Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: uW4u+tyj+pcTi2YVoqz64Y5yDwYb2p+aryBmyqDWj5c=
Subject key identifier: CC:FA:66:87:2B:87:BA:EE:79:88:B8:44:A1:49:09:75:6F:F6:32:9D
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 0199FCC67CE2B41033E7DDFDB3CBD8F9AB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: 9aYlF771TW8/vE2zNM1FCloXLYH17W9uHOmC2muFvEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7c:e2:b4:10:33:e7:dd:fd:b3:cb:d8:f9:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=ccfa66872b87baee7988b844a14909756ff6329d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:38:d4:17:db:71:25:d2:b2:6e:a3:d0:d9:
fb:14:96:01:c6:2a:1e:04:2f:69:b9:ad:7c:b9:08:
ef:e9:f7:09:f6:f2:cb:d9:9e:75:71:71:91:7a:12:
38:58:59:63:1d:07:3b:ba:0e:6f:80:06:41:a6:25:
41:30:7f:97:5e:15:24:e7:33:b3:5e:65:3f:10:7a:
27:e2:ea:71:85:cf:d6:86:53:22:8f:ab:45:d1:1d:
c7:57:6b:fe:48:85:59:69:1c:4f:c6:e3:d4:24:15:
0a:79:0f:d6:cb:14:d9:fe:33:95:18:9a:1e:67:eb:
3e:8f:b1:63:61:c7:42:37:e1:58:e8:aa:65:1c:71:
2d:b5:8a:73:f8:f5:fa:34:22:5a:2c:f0:99:73:a7:
38:07:7c:36:01:96:8b:0d:9f:2f:d8:d5:15:8c:dd:
b9:99:2c:50:4f:a9:0d:5e:4a:bb:7b:9d:9a:1b:80:
10:41:47:99:03:65:e8:04:c2:6b:e7:f1:e7:6e:3b:
02:93:d0:3e:fa:18:50:0a:12:ce:80:6d:43:cc:5d:
56:3d:65:0a:9e:eb:79:71:8f:85:00:78:d0:59:3b:
2d:f0:a4:c5:d5:2b:f4:75:15:4e:59:48:94:77:dd:
f3:b2:ab:59:5d:42:dc:49:cf:d1:fb:75:21:37:3d:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:66:87:2B:87:BA:EE:79:88:B8:44:A1:49:09:75:6F:F6:32:9D
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:b4:03:90:be:55:21:5f:2b:02:af:ee:8f:0f:54:68:99:
41:ab:78:e7:b0:37:fa:51:7c:f7:10:e0:0b:cb:fd:8b:4e:9a:
a6:5e:f9:5f:ed:c7:e6:4f:e8:c4:71:5c:2b:d5:5f:60:de:68:
55:81:ac:4d:19:96:a3:cf:c7:a0:f9:4c:31:27:f8:01:dc:3e:
18:3f:67:1f:52:41:d6:e9:43:e7:3d:d0:b0:91:8d:95:05:1a:
60:cb:8f:56:2e:eb:8b:c4:1b:8b:4e:68:ee:5c:ad:6f:6d:26:
84:49:e8:eb:47:e7:f9:eb:d5:75:44:ba:34:8a:cc:73:74:41:
bc:f1:a7:66:e4:ad:4d:dc:e3:bf:f2:a5:61:8a:98:70:cd:62:
ee:8d:f0:8f:c5:94:e1:70:1b:a9:8c:1b:ff:71:d3:28:15:ba:
db:f6:df:25:56:a8:a8:dc:5c:30:35:98:74:1b:bb:ee:ae:1a:
e3:dd:f8:48:17:b5:a8:06:be:14:cb:ad:08:3c:d6:f5:67:51:
91:ba:d6:77:c6:b3:98:54:b8:5a:a9:b6:47:58:2b:5a:df:a0:
0f:9a:07:bb:5b:7a:c9:d0:c4:b5:01:18:3e:a7:07:b4:ac:d4:
84:72:34:7f:93:4e:cf:08:b8:17:42:a4:c6:48:3a:64:c1:fe:
88:59:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:05 2025 by rpki-client