Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File: 96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier: EQgXAmLtTDZyj/uVkHzDn9f5VFl15uVZKbJZUM0gjr4=
Subject key identifier: 16:81:25:CB:AD:F1:4A:7F:34:BA:19:9B:3F:DC:7F:5D:03:53:99:69
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial: 0199FBEB11DFE08AA42CC369D263EC6A3C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number: 12E1
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: sFacX3ELC0uNNB68wLYerHT7omwVuryHfOqL3SoTuYQ=)
3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:11:df:e0:8a:a4:2c:c3:69:d2:63:ec:6a:3c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=168125cbadf14a7f34ba199b3fdc7f5d03539969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:68:72:e5:10:25:61:4e:3a:9a:d1:3f:f1:
b7:b9:e4:e9:60:5d:43:a3:e2:84:d8:1d:77:36:ff:
32:8b:ad:ee:71:13:f0:50:1f:fa:22:df:8d:59:8a:
29:db:67:af:7a:79:8a:d3:e3:71:9e:4e:60:dd:7e:
99:0b:8a:dc:e5:7e:f2:c6:32:f0:56:d2:87:63:3c:
04:c6:64:30:67:e5:e2:c2:ee:4a:46:0e:8e:d4:da:
d0:10:39:0d:e7:d5:00:7c:71:63:c9:c9:90:8c:75:
fc:58:9c:d3:ad:31:34:27:91:f5:cd:cf:56:17:fb:
a0:10:f5:ae:d6:15:bf:ec:2d:36:fd:25:80:f6:a4:
81:ae:70:75:96:2a:ca:72:5b:d8:f5:0c:90:f0:be:
0c:1d:1a:d5:35:38:18:46:29:e8:7b:70:38:37:b1:
21:4f:49:0e:73:e7:48:89:b1:45:0e:62:94:64:0a:
e3:7e:8f:19:e4:67:ea:5d:55:87:b0:3f:e5:ef:c6:
5d:cb:2f:fb:a3:95:25:0e:69:a1:d0:e3:44:7b:81:
3c:65:70:62:50:da:8f:e5:4f:80:e2:88:1a:a8:42:
77:d4:4b:4e:0e:66:ba:33:26:41:75:ce:7d:b0:c4:
61:00:af:d8:87:cf:7d:bd:2a:97:31:17:a1:2e:33:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:25:CB:AD:F1:4A:7F:34:BA:19:9B:3F:DC:7F:5D:03:53:99:69
X509v3 Authority Key Identifier:
keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bd:1a:f5:21:89:27:13:38:24:03:7e:22:42:de:7b:a2:8d:
cb:5e:2a:2b:bb:7e:54:20:49:da:c4:52:15:a1:84:10:44:f5:
d9:dd:31:2d:25:f3:d6:d7:f7:74:64:26:c4:e3:ec:55:71:59:
27:9e:a1:0c:eb:6a:ec:a2:93:bf:31:1b:f3:74:a6:fa:1f:4a:
57:75:bf:1d:5a:15:c3:14:02:0d:d4:fa:f4:fe:25:df:43:98:
fa:e6:a8:5e:f1:f2:da:99:9e:65:da:74:25:f4:33:93:31:00:
5f:3e:ce:42:53:c9:d0:da:eb:83:7f:c9:80:2a:fd:3d:25:ea:
0f:ab:2b:92:9e:6d:e5:c9:d9:19:f8:aa:b7:f7:b5:b6:b1:c3:
4c:b9:d7:5f:f0:b2:98:fd:e7:13:3d:ec:6a:2e:1d:35:8a:44:
e6:ee:ff:aa:5b:11:2f:74:b5:60:9d:82:82:fe:83:03:0e:bc:
a5:06:fb:3e:be:80:a4:22:47:18:bd:80:7b:25:c1:d7:fc:1b:
b5:b4:6a:eb:eb:40:3a:5f:36:d0:ad:7b:b6:b2:65:f3:6e:59:
30:90:f5:c5:18:3f:5e:2f:a9:e9:d6:ff:f1:95:f4:9e:14:80:
96:9a:98:97:b0:b4:e5:39:1a:2b:ec:9b:49:2e:3e:b9:13:6f:
e7:cc:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:13 2025 by rpki-client