Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: +1ONSOKjsntfgfhGUQeGOa0AEnHpEDJc/BkqWH9u4aY=
Subject key identifier: BE:1B:A8:2E:2D:F8:C4:8F:34:D5:CC:4D:42:02:82:9E:17:AD:AA:1C
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 0199FD6B01726242BEB6C062BCFD38D5A8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:12 +0000
Manifest this update: Sun 19 Oct 2025 17:01:12 +0000
Manifest next update: Mon 20 Oct 2025 17:01:12 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: sGau6sALWpSRVphINet29DBkM8oY5tjFSa3tDsk5O+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:01:72:62:42:be:b6:c0:62:bc:fd:38:d5:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Oct 19 17:01:12 2025 GMT
Not After : Oct 20 17:01:12 2025 GMT
Subject: CN=be1ba82e2df8c48f34d5cc4d4202829e17adaa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:10:51:a2:96:37:a4:ff:61:0f:8d:fc:4a:
25:57:9f:c9:b0:a0:d9:83:5e:fe:e9:dc:83:9e:fc:
c7:1a:f6:fd:63:3b:4d:e7:70:5a:e2:0a:49:cd:cc:
2c:ea:85:91:0f:c1:a0:b6:2e:db:1d:19:b0:78:39:
22:44:4b:e0:65:07:6d:9b:2f:1e:aa:ea:2a:49:7f:
99:35:c5:54:69:ea:76:1a:4c:9d:a9:09:4e:8a:3d:
bc:ce:1f:51:f8:37:b0:d4:55:73:07:2c:de:d0:31:
6f:4a:91:b8:24:15:b0:32:cd:6d:32:0a:fa:af:26:
b3:c0:10:57:be:d7:43:da:d6:05:54:07:9b:d2:2e:
00:28:d0:19:7b:4a:dd:f1:21:bb:0a:2a:61:4e:0a:
c5:88:e2:36:15:f7:d6:c0:1c:f0:67:39:5d:44:d9:
fc:e9:b1:2c:55:0b:d6:71:0b:4e:88:bf:c6:6f:34:
cc:e2:0c:78:62:a0:df:61:89:90:3b:d3:e9:b3:4a:
e8:33:40:f1:f1:f4:ac:b4:e0:30:85:59:e1:a7:1d:
b6:aa:b6:49:fb:1e:2b:87:79:5f:52:f4:75:d8:83:
4f:26:4c:5f:eb:b8:b4:12:f2:8d:60:22:b5:95:1c:
ad:9d:3c:49:b1:93:e2:6b:60:5b:ef:0a:f8:c0:a4:
9b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1B:A8:2E:2D:F8:C4:8F:34:D5:CC:4D:42:02:82:9E:17:AD:AA:1C
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:83:5b:69:8b:00:cb:5a:f6:b7:69:4f:ac:d3:1c:87:df:ec:
3e:49:95:96:d2:92:b7:98:2e:33:88:61:b0:bb:5a:d0:2d:ff:
56:31:b3:f1:8d:7b:51:ee:e6:6d:a4:97:e7:43:8e:2f:5a:4d:
cf:d0:50:31:c7:0b:32:13:f2:47:2d:70:2c:91:13:7a:be:d8:
53:dc:4b:36:e6:81:26:9c:f5:3e:7c:ad:77:b9:5d:fe:6a:4a:
6d:91:fa:32:5d:b6:92:59:06:42:a4:66:ec:0a:be:c9:0e:00:
16:d9:66:78:a4:44:bd:4f:14:6d:2d:1b:14:69:4d:9d:81:66:
6d:37:88:9d:87:32:aa:57:28:6a:d6:b4:2a:8e:70:22:87:95:
66:29:4f:1d:9a:ec:90:24:23:b1:df:4b:18:21:b3:14:d5:b7:
cc:80:8a:dc:68:a8:c1:73:1e:90:a0:49:b8:0f:3b:a2:47:12:
4e:9f:02:47:34:93:4d:cf:99:c0:e2:80:d5:c1:0c:7d:75:ec:
e7:88:f3:e6:4f:ee:c0:96:35:cf:83:fc:5e:e3:54:1c:a3:80:
0c:fd:6a:ec:d6:27:70:34:a3:21:a1:ab:bc:d4:5d:be:83:c9:
0e:43:2a:37:0d:c7:59:37:45:58:7f:5c:78:95:18:2c:f5:27:
bc:65:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:52 2025 by rpki-client