Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: ue41btY0SrDay6jEcHrbiQLC1DLs6d7ct5F1pUBLj2M=
Subject key identifier: 16:C1:23:A7:AB:EB:FC:76:89:6E:CF:96:30:40:C3:D8:63:3B:BD:40
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 0199FDD952D309E47E006E188F309BDE0BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:42 +0000
Manifest this update: Sun 19 Oct 2025 19:01:42 +0000
Manifest next update: Mon 20 Oct 2025 19:01:42 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: WGH27kgji15JFJuF4BI/BP6ZdxNZMjAIC4D4zA5GRU8=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:52:d3:09:e4:7e:00:6e:18:8f:30:9b:de:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Oct 19 19:01:42 2025 GMT
Not After : Oct 20 19:01:42 2025 GMT
Subject: CN=16c123a7abebfc76896ecf963040c3d8633bbd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:10:29:ad:10:86:85:64:2d:c1:17:14:41:
65:46:3f:b6:23:ae:63:77:c8:ae:18:4c:80:46:6e:
fb:ae:03:09:e5:d6:70:a2:8e:8a:56:a5:a3:82:75:
c3:01:00:c3:c1:95:8a:8c:18:80:5e:ce:64:b5:6e:
a4:89:86:0a:f6:cd:52:57:5d:96:36:5d:1b:a9:7f:
c8:c2:9f:27:72:ab:59:1c:7d:a3:ae:e1:60:8c:9f:
3f:7b:2f:a2:16:65:4f:7e:31:7a:af:55:d6:9e:e8:
27:4a:28:85:7f:db:3f:a6:e9:d7:c1:d2:6f:89:4a:
ca:7c:7c:30:0c:11:32:bf:b1:b8:0b:da:d6:a9:a3:
55:6c:77:24:28:0b:cd:c5:c1:c6:a3:3a:13:f8:00:
61:4c:e6:27:5f:0f:6d:b1:a3:d1:3e:1b:7f:28:29:
75:42:2c:51:e9:27:f5:af:07:5a:9f:a7:1e:05:40:
d6:eb:58:4f:fa:a4:88:12:ab:c2:a2:3a:f2:97:a3:
91:82:8f:df:6c:4d:f5:bc:1d:5b:c4:bb:5c:a4:60:
3f:1c:f0:8e:73:59:95:a3:14:c6:a5:42:d0:1d:53:
80:33:6b:0c:50:d4:90:1b:dd:dc:c2:05:6c:a8:cf:
b1:95:c2:78:34:bd:cb:75:04:91:7e:9d:0b:63:79:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:23:A7:AB:EB:FC:76:89:6E:CF:96:30:40:C3:D8:63:3B:BD:40
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:af:d1:92:94:0e:08:bd:54:25:94:f7:c4:87:3c:7c:25:
9d:d8:60:23:a7:da:b2:51:aa:8f:ef:05:c6:92:a5:0a:14:96:
7f:d0:78:85:3e:d5:2b:e1:28:c0:5b:cd:05:01:38:86:82:3a:
6e:54:e7:49:70:8b:68:d5:75:06:78:9b:0d:cb:29:4e:39:86:
91:d1:9b:91:29:a1:ec:f1:4b:7d:25:3d:12:67:00:da:47:46:
cd:98:97:05:38:c0:71:6c:c4:83:a0:30:d9:80:19:98:ba:54:
61:39:02:75:8f:aa:c8:9b:9e:f7:f1:da:4b:70:67:74:c9:a6:
a5:ba:44:c1:9a:a8:81:7b:c0:18:28:a7:8f:e8:b5:7d:ef:76:
67:ca:47:f7:1b:0c:e9:a1:ff:9e:37:46:4d:79:d0:2b:c0:6c:
28:31:9d:68:20:b8:06:46:ca:4e:5c:da:03:5c:79:13:49:d1:
b4:99:e8:04:a5:e5:08:9b:17:09:a4:e3:24:bb:c5:09:39:c8:
65:38:23:bb:ea:b5:f7:91:c1:ef:22:59:c2:d6:75:99:f9:41:
ae:1f:9c:12:f7:63:fe:de:5d:7c:79:bd:20:8e:df:19:1d:2c:
f4:c2:42:dd:1e:0e:5b:be:3a:59:aa:12:7d:e3:7f:18:e2:6c:
5c:26:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:34 2025 by rpki-client