Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: Gc1p5Bk23xGVhAH26muvhI2avgvP0MOp+BFekbdmoIk=
Subject key identifier: A8:F8:C4:C8:40:63:BC:12:ED:A9:0D:3F:A3:36:B3:AF:7A:34:1F:C1
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 0199FC21C7420D9BAA5FABF8E19F987595D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: zqPpRTpuDwJAKOa/M1bsxCtYn8gbXra9H0LOekrJ9oo=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c7:42:0d:9b:aa:5f:ab:f8:e1:9f:98:75:95:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=a8f8c4c84063bc12eda90d3fa336b3af7a341fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:42:96:9c:b3:68:b1:27:55:3b:56:62:04:7e:
e9:83:cd:a8:a8:93:9b:1f:e1:e0:f0:90:71:b7:85:
19:b2:51:c6:7b:f6:4e:df:21:f3:b7:3b:5e:fd:75:
57:f4:9f:d8:eb:fa:9a:81:1b:40:25:e5:fa:a2:83:
53:85:c9:c8:aa:0b:91:2e:5d:ce:b6:7b:e9:53:aa:
24:bb:f2:49:de:72:79:62:78:8d:7b:ff:8a:e5:49:
e4:ca:fc:de:3a:36:e2:b6:6d:12:bd:4d:df:9d:0f:
8f:0c:f9:d0:3d:ea:9e:b3:23:44:87:9c:8a:36:19:
97:1f:a6:42:e4:d4:c8:60:ae:b9:81:85:ea:3e:06:
3e:e2:ea:c2:ca:3b:79:90:02:06:6e:24:47:83:b2:
fe:a0:21:0b:c9:06:46:d3:f4:8a:a9:7f:ac:ba:b7:
5b:ef:28:c4:2d:ba:2b:a3:8d:ee:87:d6:e6:a7:8a:
5d:8d:25:53:c7:9e:d9:01:0b:3c:de:ed:6e:b6:19:
84:1e:45:d3:dc:89:50:65:c3:f1:c4:ea:65:3f:d7:
9d:8b:2a:17:a1:77:2b:1b:28:b0:bd:80:bc:2d:b9:
b7:e7:c4:2b:f6:79:68:f2:c4:bc:5b:01:c8:c8:f1:
49:b3:16:85:3d:d3:14:7d:cb:1b:99:59:84:65:4c:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F8:C4:C8:40:63:BC:12:ED:A9:0D:3F:A3:36:B3:AF:7A:34:1F:C1
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bc:77:e7:03:69:b5:6b:87:eb:35:a0:1f:20:3e:82:32:f7:
fd:88:60:c3:35:87:0d:53:9d:68:51:d8:fe:c5:51:89:67:fe:
74:ca:fc:0b:38:21:1c:0c:b5:f1:2b:7b:a9:ac:93:47:b8:a5:
d5:a3:bb:a7:1f:c8:ed:14:42:9e:07:35:be:99:73:74:43:68:
78:e2:e9:43:25:fb:65:2f:36:c2:0a:7f:b8:5b:47:b6:f9:d5:
5f:2d:07:d9:e7:c6:f7:31:56:82:c5:d4:c9:b8:90:0a:72:01:
47:69:6b:cf:83:20:c0:d7:6a:56:c3:10:f2:77:2d:f5:56:41:
1a:60:24:5b:47:a1:c2:20:67:4c:a7:ab:f1:f7:aa:c9:18:bb:
28:db:09:e0:e0:1a:57:31:d9:d4:70:56:d2:36:6e:ef:c5:e9:
91:50:a9:6c:32:e9:fe:bb:5b:12:bd:79:34:61:4d:20:e6:1c:
d3:0f:c6:e9:e5:01:ec:97:42:29:36:09:c9:c5:00:af:88:e8:
04:68:c0:ea:e2:98:53:81:72:e4:41:59:ce:d1:dd:f4:18:c9:
a0:24:9e:51:ee:ff:7c:ce:65:38:cd:09:98:ef:e4:af:32:e2:
57:8a:61:1a:9e:18:44:f1:4c:bd:ac:cc:2b:db:00:c2:10:3c:
2a:d6:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:06 2025 by rpki-client