Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: zJLoKZMLpzss9gMg0xVgvAkYkHMrA09vryebCmLH1D0=
Subject key identifier: EC:B7:2B:7A:E9:F6:7D:A2:96:70:19:DF:10:0D:2E:DE:C0:40:4D:2D
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 0199FD6AE0266215A8B85EDB496C5EB9CE28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: 8Tg_w4jLr-o6paH7i7ao61nZQwM.roa (hash: BXi5IdwKZUBuQCj2qQLYriilM2He/krSkrWhx7hLw5g=)
2: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: VN165avQqQS3D1e109uSjjoPY0AtqtND8rVE7QssHr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e0:26:62:15:a8:b8:5e:db:49:6c:5e:b9:ce:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=ecb72b7ae9f67da2967019df100d2edec0404d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:22:b7:a4:f6:2e:49:bb:7f:17:03:91:bb:
ab:72:9c:88:f6:4f:8a:60:ca:67:60:73:78:e5:68:
48:97:43:92:86:36:24:02:d6:b2:01:34:8f:d8:40:
77:cf:98:99:89:9f:fe:b0:d6:22:d8:49:c2:0a:67:
d3:96:f1:04:88:8a:20:49:e1:87:37:30:60:17:e7:
cc:06:37:74:a4:9a:30:16:c4:e1:02:4f:ba:94:a5:
54:89:20:af:fa:f0:fd:87:c7:af:53:e4:13:25:5f:
2e:ac:54:9e:8d:85:fd:35:71:1c:c5:0d:f7:0f:95:
b9:b6:66:63:39:bf:02:22:31:a5:7e:70:3d:b8:3f:
58:63:f1:16:37:7e:62:b9:f3:cc:e4:a7:d8:58:27:
8d:fb:dd:62:6a:bc:c2:ce:cb:a3:48:e1:0f:ff:ca:
5a:5e:3f:a4:a0:f8:a0:80:d1:4b:ef:f4:3a:4d:76:
e6:c6:31:bf:54:7c:53:87:ec:15:d4:dc:70:61:89:
04:94:b0:a2:c9:e3:9b:a7:de:f3:ef:03:19:d5:59:
30:15:c4:5e:f5:54:f6:84:0f:6e:4d:e2:a0:87:0f:
02:6b:5c:e3:77:7a:b1:b7:e9:fc:63:c9:bc:97:49:
b3:bc:21:2b:d3:33:2f:5c:1e:50:74:65:9a:17:00:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:2B:7A:E9:F6:7D:A2:96:70:19:DF:10:0D:2E:DE:C0:40:4D:2D
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ac:b3:29:c1:99:f5:c1:1b:06:82:21:07:23:61:73:b1:c2:
22:19:19:6f:a4:f0:d5:9c:c6:35:b0:30:7c:bf:fd:19:16:c5:
f1:8b:b5:50:f9:52:f6:1f:07:07:61:8f:39:72:5f:89:97:5b:
46:04:c8:24:ae:6c:5b:af:97:b2:d4:84:3d:c2:d4:ea:9e:2b:
cf:1a:6e:6a:cf:e1:34:8b:b4:d0:e7:12:3e:c7:90:ff:f3:86:
67:cc:2a:e7:4b:df:ea:a8:5a:2c:cf:9d:55:16:a1:44:eb:a4:
48:e0:4b:a7:ae:c5:4d:c2:43:32:21:52:64:e0:f7:48:59:e4:
bd:fd:5f:9c:10:f5:e7:0c:6c:a1:38:5c:31:4a:71:d9:56:94:
35:13:ec:ef:69:86:87:42:82:8c:17:96:3e:d4:f0:12:65:73:
3e:7e:22:52:99:3c:62:1c:dc:65:29:21:ee:5e:1a:89:79:3e:
09:3a:8b:61:7c:26:27:d4:b3:be:44:39:21:6e:c6:48:3a:2c:
b4:b5:46:6a:48:7f:8d:cf:26:ff:39:28:ba:76:b4:8f:d4:29:
20:6c:87:99:98:b6:fc:06:0c:29:e5:0f:1a:db:ce:ad:20:04:
25:c9:6a:2c:82:27:da:62:fb:3a:40:60:82:72:15:26:bc:f4:
23:60:4a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:35 2025 by rpki-client