Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: OToSsSP6Fz30NVVjDwww7MjbNtwgvhohSO9BYLcvDyU=
Subject key identifier: B0:4E:24:D3:F0:AC:58:3E:A8:C0:9B:DB:4A:B6:83:C8:01:39:24:C4
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 0199FC216A55D6FE85D404D431294F2C223D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: ZtB2kYiu749NTXyFM6VT/YzmDsZ6ALBfrgWCOcvZF3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6a:55:d6:fe:85:d4:04:d4:31:29:4f:2c:22:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=b04e24d3f0ac583ea8c09bdb4ab683c8013924c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:2d:e6:6d:5d:7d:a1:ac:6a:b3:1d:1c:67:
9e:78:0e:76:93:11:21:4c:a1:ad:95:b2:2d:7f:d5:
e6:07:f1:40:7f:82:66:2c:1b:a7:90:8d:d9:7c:51:
c7:98:f2:50:64:b7:bf:57:f7:e9:6d:1e:3d:03:2b:
ef:98:11:f9:93:f8:38:3d:c1:d8:6a:cc:bd:54:02:
c9:5b:67:37:c2:23:22:a0:6b:10:f9:d0:79:96:5d:
8f:60:9d:cf:db:6a:f5:7b:50:4e:77:5d:f1:81:e9:
9f:f8:d4:de:3e:03:e4:6a:90:31:d6:1c:03:39:9e:
69:0e:4b:58:3b:cd:a9:ca:9b:a1:63:db:46:d4:5f:
bd:16:a4:18:4c:78:67:ae:3e:12:49:43:9c:7f:ec:
76:0c:df:f3:7e:ef:9e:c6:98:29:c7:82:fa:d6:4e:
7e:12:6c:23:3f:97:7b:d3:8a:d8:37:76:81:84:a6:
f7:5f:9d:1e:22:63:95:75:bc:be:03:22:45:e7:27:
54:ae:ba:ac:b7:b3:73:53:be:09:e9:39:75:7b:15:
d1:7f:65:9d:27:69:ce:ba:6f:24:16:07:83:a1:56:
7f:99:64:c2:99:3e:b8:a1:a7:fe:3f:26:2a:a9:d6:
24:db:d6:29:13:dd:61:0c:8a:07:38:ba:53:c2:86:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:24:D3:F0:AC:58:3E:A8:C0:9B:DB:4A:B6:83:C8:01:39:24:C4
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:94:0f:54:43:50:b2:13:aa:bc:a6:2d:e8:51:09:30:93:63:
5f:cb:3b:db:1d:9e:c3:9b:ae:86:e4:57:01:82:96:57:45:6b:
10:1d:a0:65:fd:a8:6a:c4:d9:b6:35:35:38:ec:c5:32:02:40:
ac:b3:f8:51:d1:5a:ea:d3:4d:0a:36:2d:3d:74:10:7d:4e:f1:
37:2b:59:ba:5c:ff:ef:42:dc:ae:6d:d8:69:97:b9:a3:3f:1d:
e3:c5:a8:30:9c:49:48:55:b7:10:c3:61:1c:d8:b6:eb:c6:55:
89:06:c8:4d:40:31:1a:f7:99:3f:41:f9:51:a7:2e:2d:14:12:
dd:0f:2d:3e:66:c5:75:88:92:c0:ab:60:0d:e7:23:16:05:05:
d5:d9:c2:1f:fe:a8:d6:24:c7:4a:08:f7:c7:cf:e5:39:d1:31:
cd:6d:90:2e:32:a7:b2:55:01:31:d5:c7:06:22:46:02:12:9c:
29:fa:39:56:9e:fa:8c:09:04:d2:7a:82:73:f4:46:36:25:71:
90:cd:f8:e4:1c:b4:e0:ac:d2:90:82:3a:88:6b:35:15:38:99:
4f:74:74:fa:29:83:b5:f9:ea:d8:d1:21:e2:6f:b5:37:9b:39:
e6:88:1f:0d:4a:c7:ee:85:45:d8:8d:27:7e:62:28:ea:5d:1d:
b8:38:e4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:49 2025 by rpki-client