
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: WWnQkXrWB/UopeMtWxq+GfoiyhXfgG+FqhR4TJFjXm0=
Subject key identifier: 51:FB:52:71:D1:9B:8C:18:C0:28:FC:90:16:E3:11:40:0C:E6:EF:97
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 0199FC583E54A5CAA7F82DD1787AAF93DD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: FDxnjZMy7Ej6GmM00mbJTDdICRVA9QfI1WkStgiZVhw=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3e:54:a5:ca:a7:f8:2d:d1:78:7a:af:93:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=51fb5271d19b8c18c028fc9016e311400ce6ef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:d4:f0:70:f9:0b:77:53:ec:d9:a1:45:27:
85:94:b6:0d:a4:30:af:72:d2:32:d6:99:be:64:62:
a9:9f:30:aa:9c:d4:88:96:8d:33:e2:c4:54:31:aa:
8a:2f:6a:ca:0f:48:44:77:aa:33:69:cd:d3:20:d7:
fd:92:cb:df:a6:7e:29:98:b8:a9:58:fd:9b:d9:f5:
68:d9:b9:6d:72:2b:f7:ee:75:1b:40:fc:1e:0f:eb:
a2:61:d9:27:6e:8a:d7:fc:56:0f:a9:f5:e5:b9:f2:
2f:43:48:27:bd:f3:c8:f1:70:05:a9:a4:c5:d9:92:
80:35:d4:32:28:81:d9:24:10:76:eb:06:08:7c:2a:
a7:1d:d2:bd:b1:e7:c9:0c:0e:8e:c8:a0:3a:3f:15:
8b:f3:b1:22:f3:19:3e:14:d5:8e:24:ee:55:10:33:
06:22:26:87:48:23:cc:d5:c1:dd:fd:36:13:21:7b:
3e:98:93:ca:04:cd:16:81:98:7c:b3:f0:f6:f5:43:
25:e6:23:8b:c9:01:d4:dd:7d:9d:2c:a2:42:f6:38:
c2:23:7d:fa:6c:82:16:25:9c:18:d4:10:82:a6:07:
67:2e:c4:24:9d:47:c7:aa:78:2a:04:78:e3:ef:03:
2c:3d:27:93:55:83:05:a0:94:81:57:11:83:0b:02:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:52:71:D1:9B:8C:18:C0:28:FC:90:16:E3:11:40:0C:E6:EF:97
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d2:eb:d9:d2:df:87:58:e1:37:4e:cf:d6:6a:3c:b8:b3:28:
a9:50:83:11:dc:96:de:77:8b:21:fd:2f:a6:82:17:37:ce:de:
8d:0f:a1:54:bb:25:be:4a:1e:c0:eb:41:c1:7d:35:dd:c2:db:
99:02:ed:e6:95:f3:a5:02:77:3e:e7:6d:e3:c6:c8:2e:5a:30:
e7:f5:bf:e7:2a:c4:f8:95:10:0f:10:9a:7d:cb:bf:52:0a:5d:
83:b8:e0:91:8e:f1:7a:fb:41:9e:d0:bc:9b:f2:ac:a7:b5:82:
14:e2:e6:ef:dc:e2:0e:78:34:56:f7:36:a4:a2:96:eb:17:3c:
46:d2:dd:44:a6:11:ec:60:9c:db:c3:7f:f9:88:d8:40:5a:48:
39:52:7f:d1:91:83:cd:0e:05:97:05:ad:93:13:fa:cd:48:09:
51:c4:40:32:87:b8:33:8e:5d:ca:99:06:e1:f3:75:1e:70:10:
e1:0b:65:f6:80:fa:ad:97:51:7a:f3:99:a2:9e:66:7c:3d:60:
b2:4c:f0:ff:48:ec:eb:41:2e:5f:ec:01:b4:85:10:a5:70:aa:
cb:3b:b3:13:5e:a7:cb:18:27:eb:fa:e9:c6:f8:76:b3:03:16:
d6:ed:c9:74:ce:67:52:68:81:02:6a:b5:a1:9f:cf:90:16:50:
3f:e8:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:33 2025 by rpki-client