Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: 4fwuMvBncKBOR5ThLeRoKlUkyCcQWtkTaWw8j3cElDg=
Subject key identifier: 98:71:83:25:B6:17:0B:0C:90:0A:0B:64:26:DD:3A:E3:65:49:0C:89
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 0199FC214F101EA50AA4B3321DA6672D3AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: AxXgAiF9fNKAqqC0WVWEzX9ZFfgsqc1aMxPnTHbGbW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4f:10:1e:a5:0a:a4:b3:32:1d:a6:67:2d:3a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=98718325b6170b0c900a0b6426dd3ae365490c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:3f:ca:43:13:fb:cd:ab:36:01:61:70:e9:
f7:f3:37:58:b7:8c:bd:86:ed:a6:e8:0d:51:09:eb:
09:59:a6:3d:9c:f3:cd:ed:4b:eb:ba:41:3d:67:68:
7e:86:aa:fb:39:60:80:7d:a3:26:33:d5:b8:51:86:
24:d1:6e:78:ff:ba:82:8b:48:30:27:c8:e4:31:74:
23:1d:03:7d:e9:52:9b:35:2e:76:6c:96:35:27:5c:
92:42:e3:53:b4:be:4b:85:48:51:99:da:ec:6e:e3:
f0:6d:43:bb:29:b6:a2:36:0d:6a:70:a6:53:88:33:
8b:b8:b4:68:38:e5:d2:87:0d:fa:91:9d:19:c3:c9:
7e:af:bb:91:c4:ec:50:a4:0f:4d:c5:01:f2:8c:d4:
8d:23:3b:58:5c:1d:fe:99:34:f2:69:2a:27:87:62:
fd:5b:43:e9:5d:45:d9:a7:b7:82:0d:39:9b:93:f5:
cd:9e:be:ea:2a:b8:94:e9:61:2f:a0:e3:f4:b0:c6:
47:5c:da:8b:ad:c2:6e:1a:72:91:63:6f:86:d0:76:
51:43:bb:d3:9f:03:59:6f:25:17:bb:df:b1:e7:e1:
22:a2:05:bc:17:16:38:ec:47:a4:50:c1:fa:36:b9:
36:06:7a:e7:15:f9:db:b2:7d:c5:3f:b6:8a:12:45:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:83:25:B6:17:0B:0C:90:0A:0B:64:26:DD:3A:E3:65:49:0C:89
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cb:4a:93:5a:50:dd:8f:66:ed:14:43:24:55:3f:53:68:9a:
75:34:d2:da:59:3e:40:03:06:a9:73:d6:51:39:a6:a9:bc:e6:
5c:34:c7:2d:5c:5d:c1:db:53:0f:24:86:b2:63:87:71:39:f1:
de:60:09:06:76:eb:ce:96:56:98:24:8a:97:7e:0d:9c:43:0a:
f5:fc:38:6e:47:38:cd:16:0a:e0:04:97:da:e2:27:86:06:dc:
71:c1:6e:10:77:9a:33:0a:c0:d8:93:42:fa:5b:48:ab:4c:3f:
dd:8c:5e:b7:2f:a3:de:29:ac:be:94:05:62:b7:57:7f:dc:ed:
c9:47:ed:53:97:5e:90:2f:f0:25:38:d3:fa:6d:17:61:f5:30:
02:c4:8b:df:36:10:2c:7b:8b:4d:50:5b:be:3a:91:1a:8b:6c:
35:de:e5:41:d9:79:88:1c:34:1a:62:8b:3a:ad:fd:b6:93:90:
d6:73:8f:ac:80:0c:f7:3a:08:fc:66:63:a5:40:42:54:76:ea:
4c:1b:0d:1c:52:81:f5:f7:5f:5e:e6:74:66:8c:54:9c:c2:58:
b4:b1:7f:b9:9e:4a:9b:a5:9a:8f:d6:e8:4d:a3:fa:b0:7c:9d:
1a:ef:af:8d:6b:23:63:a9:12:99:ae:3d:09:9f:11:18:c0:5f:
3d:15:8a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:48 2025 by rpki-client