Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: 42iz3jm4fzlKcMDO1aIj5jyTDWXk2ZrJzZxX62kp9Gs=
Subject key identifier: AC:07:9F:22:A5:24:63:3A:24:34:DE:B5:D2:DC:30:B8:FD:FD:31:E6
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 0199FDD8F5B4C16E68E8A6AF32D32E6C6D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:18 +0000
Manifest this update: Sun 19 Oct 2025 19:01:18 +0000
Manifest next update: Mon 20 Oct 2025 19:01:18 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: /WICDrXZDta9YyQCXT+x23tmn8m73IB/TMpVU2r1lv4=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f5:b4:c1:6e:68:e8:a6:af:32:d3:2e:6c:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Oct 19 19:01:18 2025 GMT
Not After : Oct 20 19:01:18 2025 GMT
Subject: CN=ac079f22a524633a2434deb5d2dc30b8fdfd31e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:c8:6a:fb:95:95:85:e4:c2:5d:1d:58:ab:
37:1f:35:70:a4:04:eb:1d:b6:1d:5a:58:b5:5a:df:
07:90:3f:3f:36:81:c5:b6:07:5b:a3:a3:be:82:5c:
60:e1:34:b4:7e:ee:9a:bb:4b:71:f6:06:28:9c:91:
4d:e1:34:e6:e4:f7:11:1c:0a:a4:0c:9f:db:1e:1c:
a9:bc:32:a5:36:2b:04:02:b5:2f:e3:ff:1f:f2:cf:
17:9b:30:6d:ab:92:9e:01:15:8c:82:cb:32:b2:8b:
cd:ec:01:c9:3a:85:5b:66:9e:d4:be:53:8e:a1:f9:
9d:15:ea:9d:bf:86:41:f4:db:74:a3:b8:cb:3f:82:
95:47:5a:65:b9:84:ee:29:25:ed:80:ed:6d:84:3d:
a4:18:d1:71:18:e8:e9:a2:f4:73:87:10:6d:9e:a4:
23:0c:e7:c6:89:9c:ea:45:a2:b1:48:f7:04:09:0b:
97:b2:23:e8:62:13:a2:24:e6:e6:dc:24:a7:e5:fb:
86:91:7a:27:f5:71:ac:4d:ff:b6:d2:75:88:2d:c7:
67:49:3d:aa:7c:fb:e6:cb:a2:56:8b:12:cc:6c:43:
1b:49:82:27:e9:d7:ff:ef:a4:cd:8a:d3:08:d3:e9:
79:4f:6c:3f:45:11:e3:7b:9b:aa:0b:36:29:03:78:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:9F:22:A5:24:63:3A:24:34:DE:B5:D2:DC:30:B8:FD:FD:31:E6
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:d1:09:ce:b5:10:7e:d3:7a:1c:89:8d:82:42:db:be:11:
3f:13:5d:9b:63:d1:bf:2e:f2:52:34:03:d0:fe:75:1d:90:d6:
52:be:bd:92:35:bb:db:39:f9:23:49:c0:e5:31:2a:1c:30:31:
38:5d:f9:13:15:2b:bd:3e:4f:1d:3d:ee:60:bd:3a:25:6b:2b:
28:ba:02:16:2e:a9:b7:b0:65:c0:24:ff:89:59:9b:a0:26:2a:
73:73:ef:69:b4:2b:8a:58:80:a3:9b:f2:f1:07:74:7d:98:f1:
2a:2a:3c:fc:37:d8:04:0d:ef:82:72:42:70:77:49:12:0e:d6:
1c:a5:39:13:17:c2:84:e3:27:cb:03:12:59:f9:83:27:26:36:
29:28:a0:d8:18:f9:1c:5a:24:76:cd:c6:f6:35:06:8d:88:82:
49:97:58:6a:dc:3e:b6:02:d3:05:f3:a7:a2:61:01:f9:ea:8a:
79:c0:e2:45:20:1e:e1:2f:75:14:e1:e6:48:27:1b:7d:ea:3d:
27:01:ce:6a:05:07:3c:19:c9:cc:40:b0:d4:43:22:5f:15:f9:
09:6c:ad:06:1a:5b:bc:91:54:db:f1:e0:21:49:2f:ef:36:b1:
96:a4:09:d4:30:df:c8:c3:d0:8a:e2:5b:0c:39:f2:f2:7c:40:
c9:1a:35:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:46 2025 by rpki-client