Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: EmlFaPT8yWs+ZbVRy5EyRQo85pwbsR68jXZ5QKrArWU=
Subject key identifier: 26:EF:F6:84:CE:14:85:5A:FC:85:15:F4:6A:A3:E4:89:47:FC:5A:06
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 0199FB0EF2008F773A123C437B2DEDE0D891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 06:01:24 +0000
Manifest this update: Sun 19 Oct 2025 06:01:24 +0000
Manifest next update: Mon 20 Oct 2025 06:01:24 +0000
Files and hashes: 1: 1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa (hash: YErgeEfB3mK/ybWEoY6pFZ+o+6uteNHWASk7smyhzI8=)
2: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: 1FjpdKNnfTvS+hc5EWQLYubGGo9mDKWqH/m1mEt1smc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f2:00:8f:77:3a:12:3c:43:7b:2d:ed:e0:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Oct 19 06:01:24 2025 GMT
Not After : Oct 20 06:01:24 2025 GMT
Subject: CN=26eff684ce14855afc8515f46aa3e48947fc5a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:01:21:7f:fa:7c:ed:f5:7a:3d:f1:07:d6:
9e:3c:e9:59:78:f1:74:f0:c4:10:83:db:81:b1:08:
13:77:9c:9c:96:c1:b9:33:ea:a1:af:ed:ff:d6:d9:
96:7a:43:46:82:c2:a7:2a:33:40:43:94:58:65:bb:
1d:03:30:66:2e:64:db:32:20:97:c3:3c:2a:ec:a5:
f6:7b:ee:82:49:fa:a4:d4:06:07:18:3d:13:ad:18:
c3:d3:5d:a6:85:e6:c6:fb:1b:61:e9:6b:0c:4d:9b:
a9:3e:91:48:03:53:0a:e6:3f:27:b5:33:88:6c:93:
af:82:cd:87:e6:5a:81:d8:1a:a8:c0:7c:d3:a0:2f:
ba:3d:03:0b:2b:3a:af:54:04:0a:b9:6f:3e:55:69:
21:08:71:3f:00:3b:da:c3:f7:ab:74:a2:f2:00:3c:
b6:65:ef:38:93:a1:bb:b8:36:e5:cc:47:6c:cb:2c:
19:52:49:9d:ad:02:43:dd:d7:70:0f:f2:ad:18:f8:
62:35:c1:65:a0:6e:79:66:4d:1e:cc:59:32:9c:7e:
b5:13:1b:d6:d9:45:39:02:a0:72:b6:e2:dc:10:62:
99:10:9e:e3:24:cf:15:54:9d:2b:d9:82:4e:f0:20:
bf:fc:3b:f9:19:d7:9f:8a:c2:17:8f:86:3f:c7:f5:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:F6:84:CE:14:85:5A:FC:85:15:F4:6A:A3:E4:89:47:FC:5A:06
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:bd:f6:74:b6:81:ab:15:c8:ed:04:5d:d7:78:1c:a9:0f:31:
07:7d:e9:93:21:8a:06:f4:de:a6:5b:47:b6:6d:68:ae:fc:58:
93:9a:7f:f9:e6:e6:32:ee:a9:f4:f3:fc:75:27:5a:2c:fc:cf:
66:81:a0:a9:13:06:92:cf:da:78:d0:07:72:64:19:30:ed:79:
4b:b1:ef:42:53:77:24:50:0f:89:93:d0:03:66:8e:37:bb:57:
89:c4:ef:ce:58:c9:77:fc:0e:c6:88:fd:96:3b:ee:79:95:31:
6d:fe:1f:4f:35:b1:ae:52:13:8c:b7:0f:56:99:1b:19:10:28:
54:ea:b1:7e:6b:5c:5d:6f:b7:b0:0b:cb:5b:31:8d:6b:97:95:
c9:b2:f8:ec:0a:e6:b2:4f:83:df:6b:47:74:24:0e:93:a2:00:
61:82:78:13:09:df:12:92:90:8b:9b:b2:7c:06:80:98:db:89:
d6:0c:51:50:75:af:50:ef:18:cb:1f:8c:48:fa:82:21:09:10:
71:92:cd:74:99:bf:71:2b:04:b0:8f:a0:35:f9:c8:97:ab:c2:
57:ec:26:27:0d:0a:a8:20:53:44:ce:10:1d:10:50:af:3a:24:
7c:27:51:2e:4a:44:b9:2c:9f:b7:33:b8:66:8f:db:68:2f:c7:
10:0f:68:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:25 2025 by rpki-client