Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: yjBfXfpo5CC/1EvKVdEdlz0IyMR+UYtydi8Msys2bso=
Subject key identifier: A8:0E:9B:F6:F6:99:4D:C9:CF:CB:B5:BA:A6:51:D2:1F:FC:1A:84:A8
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 0199FE104B64E3780BDB03086698556D0200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 20:01:44 +0000
Manifest this update: Sun 19 Oct 2025 20:01:44 +0000
Manifest next update: Mon 20 Oct 2025 20:01:44 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: 4Yeu93HhljtOK61CrodkkVrGZojsYza5vnTBYI/YQqw=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:4b:64:e3:78:0b:db:03:08:66:98:55:6d:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Oct 19 20:01:44 2025 GMT
Not After : Oct 20 20:01:44 2025 GMT
Subject: CN=a80e9bf6f6994dc9cfcbb5baa651d21ffc1a84a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:dc:50:c5:1e:2b:c8:b5:88:a1:18:33:23:
7c:5a:1f:a0:96:ca:b3:c7:b1:fd:67:94:db:4f:4f:
58:8c:e1:ae:f3:f0:e7:e4:12:39:21:a2:d4:8b:13:
7b:c1:29:4a:83:42:2f:d7:fa:7b:08:72:29:1b:2b:
be:56:64:31:8b:a6:3c:76:36:01:1f:fd:d8:ec:28:
b7:06:93:29:4d:dc:f6:17:74:0e:82:93:68:17:d4:
f1:ff:4d:1c:44:56:2e:3c:5e:e6:c1:94:5f:09:8e:
98:2a:56:d2:5a:89:45:d9:b3:39:8c:15:58:cc:3b:
2a:fa:2f:45:80:fe:d4:0a:f5:9d:a5:30:ac:fa:c0:
a1:62:30:e5:d5:db:18:8e:79:23:f3:0c:7a:54:9e:
15:c0:89:2c:eb:7a:2e:5b:08:ee:9a:1a:ba:c8:e0:
93:0f:e7:5d:c9:1c:69:86:4c:22:9d:3a:40:f1:e3:
48:71:ac:7c:a4:2c:db:95:fb:8c:f0:73:43:52:60:
58:9f:55:2d:9f:49:6d:08:e4:74:2b:54:eb:d2:3d:
5e:1f:4f:10:ce:f5:c5:47:b7:1d:38:13:e6:88:ab:
e5:70:42:91:3e:59:2f:9d:29:86:af:d8:72:0b:db:
a7:96:45:bd:bc:c8:7e:aa:d1:29:fd:e2:e9:98:77:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:9B:F6:F6:99:4D:C9:CF:CB:B5:BA:A6:51:D2:1F:FC:1A:84:A8
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:b7:d6:09:15:87:30:87:30:7a:1e:58:7a:60:5b:31:95:50:
89:e7:47:d2:1f:f9:52:1f:25:9f:c8:02:0c:79:c8:77:10:11:
c7:32:9e:9a:1d:6a:49:fe:1b:be:93:43:8e:ed:06:27:e6:80:
2c:db:3c:66:be:de:4e:09:62:1c:07:ff:28:dd:ef:7f:2f:bc:
81:65:44:f8:fc:43:a9:f1:c9:2e:a4:64:4f:50:42:73:25:1b:
06:8b:a2:f4:1e:43:09:f3:9f:ee:cb:33:f2:a7:76:8b:b5:39:
27:52:a3:db:7e:d5:37:50:da:f1:2a:57:08:7d:80:08:f9:f9:
80:de:ac:ff:6b:d3:08:d3:3c:18:d7:cf:59:7c:82:1f:99:25:
4c:15:cd:50:9b:72:d6:1f:e2:6b:5e:96:75:f2:8f:dc:4e:d7:
ad:b2:53:7b:ab:32:49:d1:d3:cc:07:28:46:d8:24:67:3c:ee:
18:8f:e3:a3:12:0e:28:7d:f3:fe:47:8f:d2:89:4c:47:91:aa:
34:da:39:29:45:9c:ff:18:2d:37:b0:91:ee:73:4c:44:a2:f9:
b9:5d:0f:52:d0:f0:e2:6b:7a:15:e6:fe:b3:88:52:31:ff:f5:
f3:33:63:22:4b:6a:3b:9f:d1:91:3a:ed:25:92:6e:9f:d8:77:
15:0e:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:14 2025 by rpki-client