Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: Zyk4nTnHhFygsh0CUnrp217jREE+MSj9wmjCd9zzxa8=
Subject key identifier: 5D:5D:D6:CE:B3:E3:75:E4:6E:03:AA:E1:9B:12:92:AF:4B:16:83:13
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 0199FBEB36C0774023320F225C39EF9FC6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: iZaAy3Qzf6DUPq3szHHdwFlVYwUbEXCmvxk2OK72zns=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:c0:77:40:23:32:0f:22:5c:39:ef:9f:c6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=5d5dd6ceb3e375e46e03aae19b1292af4b168313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:a1:26:69:05:ce:de:54:fa:24:88:1e:69:
ec:0d:be:07:30:e9:c1:0c:ad:31:29:71:d9:ee:c8:
98:70:dc:bb:f1:1c:c8:e8:b2:64:74:54:b1:8e:9b:
46:d5:0c:83:78:db:7f:8b:e7:2d:7c:1f:b4:8f:73:
e6:4f:a2:cd:88:08:7d:5b:f2:7c:bf:c2:99:0f:74:
93:cd:cf:aa:e7:43:13:61:b4:1c:ff:6a:af:90:8f:
f0:a8:d8:05:8f:8d:c5:48:66:b7:cf:e4:0d:a0:5a:
0c:a4:c3:05:ba:24:48:f4:79:f4:44:a7:d4:76:c4:
42:5a:1f:b3:a8:84:56:c0:52:b3:64:1e:08:0a:47:
0e:d2:af:d7:0c:f4:e2:5f:2f:b8:d9:f9:82:8a:ed:
3b:07:a9:39:a8:e2:b3:b5:d9:86:a6:fa:bb:11:28:
29:19:12:46:0a:15:30:9e:d4:df:d3:61:23:15:2b:
d6:e5:73:9c:0a:db:e1:2b:00:05:d6:e1:01:3d:6b:
42:83:ba:6a:01:c0:57:47:4b:d3:34:d3:3b:f9:51:
b1:40:12:f0:a9:2c:6f:ce:65:75:70:42:4f:e9:28:
05:7a:23:f6:50:79:82:33:19:08:8a:e5:b2:5e:34:
5e:69:bf:58:00:76:fb:55:32:ec:c7:81:5c:1d:c9:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5D:D6:CE:B3:E3:75:E4:6E:03:AA:E1:9B:12:92:AF:4B:16:83:13
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:56:5e:5f:1d:84:40:15:e5:ee:c0:33:f1:31:ad:f0:f1:29:
07:65:00:70:00:0d:b9:86:5f:f8:b2:e3:0a:45:83:68:a5:bb:
5b:d7:ed:e6:ef:50:e2:fc:34:32:3a:f5:4e:2b:15:59:7a:22:
a8:a8:df:ac:a2:f7:ab:ef:28:0f:2a:6a:5b:7f:83:81:2d:86:
f9:7a:64:ad:87:0d:58:4e:d9:b1:89:74:55:3d:d4:f5:61:b2:
82:80:e1:cf:5a:94:e8:f7:0f:0d:2f:55:04:64:4d:c1:f9:c0:
15:01:d4:a1:d9:1c:f3:39:c8:05:98:be:eb:4a:4b:98:b6:fa:
05:d3:19:c0:ad:5f:8f:ee:9b:b3:52:c7:af:e8:7a:79:7f:25:
a0:34:97:c8:fd:4c:a9:32:d5:72:c0:be:bd:7d:dd:f4:86:20:
c8:6a:78:a3:98:09:f1:b4:79:5c:ac:39:b4:8a:7f:3a:51:b5:
5a:0c:f0:40:22:01:36:45:79:cd:ed:e7:68:7b:21:ea:6c:d2:
9e:1b:11:3f:f8:61:d3:f0:54:d6:e0:aa:b6:96:73:0e:63:33:
e4:a5:7c:cd:61:c3:08:bc:38:97:d4:c4:3b:20:51:12:4f:07:
3d:26:aa:eb:a0:2b:32:df:0d:27:88:db:f0:44:2d:4b:a7:89:
10:a8:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:01 2025 by rpki-client