Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: /C+xtlDs7JjJIIV7rnIydyCO3h5p58u27bnT8qqwI0Q=
Subject key identifier: 37:24:A5:CB:E2:E0:04:E6:E2:D1:4E:65:E7:9C:7A:3A:1E:FC:D6:BC
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 0199FDD8FC5A56754B77F7CFB696546EA76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: 4tKIyKN2LpGytONfG9Wwzb3sMh8.roa (hash: So7qtpci+LVeK7KYvgn0X4FAkS3oDmYxiev+fG5cuSs=)
2: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: Dixoit6yEbDsJsTd6YZovqN+AqpMxzFWnk+57NFj7tg=)
3: Ulk603SVbOQAiKSzR_IZBatvpSU.roa (hash: 1Gak7FJcv6XeZUXfgmGsLnHftg1ktwdBLJgL9CPQ7IA=)
4: rjFAvFxrdSB0H68aH_zK0lS1GcA.roa (hash: iKO/ulWqGpWzjwhANl857sDa0g01+J+R36f50OBJrb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fc:5a:56:75:4b:77:f7:cf:b6:96:54:6e:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=3724a5cbe2e004e6e2d14e65e79c7a3a1efcd6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e0:c0:14:8a:93:07:cf:dd:c0:ca:74:a9:57:
11:19:0a:e1:d2:1c:97:f5:c4:6f:a9:6e:0b:9d:1c:
77:d5:12:da:b9:43:30:b4:cc:e5:a0:86:e5:23:b7:
d4:16:5e:02:d6:02:e4:e8:a2:5e:20:3c:74:6d:e1:
e6:38:9b:f0:00:77:e6:eb:82:fa:0d:28:1f:bd:99:
69:27:88:73:47:2b:40:c5:6f:41:dd:bc:00:b4:6c:
87:47:17:a6:59:2b:a9:de:53:a2:c2:05:88:50:36:
3e:67:2b:1b:c7:35:00:9f:6c:b2:5a:86:cc:22:f4:
f7:f0:bd:c3:f5:d2:2e:8c:8e:e7:0b:75:dc:3f:2d:
ae:80:9d:f8:56:19:b9:32:04:bf:12:38:37:2e:67:
87:45:74:ed:6f:f7:4f:3f:67:99:0b:75:23:ea:04:
78:17:32:0d:f8:7e:7e:67:1e:f4:0c:df:09:c1:49:
f2:aa:0e:74:02:70:11:d8:13:13:79:14:25:62:e8:
1e:37:f2:2d:5c:01:b2:6a:79:78:0c:09:23:8b:27:
33:88:52:9f:bd:db:19:a4:80:6a:d8:51:49:58:09:
47:4e:df:6f:04:05:fb:a5:9b:73:59:e7:62:b3:81:
69:4c:09:d8:ba:d0:cd:73:46:e6:38:15:02:9a:a8:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:A5:CB:E2:E0:04:E6:E2:D1:4E:65:E7:9C:7A:3A:1E:FC:D6:BC
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:77:14:0b:04:f5:7e:43:f5:e9:ea:37:28:4c:fc:63:0f:d6:
0d:86:68:bc:d2:d4:b4:3a:60:c3:de:23:78:2e:9d:af:0d:67:
4e:dd:ec:cb:76:48:5c:4e:a3:86:98:fb:ea:cc:d3:22:da:5d:
0b:c1:aa:14:9a:34:e5:f8:77:e3:3a:0e:9f:28:c7:36:45:af:
07:20:46:b7:9e:2b:23:b0:55:cd:96:74:3a:0a:cb:35:bd:d5:
b0:6a:25:35:57:49:1c:80:0c:f2:2c:f4:d7:9c:7f:d9:43:1f:
40:49:f4:d0:f1:db:46:f1:da:7b:62:d5:aa:dd:a4:fd:5b:b9:
f9:9d:cb:93:61:1c:90:3c:ee:65:18:d9:ae:7e:95:4c:eb:3d:
d8:4a:7e:77:87:65:c8:f4:87:fb:23:5d:75:e9:f3:13:3f:06:
f7:b3:5d:ee:1b:5d:b6:40:8d:a8:e8:c9:06:9c:e7:24:a6:57:
62:92:ec:b3:51:46:5c:a1:3c:83:a8:ac:62:df:5d:d7:70:89:
66:8e:23:c3:20:95:12:9c:8e:d3:dd:a1:ed:bc:42:d5:89:86:
7f:a1:bf:a2:6b:7a:77:79:69:22:43:69:d9:5c:e1:ff:03:e0:
3f:a9:97:6d:51:af:0e:bf:37:33:80:ab:7a:fb:33:92:d4:38:
d7:83:ce:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:16 2025 by rpki-client