
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: IAM2bkw9uSQWT7ucwUcZdh6OfiLCs2vsjEYbptv4vvA=
Subject key identifier: 57:47:49:F9:9C:E2:8B:96:D5:15:C5:EA:18:D0:A4:57:35:85:52:EB
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 0199FDD976621F95AF06BA0B3815C3B76F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 126B
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: jj3ME36qyF2wEn2YMUBXm9Cn5bwuMsLKWDFRg1nzZ6s=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:76:62:1f:95:af:06:ba:0b:38:15:c3:b7:6f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=574749f99ce28b96d515c5ea18d0a457358552eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:b2:bf:8f:c8:d0:2d:24:9b:38:8c:55:67:
fc:eb:a1:cc:c2:88:7f:90:5b:f9:d8:1a:bb:46:0d:
0e:c1:5e:3d:76:92:21:13:e8:f4:25:e7:3b:f6:8e:
d4:21:85:e1:65:81:36:f6:c8:24:26:3e:86:e4:a2:
1b:a6:dc:31:95:cd:07:bf:14:25:20:71:b2:fe:cc:
f4:59:1c:65:9e:9a:08:c0:6d:cc:bb:b1:b2:44:d8:
a0:a0:24:04:03:62:f5:31:a5:38:ad:5a:2b:05:be:
f2:7a:1d:df:60:54:c4:71:89:22:ec:21:25:f4:31:
0f:78:24:67:33:a7:cd:ca:e7:69:e4:43:de:13:b3:
f0:c4:43:a1:c1:45:48:78:7f:bc:3b:d0:44:be:32:
1b:3e:8b:0d:cb:f7:fe:da:2c:5d:a8:44:ab:15:61:
61:90:0a:87:f4:4c:72:a9:82:d0:54:28:63:3c:6b:
ff:2b:05:77:cc:e0:f5:42:13:41:eb:d4:11:41:82:
b1:57:70:e4:f8:21:c0:db:9e:dd:29:19:be:0e:29:
22:82:27:cf:17:0c:f4:c8:8a:bb:f2:a3:08:59:cb:
01:af:d9:a5:e3:64:a8:76:91:f9:4b:fc:3e:db:1f:
4c:e1:cc:bc:df:a0:bd:a7:f5:c0:21:76:54:a0:dd:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:47:49:F9:9C:E2:8B:96:D5:15:C5:EA:18:D0:A4:57:35:85:52:EB
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:b6:45:b6:f6:66:2b:4b:b7:6c:d9:32:20:a7:57:b6:59:
04:1d:23:d0:0c:50:8b:0e:86:f2:41:e4:dd:32:04:2d:1d:e5:
1b:ed:70:25:7b:82:5f:bf:40:c8:2a:b2:be:ca:bb:d9:81:2d:
0d:c2:c6:41:d0:9d:dc:20:27:86:0b:44:a4:69:9e:0c:15:dc:
58:3a:4f:24:a3:37:05:da:a7:04:78:d5:31:c2:6f:85:69:f1:
cc:8a:2d:b5:2b:2b:3a:cf:84:71:55:de:e1:62:25:83:ce:0b:
03:7a:49:1a:35:e5:c8:39:8a:cb:a8:46:a9:69:32:ff:93:b4:
98:dd:be:fa:16:d7:d7:42:55:75:16:69:00:87:8d:6f:00:68:
70:dd:58:c4:36:ba:a5:45:8e:dd:c9:a4:ee:a9:96:2a:00:13:
73:60:c5:be:60:52:d2:33:00:4b:3c:72:2c:3f:0c:83:cf:81:
03:4d:d8:e9:e2:73:ac:12:0f:93:b6:41:aa:05:a4:37:bf:01:
e2:cf:93:b1:56:18:8f:1d:87:5b:fb:e9:a1:1b:f9:2f:c1:7e:
5e:e4:cd:7b:75:a3:b2:1c:e3:fe:58:a1:6f:83:1b:8f:96:a5:
a8:00:7b:b3:2f:5b:53:b0:82:a9:6b:dd:ea:09:62:29:d0:28:
f4:f0:14:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:23 2025 by rpki-client