Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
File: 10zp2eGKKooGy02bCLWc12siEYQ.mft (raw, json)
Hash identifier: XknXy0IVXNJ8VC1DBCXr8He3+Gjpi7w1ZppuKvap2pg=
Subject key identifier: C8:62:98:AA:83:EC:8E:FB:34:39:97:3E:E2:B5:60:78:CB:A7:1A:2B
Authority key identifier: D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
Certificate issuer: /CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Certificate serial: 0199FC2145D217D802DC1AA0C57E11DF6D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 10zp2eGKKooGy02bCLWc12siEYQ.crl (hash: WN6GNk/EfQhL6X3TxtAqsgB5PThXFKGVdWfnHeDfC+s=)
2: ukTm-wxzEJj-s_OEsyy8V9c_Wr4.roa (hash: fj9aOH6SJjD+OTCiFFLafnYvA1jJNlZv9daAJcHZMJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:45:d2:17:d8:02:dc:1a:a0:c5:7e:11:df:6d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d74ce9d9e18a2a8a06cb4d9b08b59cd76b221184
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=c86298aa83ec8efb3439973ee2b56078cba71a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:4b:91:8c:93:01:17:5e:1c:c3:1d:fa:cf:
a6:b0:d7:16:12:9a:1b:6b:36:1a:fe:54:8a:dd:3c:
78:9b:30:c5:dd:bb:66:60:4e:7e:b3:8d:11:ce:b4:
65:85:42:9f:94:15:0a:de:5e:16:ae:df:5b:0c:8a:
fd:0b:4e:13:da:9b:d5:2c:d9:28:fe:60:d0:27:7c:
ab:5a:85:8a:29:3a:1a:0e:91:19:26:d4:12:8f:e1:
4f:d3:2e:c3:ad:b4:d8:04:df:b6:65:28:ba:c4:dd:
e9:b5:35:3b:f4:74:8a:86:aa:d1:8c:b8:b5:5a:59:
21:1d:b8:98:07:33:fd:01:48:69:32:d4:b2:58:39:
f3:d0:10:ac:0c:97:27:bf:c6:5b:b2:3e:f9:65:10:
e2:3e:77:47:21:a9:ed:df:e9:d6:be:37:3b:02:e3:
16:2f:d3:f0:3e:7c:16:74:23:9b:b2:1b:c3:a0:cb:
4a:c5:d0:7b:9e:92:30:b0:d3:21:d8:f8:c7:f9:83:
21:bc:8b:9f:1d:63:bb:71:a3:aa:f4:29:57:d6:8f:
c8:67:1a:4c:49:c5:0c:80:79:66:12:00:ac:59:09:
1d:c9:cc:57:65:ee:88:06:96:a2:ab:30:48:65:e0:
cc:f3:6f:7f:0e:cf:16:19:b5:49:24:94:bf:06:92:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:62:98:AA:83:EC:8E:FB:34:39:97:3E:E2:B5:60:78:CB:A7:1A:2B
X509v3 Authority Key Identifier:
keyid:D7:4C:E9:D9:E1:8A:2A:8A:06:CB:4D:9B:08:B5:9C:D7:6B:22:11:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10zp2eGKKooGy02bCLWc12siEYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ed5c1e-2d5f-4222-bdc7-63b95240d745/1/10zp2eGKKooGy02bCLWc12siEYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:da:44:1b:23:14:4d:50:12:cb:9f:66:2b:af:71:49:a5:35:
ba:0c:a6:08:57:04:82:ed:b6:35:f2:99:56:45:77:72:8c:fd:
d0:e5:4e:cf:5f:dd:1e:6d:67:f2:97:cc:17:bb:5e:b9:f8:29:
8d:c9:4c:69:36:59:a5:36:a3:30:ab:d3:e3:31:9a:49:4d:b7:
80:cb:52:5b:ae:b7:2e:6f:62:ff:09:5b:72:51:ce:ac:e5:92:
52:a8:78:0b:58:7a:bc:22:65:ae:09:0d:be:5e:fb:6e:b7:6f:
77:b9:c8:2b:e9:5c:39:c1:8d:c9:df:36:10:51:0a:fd:3c:45:
84:a1:17:dd:4b:ec:d4:35:4c:ae:dc:ce:99:7e:73:40:8d:41:
da:41:be:2b:b0:a0:f3:8b:97:c6:55:50:9c:7d:a1:be:df:88:
f4:f2:36:b8:63:d2:ae:b4:c6:34:2a:b4:23:0e:1d:40:2b:0f:
c5:45:b7:b0:6a:79:25:84:66:cd:f6:1a:f1:f8:37:b5:ad:a3:
b2:c8:ec:8b:95:72:fc:30:df:3c:0a:1a:61:1e:73:3d:eb:ec:
5e:d8:3c:4f:00:dc:1b:4a:58:63:e1:fe:c4:8f:d9:55:cb:56:
fd:e0:39:d9:e4:4a:be:60:17:24:51:69:02:23:93:67:30:24:
80:70:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:53 2025 by rpki-client