Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: ozBgml+aDHzzdk4ylOh6+mXxlQpU6SFoE886JVtzXfc=
Subject key identifier: D8:54:2F:DC:EE:40:46:60:F1:78:6D:64:AE:DC:81:A6:58:3D:0C:3B
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 0199FBEB650DB9FDD92A3E4AD374B77FFE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: Mg+C7AKMNi/Lz9cZWzxR/ypXCfKnnejzFsOUPKHaQAw=)
2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=)
3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:0d:b9:fd:d9:2a:3e:4a:d3:74:b7:7f:fe:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=d8542fdcee404660f1786d64aedc81a6583d0c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:58:16:c5:07:a7:85:56:40:39:1f:56:5c:
62:e0:5b:1e:c3:14:a0:ca:0c:01:4b:2c:e4:04:54:
1a:43:ab:f6:21:99:1d:1f:d4:66:5d:55:b4:ce:a2:
8c:54:86:5a:7e:df:81:2b:cf:3b:cb:7a:ce:30:b7:
b6:ed:6e:f1:ac:8a:b0:c4:c7:b7:c0:9c:a2:d6:a0:
2c:d7:56:69:86:3d:9d:9b:24:aa:fa:18:4e:ec:9d:
c0:57:47:5d:4d:f9:81:33:ca:45:55:4a:81:59:83:
d1:07:61:1f:78:77:27:97:86:88:db:64:a7:fa:48:
18:fc:f6:8f:da:4c:15:cb:de:ec:ab:0f:fa:67:89:
e0:4d:65:88:fc:53:d5:6c:a2:06:91:ce:64:2a:a7:
ef:3a:d5:62:8a:d5:64:df:d2:17:e0:78:11:e0:7a:
8e:4e:8d:cb:70:e1:c8:ba:6b:a5:14:e5:1b:0d:f5:
15:78:bc:cd:97:26:9d:8c:2c:fe:22:21:e2:fb:b7:
f8:cc:52:02:2e:78:17:f4:af:f1:eb:e1:f5:f1:ff:
1c:d2:6e:40:38:f8:32:2c:c4:00:93:b8:15:d4:ef:
d7:ea:a8:7c:ba:79:c5:ec:b2:d6:31:1d:5f:e0:1e:
7d:bd:f5:13:69:c3:a5:0f:04:fc:3a:1d:01:7a:df:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:2F:DC:EE:40:46:60:F1:78:6D:64:AE:DC:81:A6:58:3D:0C:3B
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:9f:17:12:31:4c:5e:63:e0:e4:eb:77:8a:7b:7d:da:89:
3b:69:2f:01:d7:22:e6:ef:06:ff:a9:5c:f5:66:06:73:1d:00:
8e:7b:ea:82:54:aa:46:a9:e8:f9:43:a2:9c:9e:8b:98:d6:80:
6f:0d:5e:1e:3d:4a:b8:7f:1b:c7:b5:f1:fb:dd:13:5e:1a:2c:
c7:b1:4e:af:30:04:38:50:ed:57:03:3b:cf:13:a0:51:f6:a5:
6e:c7:11:73:2f:b7:72:20:01:68:f1:c5:92:95:d7:1d:5e:dd:
bb:9e:71:af:af:42:fa:be:22:d5:bd:b9:ac:8d:b1:d4:70:3c:
c5:b1:bb:62:84:8d:49:a9:d0:fa:f4:86:7d:bb:fa:62:1c:e3:
e2:48:72:2e:ae:9e:da:11:73:40:55:2f:38:61:cd:d7:f2:e5:
ea:7b:1f:93:43:44:f3:e5:67:97:07:58:42:5a:2e:ae:12:d7:
63:cd:ce:bf:96:d2:83:7f:b7:10:46:f8:b8:d4:82:54:0f:07:
84:b0:ae:0f:8f:a8:38:d7:c5:3e:3b:eb:07:45:cf:ab:73:bd:
30:89:57:31:c9:5e:1d:35:22:fc:45:3a:a1:1d:79:29:6f:08:
da:78:5b:51:21:05:26:5e:8c:0b:fa:c6:b3:63:b2:a8:b9:33:
77:09:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:50 2025 by rpki-client