Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: PYH3lVtWBTnQIf5U/pMDCvZyXgJ5JSVK2ENcJGrs1vQ=
Subject key identifier: 82:3B:95:4C:21:7B:22:DA:B4:85:D9:D3:80:A2:E9:AE:73:08:54:CA
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 0199FDD91F6F489261BB6BCC74AA5B89E4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:28 +0000
Manifest this update: Sun 19 Oct 2025 19:01:28 +0000
Manifest next update: Mon 20 Oct 2025 19:01:28 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: vCRVz/sqKOiV7KCiX8jGx0kbOBgg33Fh/8C8tnxlPZY=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1f:6f:48:92:61:bb:6b:cc:74:aa:5b:89:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Oct 19 19:01:28 2025 GMT
Not After : Oct 20 19:01:28 2025 GMT
Subject: CN=823b954c217b22dab485d9d380a2e9ae730854ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:c5:cd:75:35:f9:80:f3:d8:14:17:7a:eb:
26:f1:45:21:c2:01:14:e8:f3:44:48:62:9b:ea:b2:
27:2f:6f:f5:78:90:4e:8c:fd:99:88:e5:dc:e2:32:
fb:d1:cf:2c:d1:d8:05:8f:6f:7f:f2:54:39:dd:95:
87:91:9e:ff:c9:49:57:86:37:20:48:75:b9:cb:32:
7b:58:6c:67:d4:d8:3f:ea:32:31:e4:ca:f4:84:d7:
8b:1f:0b:a9:d6:da:f1:06:da:05:23:fb:30:df:cb:
b7:1c:da:fa:37:c3:8b:0f:da:f5:9c:9a:6d:09:28:
60:f3:93:a4:1c:46:f7:2a:2a:6e:78:c6:26:47:9f:
d4:02:56:4b:5a:91:84:7b:51:06:eb:42:2d:ed:13:
f6:00:3d:c2:ac:cd:70:0a:d3:31:83:68:6b:e0:08:
9e:7c:b2:81:8f:32:df:90:d0:9b:13:07:2f:62:2d:
0e:0d:d9:59:f6:f3:97:23:82:b1:22:a7:1d:45:b5:
ec:4f:36:fe:4a:89:14:71:02:d2:ca:b4:89:80:82:
59:c5:5f:bc:79:23:23:33:c1:69:08:a0:9d:b1:63:
b3:e1:be:a6:00:92:0a:a8:71:06:d9:bd:7f:05:3a:
87:17:42:93:ab:d8:66:1f:3c:37:e7:b3:ad:f8:f3:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:95:4C:21:7B:22:DA:B4:85:D9:D3:80:A2:E9:AE:73:08:54:CA
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2e:8a:f2:79:94:98:c1:f2:97:34:bb:0d:92:74:d1:e1:60:
91:63:78:da:c4:95:7b:05:f9:64:7d:cc:7f:11:e5:ab:93:51:
d3:2e:58:54:14:cb:aa:a9:d6:0e:5e:65:7d:1c:16:df:eb:f5:
1c:e0:2f:51:08:fe:82:28:85:c9:92:f3:9b:4e:5f:50:59:9a:
92:0b:45:7a:43:14:26:9f:7d:21:09:18:e1:3a:c7:80:57:75:
de:6e:e2:63:a3:39:ac:41:4e:c8:b6:fb:ad:52:e2:be:7e:97:
fb:84:10:5e:c1:40:ed:1c:5a:70:9a:9c:1d:cb:88:0c:60:a0:
5d:3c:74:b3:d8:9f:9f:e8:03:9a:94:a5:51:11:b2:17:eb:6e:
f2:5e:83:7e:ce:cf:3b:a2:93:c4:d7:96:51:54:fa:f4:35:9c:
49:31:60:10:d6:6c:9b:a0:64:73:14:81:83:68:86:d0:1b:f9:
a3:78:32:ee:ec:35:c0:c5:4c:41:c2:f5:e8:4f:aa:b2:5b:a8:
00:74:fe:2f:87:93:fc:e0:aa:49:11:ac:7b:38:6f:f8:96:97:
ee:14:27:54:fb:31:1f:85:f1:3a:fd:ed:cb:89:a5:94:58:11:
14:32:3b:0a:51:ea:69:7c:4f:53:f4:5b:c5:27:8d:a6:8f:51:
62:71:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:49:47 2025 by rpki-client