Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: Wd3KpSILPeIxsU7T/FEy3EoeexRrjBHypwjQ9Ke2ge4=
Subject key identifier: A0:01:E5:6D:7D:D8:23:F3:C0:33:5B:2A:73:A5:49:D2:CE:FA:3D:C3
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 0199FDDA1BA5AAA22FF16AF96F53BA7B15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: e2JP+EAEfxLLUFlSGjtOVKfYF/G2llyoCIrJ25zBgT0=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1b:a5:aa:a2:2f:f1:6a:f9:6f:53:ba:7b:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=a001e56d7dd823f3c0335b2a73a549d2cefa3dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:ef:03:4e:f1:a9:af:77:4a:93:d2:b6:f4:
cf:5a:cb:14:13:dd:d1:a2:ea:de:15:6f:f6:37:3f:
9b:16:e9:a9:66:16:1e:fc:ce:74:1d:48:71:1a:b9:
7a:f4:9d:cf:b9:0c:a9:a2:e2:59:da:cc:81:81:4b:
11:14:f2:c9:03:97:e7:a7:6c:c5:c7:68:3a:4c:10:
dc:e3:b3:df:86:dd:60:01:d1:43:70:c2:15:5e:f8:
38:6a:b8:18:b2:4e:39:d2:46:22:ff:0f:5c:72:c5:
ca:f4:6e:0d:8f:f2:a5:3f:47:c5:3f:ee:c0:1a:fe:
4f:1b:15:c8:9a:1e:6e:b2:a8:1a:65:9f:49:32:68:
93:f1:56:bc:a4:9c:7a:92:cf:38:26:cb:63:bd:ab:
22:b1:68:b6:1a:70:e3:81:87:e7:22:5c:2c:3b:08:
4f:ec:2f:57:01:fd:07:c6:02:fc:3d:88:b6:82:cc:
11:b5:3a:5c:ff:ee:6a:dd:fd:d2:a8:be:20:95:d5:
ff:cc:49:6c:75:17:1c:f6:b7:b1:e7:f4:c8:8e:40:
95:75:5b:40:a1:9f:ec:bd:42:8f:55:ad:ba:98:f1:
dc:99:ff:79:c7:fc:cc:6f:5b:e4:f0:00:dd:c8:85:
fe:69:1a:d0:55:0e:d6:eb:42:ba:32:11:45:a5:9e:
fa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:01:E5:6D:7D:D8:23:F3:C0:33:5B:2A:73:A5:49:D2:CE:FA:3D:C3
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:50:ab:cc:b1:d5:fa:06:e1:4c:8a:a7:f6:9d:69:3c:8d:95:
b2:77:65:3b:9a:59:d4:71:34:1d:37:d6:61:cb:e3:b1:30:d0:
da:a0:c7:92:ce:34:dd:cf:48:bd:56:5c:1f:d1:96:78:d8:18:
27:31:3d:ca:84:6b:a4:f1:97:da:9c:a6:7b:0c:ac:b2:86:d5:
f7:67:6b:51:57:c6:02:2a:a0:dd:e8:5e:d7:b8:9a:86:ff:41:
10:d7:13:36:0f:78:da:bf:9a:57:dc:7b:0f:f7:4b:5d:10:55:
53:10:b4:1e:a1:62:7a:ca:8a:04:e9:52:f7:25:a4:a9:8e:e8:
61:d2:d7:cf:e4:30:94:6c:6e:c8:65:6c:2c:d3:07:4c:3d:8c:
4e:92:f0:a6:40:2b:ce:e3:cf:10:34:e8:02:3a:eb:2e:55:93:
14:f6:69:93:67:bf:c1:35:2d:74:3b:fd:f3:40:44:26:6a:8b:
db:8d:95:64:b4:a8:23:ee:83:07:6e:c0:3c:69:dd:dd:b2:1a:
2b:7b:97:7c:ac:11:80:e4:f4:9e:32:57:d7:92:c9:e6:52:c6:
9d:78:69:95:c3:6f:c8:15:20:7e:48:b5:bf:c3:07:3e:63:db:
dd:bc:a3:d7:da:a8:b6:f7:99:24:05:8c:b6:15:36:a4:57:37:
65:f7:de:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:00 2025 by rpki-client