Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: BDMNxIYv0DZ5C/D97LsbaZeuDMh61lv4qh4vZE55ams=
Subject key identifier: 8D:C8:1B:5C:84:69:01:64:53:E0:95:49:A9:3B:46:4A:C9:EE:B3:10
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 0199FD6B484F7C4A10730A85A6432687896D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:01:30 +0000
Manifest this update: Sun 19 Oct 2025 17:01:30 +0000
Manifest next update: Mon 20 Oct 2025 17:01:30 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: MsAG7hMrS3fa2B2X7dfyYEeExJjEJ0aFM1xLfKR2BkY=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:48:4f:7c:4a:10:73:0a:85:a6:43:26:87:89:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Oct 19 17:01:30 2025 GMT
Not After : Oct 20 17:01:30 2025 GMT
Subject: CN=8dc81b5c8469016453e09549a93b464ac9eeb310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:c3:c8:dc:b2:e3:8a:4d:ca:45:53:8e:6c:
5e:2c:0e:6b:4d:63:43:f9:07:a2:d7:7f:a7:f2:45:
c4:66:25:e6:20:52:70:f2:a1:47:58:a4:99:4b:60:
42:8b:ec:84:ab:a8:e1:b2:a1:c5:3f:c1:ab:fc:4a:
d7:d3:87:b2:18:17:45:c8:8b:a5:24:ca:40:dc:fc:
80:da:fc:37:99:dc:f1:d8:ca:47:9d:0a:b9:b5:0d:
fe:da:72:36:53:25:6a:eb:f3:9c:53:47:fe:20:05:
27:44:dd:db:0a:b9:fa:de:cc:11:49:86:31:a6:4b:
51:92:41:38:a9:5a:db:9c:79:6e:00:06:c7:01:37:
f8:d2:70:fa:a6:e4:71:f6:10:74:e2:ce:71:27:9e:
82:50:3e:62:2a:ad:eb:ae:dc:49:8d:7b:43:aa:22:
8a:e0:13:f4:db:04:fd:f6:f0:a6:70:8b:cd:e3:fc:
d2:09:40:6f:12:f7:4a:e4:61:bb:62:7a:5e:0a:2f:
83:18:2a:09:c4:50:93:c9:85:06:2f:cb:b8:06:88:
83:c6:a9:82:42:b1:7c:02:72:ce:85:46:f3:03:90:
92:c0:fa:3b:af:26:e6:98:e7:d2:27:b5:5b:e6:60:
66:14:23:f9:dd:fd:b5:22:98:9a:3b:e2:ee:47:e8:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:1B:5C:84:69:01:64:53:E0:95:49:A9:3B:46:4A:C9:EE:B3:10
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:73:a5:53:5b:e8:09:b6:12:d3:e6:05:9d:07:e6:35:64:9c:
42:c7:30:89:5f:42:64:27:35:12:6b:cd:d7:9b:4a:d5:6d:8d:
2b:94:a3:8a:3d:51:07:28:9c:0b:b6:52:37:21:fa:ce:51:2f:
b3:68:e9:89:41:d0:89:31:ea:0a:ff:3c:be:06:c4:30:3c:54:
d6:1c:d6:91:3f:01:5f:45:cd:5f:7b:fe:91:d9:68:47:a3:8c:
bc:83:b1:53:d3:fb:88:51:c7:7d:a6:42:cf:49:e1:9f:fb:f0:
37:3b:23:11:bd:9a:82:ab:36:4f:84:48:80:15:0c:f9:35:68:
5f:e8:4a:b5:d7:6e:2c:f1:c6:48:4f:d0:ce:8f:36:77:96:db:
87:f1:25:95:5b:e2:b5:d6:9a:35:ef:ae:66:d6:5b:cf:6f:c7:
2e:d0:26:62:e5:de:e9:df:18:74:18:64:7a:7f:37:54:9c:33:
c7:e7:b8:35:20:5a:4f:7f:f1:aa:1f:3c:4b:2d:44:c4:fa:f8:
22:98:9d:2b:10:86:70:d4:bf:88:7d:f3:67:51:75:8e:be:55:
9f:6a:d9:a3:40:4c:63:04:53:a1:30:3d:b8:4c:5e:09:4a:f0:
c4:47:56:fc:21:b0:60:10:9e:91:9e:29:c5:4c:52:52:5f:15:
7f:47:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:43 2025 by rpki-client