Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
File: S_asD7A5JnNFTDlH9DV-RZTtJm0.mft (raw, json)
Hash identifier: 7dYGh9aNLT0vPlnxURUSV6rEeKbmGEXu3k8q8zU/iKg=
Subject key identifier: 77:25:5E:FF:0D:DA:83:98:C4:ED:9E:92:F2:BD:40:72:CC:11:CC:6C
Authority key identifier: 4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
Certificate issuer: /CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Certificate serial: 0199FE0FE8B8865B31279AAC1B712D6E3B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: S_asD7A5JnNFTDlH9DV-RZTtJm0.crl (hash: jzT+rSPMtXL8a5Bdzz6YhH6fY7sSBEKbxvOX4MxctHg=)
2: VTOPr5cRplB2JyRppkTR7JFS0fo.roa (hash: s4FFCpaGghq+r1WTThyqyMnDAmNVSPddYtSZUOJOGf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e8:b8:86:5b:31:27:9a:ac:1b:71:2d:6e:3b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6ac0fb0392673454c3947f4357e4594ed266d
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=77255eff0dda8398c4ed9e92f2bd4072cc11cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fa:90:d0:2c:c1:1c:06:37:4e:0c:a2:85:1b:
89:b6:fa:05:8c:d6:7b:94:19:b5:ab:17:fb:78:64:
8c:cf:d0:b4:7d:37:88:a1:17:e4:ce:aa:0f:87:e6:
dc:b9:19:c1:b7:8c:d2:6d:03:cd:95:d0:3f:5d:99:
36:a1:a8:b1:26:1a:54:6f:e7:20:da:31:dd:62:de:
8a:2a:c6:a2:c1:3c:9a:a1:52:8b:92:f3:a7:85:ec:
a2:09:5d:4d:c1:d8:99:5e:0f:b3:fe:ba:06:9b:46:
82:4f:65:7f:83:42:10:ef:87:5d:a7:a8:6c:d0:3e:
51:c3:72:aa:a3:73:1f:80:ad:d2:0d:18:09:93:36:
0a:0d:b7:21:47:27:42:a8:b3:4c:af:58:9d:f2:2d:
4b:a9:cd:0e:4a:65:a7:b9:fa:f9:16:ed:c7:9a:02:
20:59:dd:f9:38:ca:ae:42:5a:40:99:4b:2b:2d:b4:
ad:df:41:c1:98:3f:a1:bb:c6:96:1d:5e:52:46:72:
d4:f4:05:41:88:1c:39:d6:c6:9d:d0:6b:d4:7f:24:
c2:f4:79:d4:45:22:dd:ab:b1:ea:49:93:f6:91:04:
1b:c3:94:53:34:b3:6e:e5:d7:ed:e3:a1:9b:5b:d7:
bd:a7:e7:6c:a0:72:57:78:fe:f5:3d:f7:16:dd:6e:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:5E:FF:0D:DA:83:98:C4:ED:9E:92:F2:BD:40:72:CC:11:CC:6C
X509v3 Authority Key Identifier:
keyid:4B:F6:AC:0F:B0:39:26:73:45:4C:39:47:F4:35:7E:45:94:ED:26:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_asD7A5JnNFTDlH9DV-RZTtJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d620e-5aa4-4759-b088-bac2002932d9/1/S_asD7A5JnNFTDlH9DV-RZTtJm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:30:af:86:7f:3a:6e:ff:86:7e:23:c8:3f:86:3b:f0:24:
c7:b7:fa:de:75:a2:8e:3f:84:ce:6a:d9:2b:6a:87:57:07:b2:
23:5f:0b:ce:b2:a3:67:ca:05:c1:0b:f4:ce:e0:23:d2:d3:63:
68:8c:d9:a9:60:cd:4f:7f:ab:09:c1:1b:db:46:22:83:cd:6d:
89:79:9c:a6:70:27:a9:41:c6:14:93:7b:8d:e1:e5:cd:b6:7b:
c7:37:40:b7:c1:9c:f7:be:cb:6b:91:75:61:5f:d1:87:84:49:
f7:88:88:f6:b0:c9:8b:d6:4b:2d:bc:0e:48:59:54:4f:31:50:
58:02:ca:3c:98:17:5e:c9:30:f2:39:08:90:0f:bc:07:47:a7:
b5:31:c5:38:3b:70:2c:f0:9f:04:29:3b:49:ef:3f:c5:bb:93:
00:aa:49:ec:64:38:dc:6c:55:39:6e:7f:35:fd:6d:67:89:14:
f9:8f:57:74:00:b8:b3:1e:b2:de:96:e8:62:53:d6:80:7d:ef:
52:41:2d:ab:0c:fe:dd:99:3c:e2:7d:b5:1c:c1:c6:14:18:b9:
a9:df:7a:64:6f:36:38:f0:3d:c8:6e:9b:df:9f:3c:f1:2e:38:
ba:a1:27:0a:60:22:ae:81:30:39:12:84:d1:d1:77:7e:be:f7:
bf:50:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:28 2025 by rpki-client