Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: rnZYNhpoezOfkQuG6bG67le64rTnJmgvcGuXaL4wB6Q=
Subject key identifier: 8D:C4:BB:17:D8:67:3E:7A:C7:0D:88:F5:56:FC:32:1E:C1:D9:CC:FF
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0199FCFDA358D8BF8F6E044775E6E1D1BA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: qLlTpwOsyIMZ/bF3cZ1kxYU1qh0yeHMq4+MNceRI1xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a3:58:d8:bf:8f:6e:04:47:75:e6:e1:d1:ba:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=8dc4bb17d8673e7ac70d88f556fc321ec1d9ccff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:ef:d0:dd:15:63:0f:57:55:fb:0d:f0:62:
4f:d1:29:9e:6b:1d:73:b1:99:e8:23:2d:cf:02:9b:
f5:4e:4a:d0:47:5a:ae:c6:36:df:75:25:53:d2:ac:
c1:19:83:50:16:f2:bd:c0:6c:2d:c3:08:49:62:91:
02:d8:db:b6:72:bc:fb:ab:95:c3:68:fc:bd:25:5e:
a0:23:42:08:4f:07:76:44:6f:8e:de:4e:d5:96:93:
5d:b7:ec:df:8e:cc:7a:15:74:26:fd:76:54:44:0d:
49:4c:90:21:47:bb:83:3a:1f:dd:cd:3e:34:36:96:
1b:7d:52:47:0f:68:3c:47:2e:e9:19:fc:62:9f:aa:
f3:51:2e:cf:70:16:56:cb:62:1a:86:90:1b:c3:ea:
b0:22:b0:46:7d:65:11:19:57:ac:58:74:b5:08:55:
3d:e2:09:ea:7c:57:f3:fd:63:0f:9c:51:f8:44:f6:
17:8d:d6:cc:db:61:5f:6a:86:fa:ef:ea:a6:09:90:
0e:e5:4d:68:91:95:99:b8:c2:81:dc:20:b1:81:7c:
6e:9a:54:e7:1b:7b:e1:1a:a0:47:68:c9:8f:6b:5b:
17:08:40:06:5f:29:d8:cb:80:be:4d:4c:7b:52:20:
41:4d:1b:04:f9:ce:a6:56:92:7f:ed:bd:45:57:21:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C4:BB:17:D8:67:3E:7A:C7:0D:88:F5:56:FC:32:1E:C1:D9:CC:FF
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:21:88:29:ed:f7:1b:30:77:f1:47:68:91:56:9b:76:62:a6:
2f:a1:e5:15:4f:29:8e:da:8f:e4:f3:72:99:ce:d6:60:49:78:
32:81:84:9a:e9:88:c8:36:43:be:7d:6f:95:3f:7a:51:bf:7d:
da:61:fa:2d:13:56:67:56:7f:c6:68:ee:91:68:c7:5d:ec:3f:
90:c9:09:d3:48:1a:07:c5:2d:13:5f:7b:a8:9a:2d:f4:42:fb:
e0:3d:a0:06:7c:3d:0a:a3:19:dc:8b:e8:5e:a7:3b:6b:d9:ab:
1d:72:1f:bf:10:93:af:92:4b:20:a3:b9:1f:20:55:db:a3:3a:
49:d9:e0:fc:24:63:28:48:ff:b3:ac:95:fe:a8:24:f7:5b:f5:
fc:b5:b3:65:d0:7b:ad:d1:d9:8d:8e:84:e5:93:86:ae:80:45:
f3:72:17:d9:d9:53:f2:ca:2b:bc:0b:45:3e:7a:21:76:07:48:
e7:be:ee:5e:ee:b1:50:2c:26:ef:a2:16:1f:09:e8:28:43:8b:
f6:b8:48:3c:ee:0e:57:85:88:1b:9a:08:5f:f3:5b:82:2a:57:
cc:29:1a:f6:84:78:28:2c:43:4a:e2:61:3f:aa:73:4a:cb:a4:
e7:08:52:2f:9b:b9:89:35:e0:01:50:a5:35:4f:dd:85:98:43:
8c:73:91:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:13 2025 by rpki-client