Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: YE0bSRFm1JLphDQdt6LE1Y2PwLnwsmX53z9kuhL36cg=
Subject key identifier: D2:26:74:C8:56:20:3F:BD:49:F6:C6:7D:D8:94:00:4C:F3:62:32:E9
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 0199FB7CD8812BBBF11169F4A5CB2E22CC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: QS/2cOhETd3ae41MqQaQpLJRG6/Z/B0VNCkM/ozXE5s=)
2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d8:81:2b:bb:f1:11:69:f4:a5:cb:2e:22:cc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=d22674c856203fbd49f6c67dd894004cf36232e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:52:48:ab:b1:4b:71:97:95:00:e4:d1:5e:
77:88:80:b0:aa:eb:ac:67:ad:12:52:cc:da:17:12:
f5:33:4a:de:ea:85:e6:b7:ae:3f:30:a6:86:65:d7:
c0:02:37:03:86:3b:75:c9:9e:27:8c:be:e9:d9:1a:
c8:84:af:f7:1f:9c:67:ca:ac:71:b8:52:ae:60:36:
cb:e9:aa:98:ac:e8:b1:c8:bc:14:c0:b5:6d:39:27:
01:d1:55:cc:6d:3e:6a:fd:19:90:2d:38:55:fb:62:
82:fc:ce:cb:21:11:dd:16:41:8f:6c:1a:b4:e4:a9:
f3:3c:ec:9b:58:90:a0:6c:eb:43:7a:a7:36:df:e2:
94:23:6e:0e:b7:a1:90:48:f8:67:93:6f:68:39:a4:
61:5d:cd:06:80:85:ad:ab:ed:ff:47:15:2d:23:02:
02:86:bf:cd:40:91:52:5f:bd:92:bf:38:cc:6d:6a:
99:33:eb:fe:d0:a4:ad:39:c2:25:52:4f:5b:6c:92:
0b:4b:77:7d:ed:df:ba:80:00:a0:8f:a0:d7:f5:53:
ef:36:89:40:b1:f3:32:12:05:56:2e:7f:fc:eb:f9:
32:a6:d9:6f:45:da:1a:3d:5e:50:64:54:cf:19:d8:
36:ea:43:87:ae:bf:87:0e:4d:55:b2:97:12:98:74:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:74:C8:56:20:3F:BD:49:F6:C6:7D:D8:94:00:4C:F3:62:32:E9
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:16:4e:48:4d:5e:b9:eb:00:6c:91:ea:72:d5:6d:3c:e6:55:
dc:2e:d1:bd:6a:c1:93:be:71:f4:d4:65:05:63:2e:f8:7d:44:
5c:7e:43:ad:5e:9e:79:a2:99:f1:5f:d4:2a:2c:82:80:e3:32:
16:64:51:64:47:c1:e9:0b:b8:85:c5:14:cd:ae:a5:d2:68:26:
3c:4d:78:73:9b:2b:54:e0:49:61:22:f4:1b:42:10:06:84:99:
4c:bc:3c:d3:d8:24:5c:6e:64:4c:27:19:b9:11:ec:3a:0d:9d:
00:ff:61:46:a6:2b:da:0a:25:05:eb:cf:9c:b4:35:67:3d:f6:
a7:9f:c1:fe:3d:32:5d:98:50:06:a3:cb:d9:5b:32:2b:25:74:
e4:5e:ca:98:da:35:de:60:9f:b4:bd:61:2f:9f:01:c6:56:90:
7a:fb:83:43:8b:19:c7:27:7c:8b:2a:f6:d6:e7:a9:d7:8b:e1:
c5:31:ca:c4:e4:3b:a7:30:d0:4e:d2:cc:c7:67:ca:7d:87:43:
55:d9:55:1f:2a:d4:51:e6:f3:a6:e1:16:89:b5:4b:83:1c:0b:
f2:1c:c4:b0:74:a4:0f:69:df:bd:cd:56:d1:25:27:e6:3e:e2:
1e:03:f9:3f:b7:a2:6b:cb:eb:fc:e6:32:14:4b:33:82:40:62:
6a:0c:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client