Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: VFWpwVj08FDzh1zB1xFbRABVTw2LKju4yc49aEGmLDY=
Subject key identifier: 15:AB:73:E5:68:57:67:B2:07:FF:FE:3E:C8:85:54:57:BA:A1:5F:C2
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 0199FC8F6F1304D4F83684DF59B57CD20557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: fq_1cNVhnRyKc2u6Tpi7nWrUD48.roa (hash: 03Y77SRPe3amrviIIQ+5UUog0n/DdIDUF4QQne3bPoA=)
2: joyVHpi7wMxjJ0s6ltsRCFgcXYU.roa (hash: OCQinmVLB46q3fla3T34H+fTxVsr8er+6b+WYrx3pLU=)
3: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: P5DC/Zup2tDShNmA9p9SxHCG1YoyI8gL8VgxCx12WPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6f:13:04:d4:f8:36:84:df:59:b5:7c:d2:05:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=15ab73e5685767b207fffe3ec8855457baa15fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:22:99:5a:b8:ff:44:b1:ee:f9:18:f3:d1:
e4:70:69:84:bf:87:d9:08:ca:e6:49:f1:a6:22:92:
36:28:63:28:80:7f:28:c4:05:2a:6f:67:5f:1f:09:
60:3c:f8:01:07:bb:83:a8:32:51:14:38:4c:c6:c1:
7c:41:df:8d:77:a8:72:6d:f8:32:30:19:7c:ad:3d:
97:32:89:3a:6f:71:49:07:f2:9c:69:9f:31:b8:10:
78:3d:11:78:ea:23:c0:41:c1:08:09:43:d7:d0:eb:
3d:bd:f3:e7:2e:e8:11:f3:d8:a1:41:52:1a:74:b0:
a4:fb:4b:de:91:0f:7a:c7:51:74:4c:92:62:d5:25:
82:5a:c3:71:72:34:ea:15:aa:58:4a:68:aa:da:ed:
50:01:41:ca:0e:c8:2e:6e:49:3a:cf:e6:e0:72:78:
10:61:fa:63:5f:0a:ca:34:b3:2a:4b:a0:7b:99:7a:
dd:43:aa:ff:75:42:88:7d:a5:e2:6e:b2:4a:d7:09:
36:ca:b2:a3:0c:7c:51:96:5b:56:92:a0:20:a4:f5:
3c:d2:4d:6f:cc:7e:37:9c:ad:a1:c1:b2:d2:e4:3b:
bf:3e:e8:37:14:df:35:3a:d3:65:54:13:68:3f:0d:
80:b8:c0:6f:e6:cb:7b:c4:42:06:f0:60:74:79:27:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:73:E5:68:57:67:B2:07:FF:FE:3E:C8:85:54:57:BA:A1:5F:C2
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d2:07:5d:ae:b2:7d:c9:97:ec:1a:8d:56:4b:ec:93:bd:0e:
3c:71:f6:e1:9a:46:60:60:21:68:67:97:e9:7f:b6:5e:15:6a:
6e:81:a3:47:56:f9:0c:a9:8b:89:03:88:14:6c:41:66:1c:d4:
ed:52:fb:3a:b6:09:d3:f9:27:0b:39:95:94:6f:61:93:ac:da:
5c:c9:dd:ea:b0:14:65:4a:08:84:90:72:b6:08:3a:6a:e4:e0:
88:08:05:c4:33:ea:1f:d9:d4:f4:5a:82:f2:aa:24:a7:9a:f6:
15:7d:76:93:68:28:a5:50:43:a1:38:de:98:75:b0:a6:96:c1:
74:cc:5f:0a:0e:76:02:52:eb:0f:c7:af:9f:7e:41:43:8b:8b:
ba:c1:36:ad:f3:0f:19:3b:2c:7a:74:7d:62:b6:c1:d9:01:ec:
b1:f1:77:1c:bf:2f:5f:38:2a:f9:5b:10:7a:7d:26:06:39:2e:
8c:b6:7b:a4:54:87:ea:ce:c2:c1:e9:86:7d:35:52:bf:8f:be:
5e:13:ce:64:5a:6e:c5:ae:04:ff:c3:0b:ed:b0:9a:64:28:51:
e3:87:12:70:82:3e:79:eb:b9:2f:1c:44:50:69:33:ef:72:42:
4c:80:6e:2f:eb:1d:29:35:04:f7:de:6e:1f:69:d3:b4:16:c7:
ec:a2:dc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:22 2025 by rpki-client