Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: mxESmAl6HDfxGsxJRqucu/QDPw+08/50p+DksrySlJY=
Subject key identifier: 2E:48:C9:5E:2B:62:1B:D5:EF:A3:5A:6B:E9:E7:2B:4F:DA:96:14:99
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 0199FE0FF469B19912377A9EE6DEF6EFD284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:22 +0000
Manifest this update: Sun 19 Oct 2025 20:01:22 +0000
Manifest next update: Mon 20 Oct 2025 20:01:22 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: ccTs/fA2jy2DkPJLKfxptQ7C3yGG92cgoxH258mdPzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f4:69:b1:99:12:37:7a:9e:e6:de:f6:ef:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Oct 19 20:01:22 2025 GMT
Not After : Oct 20 20:01:22 2025 GMT
Subject: CN=2e48c95e2b621bd5efa35a6be9e72b4fda961499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e2:15:42:ae:a9:8c:4a:51:fe:2e:ef:50:c0:
7b:ae:f1:ab:cb:e5:cf:c6:b4:ad:1b:b6:2a:d4:66:
64:fd:c8:f0:02:90:28:4e:c7:86:56:57:3b:94:e2:
0c:33:c1:be:85:49:9b:8b:c9:f9:fd:53:c0:ea:7c:
b2:ff:c1:f0:b9:be:6b:27:8f:96:53:20:c7:09:e3:
7d:26:ea:1b:a6:72:70:18:35:39:c4:11:5e:40:91:
60:92:5e:10:05:53:86:52:46:cd:61:f8:a6:44:c9:
b8:b1:26:d3:c5:ba:c8:56:a3:ea:7d:a1:75:a2:23:
d0:3a:2f:8a:71:42:6d:d4:70:08:6f:2a:7d:0b:92:
d8:4f:46:b9:d6:8a:66:f4:c4:eb:6b:1d:05:26:06:
db:3b:fe:26:49:36:af:d4:f9:3a:22:6f:42:4f:78:
1f:ca:c9:94:84:ae:57:15:31:3b:bd:c9:fb:eb:7c:
0f:a6:f5:d4:be:7d:e6:27:14:5a:e2:5c:61:31:87:
80:42:5c:d1:e8:00:e2:67:3e:87:d6:69:99:4a:0c:
29:6b:c7:13:48:c7:ec:00:a4:0a:46:67:89:07:31:
9c:b2:56:53:de:76:da:79:75:ce:80:df:7d:44:00:
65:25:5e:4a:93:f0:98:b4:cf:11:3f:f3:37:8f:79:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:48:C9:5E:2B:62:1B:D5:EF:A3:5A:6B:E9:E7:2B:4F:DA:96:14:99
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c8:bb:59:cb:8b:2e:f0:8f:ee:25:45:ba:14:ce:bf:42:73:
3c:ce:4b:74:2c:34:a3:79:97:d0:c7:11:70:c9:a5:a2:b1:1a:
8d:bb:66:8d:c7:c5:0c:88:e8:e8:7c:ee:7c:ce:95:64:fa:41:
e0:8e:67:08:e0:b9:88:3c:0a:e6:10:9c:88:d6:a5:11:49:3d:
95:92:e6:7f:6c:af:c3:0b:d1:09:25:e5:a9:2a:dd:9b:0b:db:
ab:67:27:84:4b:50:03:a5:b2:8a:22:9f:01:a4:9e:21:c9:40:
f0:48:1c:e6:5a:04:2a:9b:a9:24:d3:0e:0b:c7:7e:f6:ea:d5:
43:3b:27:20:be:20:fc:55:4b:56:17:76:ce:d5:ba:7d:9b:18:
9c:e6:ca:51:44:32:a4:4c:6d:4b:c2:ee:1c:22:10:33:a0:60:
aa:7b:11:39:3c:b4:30:33:2a:71:c7:de:d0:5e:12:d1:5a:69:
0a:d0:72:35:6d:83:ed:dd:42:99:81:55:4e:65:84:7a:0f:11:
35:b3:7e:fe:ca:99:c0:6e:1b:24:0b:b6:f6:82:b9:a7:5a:4b:
b0:19:0c:e3:81:74:b9:39:1b:5c:58:b9:f0:dd:aa:02:b3:51:
35:63:37:c7:c2:5f:c2:43:f8:7c:1e:b7:58:5b:08:c8:cc:2e:
fe:fb:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:03 2025 by rpki-client