Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: B9JrckmABBDeWpWOogdGXi/RzYkTvYLW1aGJt+8SXJ4=
Subject key identifier: 23:20:02:B7:8D:B2:D2:79:DC:F0:28:DC:62:C0:B4:52:24:5D:36:E3
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 0199FB46044F149807482717438611C85FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: Ei+k/z/oewcbeH+O1x9wVKkELJJQKdVRpPUkDyIa5FE=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:04:4f:14:98:07:48:27:17:43:86:11:c8:5f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=232002b78db2d279dcf028dc62c0b452245d36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:42:88:d3:ad:43:e3:73:97:d0:bc:c1:ff:
cc:27:c3:b5:d5:80:89:b5:f2:b8:27:76:11:9e:ba:
28:5f:6e:30:6c:0d:2d:a1:5d:c1:6c:ec:c9:4b:e7:
30:a9:8d:29:be:2c:dc:c1:19:53:84:f3:ef:37:eb:
22:cb:76:db:0b:3c:4c:5f:cf:3f:19:90:8e:64:e8:
58:d8:1f:19:c4:8f:15:00:04:33:b6:be:aa:c9:92:
40:d8:d1:8c:2a:18:3b:f5:01:6d:ac:ce:f0:ea:f8:
fa:f0:22:54:7e:24:16:f1:f3:d8:0f:51:bb:89:2a:
c6:b0:f2:60:f4:0b:5a:46:7d:1d:a2:8f:be:6b:55:
87:bf:46:7b:75:a4:41:d9:50:01:27:dd:ed:21:48:
8a:fd:a0:a5:d1:3d:34:16:af:62:4f:20:eb:8a:31:
77:60:b5:b2:52:e7:29:10:ec:0d:42:00:79:6a:51:
bf:61:31:7f:79:a5:a2:2b:39:33:a8:75:9a:27:1b:
6e:5e:ce:65:96:3f:68:f6:7e:51:fa:a6:93:29:a8:
35:2c:10:41:94:bd:48:8f:81:3f:43:17:19:22:7c:
3f:b4:b7:48:43:81:ef:99:2b:59:e8:f3:48:bc:15:
cc:03:8f:53:b3:ab:54:2a:6b:b3:4d:3e:e4:33:04:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:02:B7:8D:B2:D2:79:DC:F0:28:DC:62:C0:B4:52:24:5D:36:E3
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:12:1f:54:90:4e:a9:e3:5a:24:c6:3e:a8:de:a2:aa:55:a7:
79:5e:6d:fb:83:f7:9a:f3:47:29:6b:9d:b3:05:7e:6c:30:b7:
2e:92:0a:03:ce:fd:a4:1d:3b:b3:64:2d:fe:e1:dd:8b:5d:1a:
1c:2e:60:0a:22:7a:11:10:e4:cb:77:15:fa:f2:e1:ed:5e:d5:
0f:df:80:c9:ef:61:88:e7:66:d8:4e:6b:29:b5:af:47:43:ce:
c5:33:ad:0a:86:c9:7c:d2:5d:0b:67:00:4b:13:cc:43:b7:d2:
2c:ee:98:fe:e9:e4:0d:a9:a1:b9:ba:f2:15:1f:19:bc:ae:c3:
92:26:41:cf:5a:be:cb:6f:c8:28:bc:4d:7f:f4:15:90:9a:38:
ab:a5:c9:ed:bd:e0:82:11:a6:9f:4b:45:90:2b:1c:b2:93:2f:
f8:86:83:38:cb:85:d3:56:5f:e0:d1:07:7b:eb:66:ed:b9:62:
25:92:5d:a8:e0:81:0f:3f:9c:61:3c:5d:d6:51:21:36:ce:3e:
0c:3c:c3:75:d4:82:49:6c:9b:44:48:48:2c:66:28:29:cc:ce:
ce:27:32:e1:93:d3:9f:00:f9:b0:33:15:65:35:26:29:6c:93:
30:9d:05:e7:29:42:f2:d6:ac:8f:ab:05:64:eb:e1:38:92:d4:
aa:b3:4f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:31 2025 by rpki-client