Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: 3WdGLr7WNuu22Ofl7YH2wZkEOMjpDM28nhLdiKXtR2o=
Subject key identifier: EE:A3:83:49:BD:93:D9:EF:57:2C:15:93:95:C1:51:58:CE:9E:35:03
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 0199FF595BDB98AA44D956D105F50DD67D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:10 +0000
Manifest this update: Mon 20 Oct 2025 02:01:10 +0000
Manifest next update: Tue 21 Oct 2025 02:01:10 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: mwm6TaR704h3nZkdwpRqzSKXgqfWvBoNg1jAkxnurAU=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:5b:db:98:aa:44:d9:56:d1:05:f5:0d:d6:7d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Oct 20 02:01:10 2025 GMT
Not After : Oct 21 02:01:10 2025 GMT
Subject: CN=eea38349bd93d9ef572c159395c15158ce9e3503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:64:c0:96:63:71:16:2b:be:4c:0c:e9:a9:
0c:55:65:c4:cb:e0:09:56:87:0f:01:23:d6:73:38:
dc:9a:61:de:a5:64:08:e3:25:34:a7:17:45:f3:f7:
52:d2:b7:9a:9a:01:0c:b5:d1:47:61:ac:66:86:fa:
6e:da:09:df:11:05:30:a5:9d:f1:55:5f:9c:d5:62:
07:5e:6d:cd:f9:ef:db:82:f9:ca:da:bf:23:6b:b7:
3f:55:88:bb:89:fe:d0:fd:74:a2:1f:fd:3b:31:ed:
cb:17:17:c6:8e:c5:10:e7:12:50:40:ac:da:31:81:
cc:93:85:a4:02:3f:3e:95:dc:09:97:c5:84:f6:3d:
63:81:91:7b:3f:ee:2e:18:18:7b:cf:a8:e0:26:4a:
5d:42:3d:03:c9:25:c3:93:b1:82:64:d1:ba:4e:ee:
49:96:a7:5f:53:d0:0c:a0:39:aa:ef:2e:b5:fd:a5:
45:11:f1:6c:69:16:0d:38:76:11:62:55:59:ad:e9:
50:dc:24:e1:00:22:0a:10:a6:e4:59:bc:5e:4d:be:
be:a4:b9:66:59:1c:8a:77:20:52:2b:cd:27:c2:0f:
05:eb:b8:2b:fb:b3:27:6f:ee:17:8e:8c:b3:7a:39:
db:97:eb:01:cd:38:fd:ab:7d:05:ea:31:20:81:1c:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:83:49:BD:93:D9:EF:57:2C:15:93:95:C1:51:58:CE:9E:35:03
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:34:d9:76:74:ca:16:2a:15:45:62:3f:5a:64:bc:42:77:
0c:87:0e:4a:75:0e:a5:df:55:98:f6:45:b8:a0:4b:90:2b:9d:
e1:1a:43:25:d2:7c:ae:69:34:27:02:a9:e3:13:ba:45:cc:be:
b8:74:9d:4d:49:5b:05:9b:d7:78:eb:82:f3:02:08:fa:fc:b9:
9c:03:07:2d:f6:1d:99:88:32:4e:11:97:35:77:0c:0f:66:4b:
ff:c3:7b:07:ac:e1:2e:e5:dd:27:4a:a3:bd:b8:3f:5b:d0:c8:
b8:64:2a:a5:f1:91:07:a6:d9:47:ad:48:1a:b9:fc:67:32:ba:
cf:09:ac:3c:31:1a:12:85:c3:2e:49:af:fb:dc:74:02:25:ea:
f3:8b:18:bf:82:d9:b6:bb:e0:2b:be:d4:57:6e:cc:47:92:5c:
d0:73:f0:b1:b3:a1:f7:65:5a:f0:f2:a4:10:b0:2c:bb:6b:55:
95:15:1e:ea:e0:84:b5:9d:0c:b6:72:f7:d7:80:21:d9:07:4b:
90:05:18:c5:48:11:08:9e:a1:03:9e:d1:db:87:48:b4:2e:19:
ab:3d:d6:b0:45:04:9a:a6:a8:77:8e:7d:39:36:c8:3f:0b:7b:
10:d2:08:7c:06:f5:1b:2c:ec:d5:f7:86:30:7c:19:44:20:9f:
cf:0c:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:00 2025 by rpki-client