Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: cFJDN+PDQluEr1Kkk948IqNzSs3XhujiwNc1EtgBfhA=
Subject key identifier: A6:4D:B8:84:AF:84:F3:5F:B8:47:D2:44:39:33:C8:78:CE:39:CF:B3
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 0199FC5896B0AD0A95001824B5E97617DE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: nASsqoR7Y8wyBeSEG+LoxUsufLdo9quJw0yN8zqtSQc=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:96:b0:ad:0a:95:00:18:24:b5:e9:76:17:de:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=a64db884af84f35fb847d2443933c878ce39cfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:26:03:7b:9c:e8:ad:86:b0:58:57:6a:0e:18:
73:f6:25:2f:7a:17:f8:7d:ee:c0:fd:a8:c0:96:db:
87:76:27:eb:63:a3:0c:bb:c9:fc:54:35:61:71:b7:
2e:8a:c3:fa:76:38:08:9d:68:09:49:ee:d7:db:67:
6a:11:4d:e8:03:f1:be:e4:29:ce:31:37:8b:58:89:
ef:0f:ad:86:05:c2:fc:35:74:58:56:5c:f9:c8:1a:
cc:e5:7c:10:18:5c:82:44:3e:91:e5:67:21:de:63:
e4:c3:37:9e:cc:c8:4c:23:dc:39:4c:99:06:41:26:
4d:a3:8b:e7:78:b8:54:8c:32:48:8b:8c:0e:41:16:
a0:f9:ce:ed:04:53:8a:99:0b:ac:35:e4:53:24:b7:
5d:4d:84:e5:40:74:dc:72:43:df:34:8c:bc:77:7d:
ee:88:9e:38:cd:b6:7e:8a:1d:2c:bf:a7:6e:eb:40:
e2:45:36:c6:65:6e:8a:69:1f:46:ee:9f:5a:1d:06:
73:dd:66:06:64:65:54:b2:3b:59:22:97:72:90:cf:
cb:f5:70:b0:3c:e0:5b:cc:27:9d:69:af:4d:3a:00:
31:4b:8e:99:69:20:02:bb:b6:ef:11:24:a0:b0:2b:
a9:af:7a:97:09:6d:4f:41:0a:23:21:f6:ce:f7:48:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:B8:84:AF:84:F3:5F:B8:47:D2:44:39:33:C8:78:CE:39:CF:B3
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8b:53:bc:cf:79:3e:08:70:a3:52:a9:dc:ca:c4:a0:5f:37:
0d:ec:ad:e0:2d:ac:b4:86:cd:22:86:37:6f:36:6a:83:ed:c9:
8b:ce:0b:49:a2:43:1a:a9:40:da:76:a1:bb:36:74:3a:fc:6a:
52:bc:f3:d3:57:51:6a:b5:ac:94:03:4b:c7:ce:11:cb:44:41:
c6:4b:70:9b:8e:9c:4b:fc:65:1d:a2:12:69:68:76:ae:8d:5d:
e0:5e:9b:4e:9c:fd:bd:69:4c:3f:1c:7d:06:45:6a:79:a1:5f:
33:9d:40:45:3d:49:fb:71:70:07:e6:81:a8:75:cb:2e:ff:7c:
38:58:13:0e:af:bf:50:b5:c3:1f:70:76:5e:23:74:84:97:96:
2c:49:8a:ba:88:55:83:4b:6e:15:ec:99:72:26:af:31:7e:fb:
81:2a:6c:7f:00:aa:c3:3a:d8:47:25:4d:c7:0d:85:97:f2:a0:
ed:fb:c0:46:2d:e3:b2:be:ae:8c:34:07:1e:36:68:10:6d:cb:
9d:3d:e8:a1:97:06:ad:3e:45:e7:cc:a3:2d:89:cb:bc:bf:aa:
60:72:84:72:09:66:e5:46:02:d6:b5:59:a4:d7:af:1a:13:9d:
26:1e:58:cb:c4:24:88:ac:82:9b:09:98:b8:fc:d8:dc:2d:b2:
4b:ab:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:51 2025 by rpki-client