Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: FosqTeG4ygnYLIi8DzYEozkOr7WDPzO2rEfOkcA8v8w=
Subject key identifier: 64:C3:F2:70:D0:D7:45:FA:83:C4:E4:4C:62:8D:28:D1:8E:22:74:C7
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 0199FBEB0BCBCFDAFAC423281BB274947136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: fMNySVQz3qfROPSCEVmojTL9MdP9ilaajSiERajP04Y=)
2: zKQIfOeURvANDMREU7yI_nE_KFw.roa (hash: rsODojes6psnJwHqpB6iZWFEwYShL6Rps2nkmwoPbsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0b:cb:cf:da:fa:c4:23:28:1b:b2:74:94:71:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=64c3f270d0d745fa83c4e44c628d28d18e2274c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:cd:82:3f:94:4c:0f:da:9a:44:49:78:87:
ec:a1:fc:58:4d:32:73:ad:53:62:13:ed:81:3a:d5:
9b:f6:64:28:e8:25:7c:35:2b:14:ac:15:4f:ba:d2:
15:0a:11:44:16:b7:d1:72:00:92:53:99:12:88:3b:
b6:cf:d5:9f:ff:4e:3d:cf:3b:67:ae:cb:04:40:b1:
e9:43:60:9e:12:bb:fd:db:81:20:1f:ce:0a:90:ab:
c1:0f:03:38:a9:93:20:80:19:e9:5f:8d:de:02:71:
ac:4e:f4:a4:30:33:7e:81:c7:88:e5:da:37:4c:92:
4f:d8:dc:02:a6:f2:22:87:5e:68:cd:57:d2:df:2d:
7b:e6:25:b8:d5:fd:6b:8b:cb:ae:82:98:e3:d1:34:
85:b5:35:98:6b:c8:d8:66:bb:a1:a8:d8:d1:2b:2e:
0a:21:84:7c:87:61:e4:33:73:90:34:13:4e:d9:79:
20:4d:d3:95:97:87:af:20:6a:f8:1c:58:b2:00:9c:
97:37:4c:f3:3f:f7:0f:d0:7c:b5:51:b6:e8:35:4a:
62:15:34:8c:4a:4a:87:65:0e:97:20:3c:c1:41:c5:
6a:e1:e2:63:d8:1c:8f:2c:a9:9f:aa:b3:a7:a5:9e:
f6:c3:f7:16:27:d0:f3:73:68:a0:04:5f:00:68:ec:
1b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C3:F2:70:D0:D7:45:FA:83:C4:E4:4C:62:8D:28:D1:8E:22:74:C7
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:73:4e:6e:97:d6:dc:8c:df:26:95:95:f2:48:65:a2:66:b6:
86:56:f6:5d:f5:7e:fb:6a:a5:11:3c:d6:0d:cc:9e:37:b5:e2:
8f:47:ad:27:a3:f7:11:42:5f:16:96:66:64:18:e9:d3:d2:31:
72:b7:c1:32:28:a8:fc:43:23:25:8b:57:36:0f:e5:67:31:ed:
c5:3e:ee:73:52:e6:bb:a0:e5:dc:20:cf:da:56:5e:34:48:ea:
2d:c8:72:af:79:d4:5f:77:00:df:24:76:13:51:92:ef:f1:f6:
0a:c1:59:f6:b3:11:4b:86:09:1a:10:ac:31:08:6a:19:82:94:
f5:4d:79:19:0b:c9:a6:fa:f6:88:d3:6e:3a:8d:6f:50:5b:57:
7d:03:d0:48:16:28:cf:a1:89:c9:d8:80:0d:63:45:ff:53:ed:
82:ea:f9:7a:e0:b7:34:2c:e1:8f:b4:5f:19:05:86:6d:a5:cc:
60:02:9b:75:6a:e0:19:83:ca:13:3e:b4:f8:dc:35:6d:56:67:
5c:cb:4a:2c:08:0a:14:c1:34:d4:e4:71:9f:97:0b:40:d3:f6:
f4:c7:e0:8d:9e:96:4c:ef:23:8b:2c:63:9d:d4:85:d2:5b:1c:
bf:f2:a7:0d:17:39:4b:e0:a9:b8:52:f3:ab:11:39:b8:7c:46:
f1:bc:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:12 2025 by rpki-client