Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: hDSriUduyurz0UCZrpFT6h5vVNBoejecvAICvof8pqY=
Subject key identifier: C6:DE:23:FF:60:89:9D:46:70:E7:45:9A:31:E9:E2:24:45:55:74:5A
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 0199FCC6038F04BBEC0F766C5251816027C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: naOxlJw6lMz3Q1Q59CdgIdiQ+nmcdfglCcP4an92YqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:03:8f:04:bb:ec:0f:76:6c:52:51:81:60:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=c6de23ff60899d4670e7459a31e9e2244555745a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:da:d5:52:45:1f:29:d5:37:02:5a:2c:e6:
60:37:4e:e7:87:fa:d3:ef:18:56:81:0a:f7:b7:1c:
c6:80:4e:e3:fd:30:b6:33:9a:25:52:c3:23:75:f4:
bb:ec:6f:7e:c4:4f:df:93:11:63:1c:ce:4a:1a:a5:
fd:12:f0:a6:16:a0:41:08:7b:4d:de:25:af:3d:50:
97:54:2f:dd:05:3e:ff:e5:fe:68:9f:5b:5d:f0:d6:
c5:c6:10:1b:52:a6:84:c7:b9:ee:6d:0f:10:f5:97:
6d:9c:38:8d:55:14:1d:91:fb:6f:3a:a0:73:eb:2e:
45:dd:c7:7c:1c:4f:f1:71:fe:9e:8e:7e:02:cf:57:
d0:c4:df:8b:d8:8c:20:6e:e6:94:42:de:b0:12:b1:
c0:d0:b5:01:f3:32:de:1f:38:3b:f6:7c:c6:ee:30:
d0:1b:5b:85:ff:71:3d:62:74:c1:0b:53:0c:58:d6:
06:5f:60:9c:22:ec:97:d1:b8:b1:a1:71:df:0c:f1:
77:36:2d:82:b1:04:03:5e:fd:07:15:3c:db:6b:b3:
07:e8:65:30:41:a5:38:f0:f3:55:51:da:60:e3:b1:
18:55:4b:44:68:f9:2b:49:ff:41:2a:ae:6e:b2:ca:
53:d0:f5:94:d5:dd:9d:ef:52:48:97:12:a1:6c:96:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:23:FF:60:89:9D:46:70:E7:45:9A:31:E9:E2:24:45:55:74:5A
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5a:88:af:a5:6f:29:06:66:5a:82:88:b6:7e:a7:9f:fa:3d:
31:21:65:6a:7f:a2:da:3a:dd:4d:2a:03:0a:2d:56:70:4d:db:
fd:54:cb:28:20:f1:c6:60:c0:c4:97:f4:ac:37:af:58:74:a3:
84:32:bd:f8:e8:fa:24:1f:4c:c3:9e:3d:4b:10:0b:a9:5c:fa:
a4:3f:fa:d9:c1:47:6c:da:19:b6:a7:47:f8:2b:af:d0:53:46:
0c:a1:79:5a:26:33:5f:94:0d:8d:f2:e3:33:cb:93:6a:74:f1:
7a:7e:cb:fc:4c:28:6d:13:e3:6f:d6:a5:cf:7e:a5:16:0c:d1:
45:6e:0c:a0:64:e8:90:39:df:32:ec:39:eb:d9:bc:57:04:65:
05:e2:d0:48:e6:66:09:b0:39:f5:88:04:cc:24:84:30:72:78:
16:23:9d:53:ed:57:1c:7c:a4:22:a4:01:53:e0:a5:2f:99:1c:
dd:1b:c7:33:4d:48:a2:00:1e:a9:bd:35:58:85:23:40:a9:eb:
a4:d1:61:0d:87:d5:90:d5:9a:83:13:6f:b5:b4:82:a5:d0:de:
84:ce:5f:9e:d2:da:c2:dc:18:b6:ae:08:cc:8c:a2:30:9a:72:
ac:d8:4b:b3:5c:c0:ed:36:67:a6:2e:31:c8:c3:fb:28:cc:42:
f1:5a:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:53 2025 by rpki-client