Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: 9z4rYYp+uarzOKHHuodbzMw9z+JInOTNzmcNwkbSD3A=
Subject key identifier: 82:95:0C:45:97:51:00:E5:84:F0:B0:C4:57:DD:27:E9:DF:99:8A:3D
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0199FEB4D76A9CA6D14F321747F0744BDD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:28 +0000
Manifest this update: Sun 19 Oct 2025 23:01:28 +0000
Manifest next update: Mon 20 Oct 2025 23:01:28 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: cBDxOzM+zzo5UonYpm30s1FlLRAF7DI6J/PmnWVTSRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d7:6a:9c:a6:d1:4f:32:17:47:f0:74:4b:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Oct 19 23:01:28 2025 GMT
Not After : Oct 20 23:01:28 2025 GMT
Subject: CN=82950c45975100e584f0b0c457dd27e9df998a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:03:ed:73:fd:ff:80:00:9d:72:77:3e:bf:
62:77:c1:d3:be:b8:cf:9f:3a:f2:da:a7:ab:af:01:
e6:5c:e8:e5:d4:d2:32:a4:75:1c:78:e3:ac:f5:5f:
01:27:80:ea:93:2a:23:91:7c:83:51:83:79:c3:2f:
a4:9a:ab:e6:2e:2e:0d:1c:aa:42:35:fb:d0:d7:93:
dc:ee:2e:1a:3d:6c:8c:80:49:83:c8:47:a3:24:74:
bf:38:1a:6b:7f:b1:9f:7a:a6:b0:12:52:3d:64:04:
53:42:eb:81:d0:e9:47:5f:24:fb:72:c9:9d:27:ae:
89:96:ca:5b:bb:61:a7:3b:f8:d9:93:67:70:d0:9c:
96:36:cb:f6:79:ca:14:7b:da:a6:af:a7:a4:82:cd:
69:32:25:ef:fe:c6:af:12:b0:54:eb:fe:4c:81:b3:
7d:c9:59:d0:db:2d:fc:5f:18:cd:b7:30:44:2c:c8:
e3:63:f9:bf:ec:5e:11:82:2f:36:5e:34:a1:9a:6f:
c5:f3:10:c7:ab:47:ce:db:db:99:7c:fa:9a:23:35:
07:49:28:6e:91:e7:fc:39:d7:f7:d6:69:b2:31:aa:
84:e6:48:64:47:48:d6:dd:34:db:36:ff:ef:30:c8:
b0:49:ee:88:11:dd:59:46:05:f4:9f:c7:68:62:b2:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:95:0C:45:97:51:00:E5:84:F0:B0:C4:57:DD:27:E9:DF:99:8A:3D
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b9:c8:30:8a:f2:97:a3:f6:b6:fd:27:92:d7:b9:93:9c:20:
89:13:55:83:58:d8:41:9d:ee:38:59:23:8b:3f:e3:a2:74:88:
7f:da:3d:b5:33:ad:7b:34:5f:33:39:c1:57:dc:8d:cf:43:6b:
3f:ef:65:42:59:05:e4:b7:59:ee:cf:e4:5b:05:09:ce:81:c7:
a9:ca:6c:97:11:91:d2:58:81:9d:f8:7f:ba:d7:b0:81:ea:1b:
c9:b2:d4:86:88:7a:0a:c9:24:61:1b:96:64:36:71:61:d2:cb:
df:57:ab:9e:92:be:64:5c:a2:8e:62:17:70:99:b9:55:ab:ca:
31:45:bb:e1:1b:1e:a0:df:1e:e2:f4:f9:b7:26:c7:ab:32:d3:
b4:36:c0:c6:26:a4:c6:5c:ce:1f:5a:16:46:b7:96:3d:98:52:
fa:c4:a1:17:4e:3c:42:ee:ea:27:0e:23:6f:b0:87:ad:8d:12:
71:7a:af:bb:31:88:7c:19:67:53:61:f2:23:5c:7d:ad:89:2a:
1e:86:33:c1:32:98:d9:1c:36:54:b5:64:2f:fa:05:dc:4a:b2:
17:81:20:4a:42:5f:ba:a7:08:57:92:1a:78:98:5b:ee:01:6f:
d0:55:28:ac:11:be:91:22:df:15:2a:91:92:86:27:16:0a:96:
cc:ff:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:38 2025 by rpki-client