4b:f1:a3:61:0b:df:fe:2f:e9:
15:80:00:cc:97:ff:8d:46:e7:da:bf:da:bd:22:2b:
8d:05:23:cd:f5:df:0e:43:40:aa:7b:62:5d:51:65:
da:ea:31:75:a2:a1:57:bf:2b:1a:2e:61:9d:c3:79:
36:6a:f2:a7:69:a7:85:81:ab:3b:b2:59:57:e4:c8:
23:ad:f9:7b:44:b0:51:6d:4f:7e:cc:a4:8b:a1:6a:
29:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:61:AB:CE:71:8A:39:CF:8B:E5:02:FB:BB:5B:B1:72:7C:EE:6E
X509v3 Authority Key Identifier:
keyid:EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:26:a1:17:eb:06:07:78:2a:d1:b2:47:cf:08:b8:99:de:
72:3c:06:5b:47:74:a5:40:47:f6:4e:b7:1e:5c:30:66:82:8d:
e9:ac:cb:c1:6b:56:3d:84:d5:39:f9:61:5e:ef:e1:cd:47:12:
29:a7:56:d1:27:7c:45:13:9c:f6:ce:37:81:86:ea:2f:90:2a:
b3:56:78:09:11:5b:57:17:7f:c4:0c:68:79:5e:a5:2d:c4:ad:
b9:60:f1:9c:e9:25:24:27:58:92:31:7d:ba:ee:35:79:9a:06:
0b:af:94:17:93:aa:73:45:88:05:bd:03:76:ff:24:b5:7d:51:
67:3a:ee:27:c1:74:41:8d:23:ee:1f:55:a1:6e:1f:63:34:82:
43:ee:01:c6:71:d3:56:b8:2b:1d:67:10:3b:e0:56:33:99:2a:
38:3b:20:6e:20:e7:6f:15:c3:93:60:7f:56:d0:aa:e1:7b:9d:
5e:9d:47:b2:48:99:63:02:07:ca:18:45:28:6d:80:ab:b2:2e:
44:49:06:9b:f3:bd:30:c9:3e:a5:af:28:94:41:bf:46:4e:c1:
b6:5e:d2:05:d4:2f:c9:db:e2:5b:01:6a:37:e3:f4:d6:b5:37:
af:4d:7d:09:5b:78:15:72:89:a7:0b:6d:f6:07:f4:f8:8e:22:
ab:13:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:11 2025 by rpki-client