
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: NkDMcMJRCp+13oMxzyMC674zqgu5G3XoneCGITeTeDw=
Subject key identifier: 18:88:AC:BC:E9:62:96:48:0E:86:34:EF:A7:B8:E5:58:AA:34:94:F3
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 0199FDA1C116D523F7247E589D8ED78E6EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0D86
Signing time: Sun 19 Oct 2025 18:01:00 +0000
Manifest this update: Sun 19 Oct 2025 18:01:00 +0000
Manifest next update: Mon 20 Oct 2025 18:01:00 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: +h4gViu1Fiar9qkNzCLh6eNItYQYIK7AdlBhc6gSKmk=)
2: negj_8qldSprHD3F1eQcTwkIJOc.roa (hash: 5inaQlsg7taDD/vUiufDsWArj6aKqWfm3/zGXBynHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:c1:16:d5:23:f7:24:7e:58:9d:8e:d7:8e:6e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Oct 19 18:01:00 2025 GMT
Not After : Oct 20 18:01:00 2025 GMT
Subject: CN=1888acbce96296480e8634efa7b8e558aa3494f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:cb:06:fc:61:0b:2e:25:30:da:74:1e:bc:
0e:a3:a8:9e:93:b0:56:7b:3a:3e:e6:f9:14:4c:db:
1c:16:1e:32:c0:76:f0:79:7a:1a:49:12:9b:04:40:
3a:50:63:0d:da:da:01:e8:1f:d1:f8:e5:b3:1d:72:
73:cc:32:4c:36:45:25:48:02:34:e6:d0:15:25:a3:
52:b1:a7:d2:ce:6c:5d:79:1b:cd:0e:cf:e8:c9:87:
4b:46:b3:e6:80:cf:9d:08:2f:dd:83:22:fc:a3:dd:
e4:78:8c:02:23:17:93:40:fd:2e:6a:6f:b7:98:72:
e1:19:56:7e:ea:d6:34:dd:58:d5:f3:6c:1f:9c:d4:
8a:fe:6d:9f:c4:c3:5a:20:0b:ec:44:9b:22:dd:4b:
22:c5:54:83:2b:42:a0:b0:9b:24:40:c2:a5:2f:bf:
c7:62:59:71:af:c6:25:fb:5b:e5:e3:13:82:42:60:
bb:47:fc:db:33:ef:0b:de:dc:04:4e:7d:1b:6e:71:
0c:89:24:56:31:f3:25:b3:71:d1:21:df:54:87:45:
a9:21:8a:6a:db:80:64:a6:02:55:28:11:dd:97:34:
7d:73:0b:17:2d:be:32:b6:a6:d6:4a:e8:70:e4:bd:
58:bb:af:ff:d6:b0:87:24:12:42:64:2d:f9:3d:04:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:AC:BC:E9:62:96:48:0E:86:34:EF:A7:B8:E5:58:AA:34:94:F3
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:0d:e8:ea:88:44:70:bb:4c:46:ae:45:d7:50:85:3a:4e:
38:18:c9:7d:53:53:e3:b9:b6:ff:d9:d6:3d:8e:6c:ae:70:04:
8d:ae:25:d4:3d:8e:89:cb:60:ba:bc:01:6f:a3:79:40:6f:31:
4a:69:8d:b6:f3:6c:88:4e:99:88:ca:bf:8e:2a:39:c1:d3:86:
a4:d5:88:42:53:f2:8f:d3:8f:ad:d3:9f:a3:32:44:99:17:22:
9f:a4:6b:75:27:4a:11:35:fe:dd:45:e7:64:f5:61:1b:2f:e8:
71:c3:f4:59:c6:97:4e:b2:54:8e:64:b6:89:02:04:dc:28:cf:
68:87:1e:97:c4:47:83:39:2f:bc:28:26:f9:c9:c5:62:90:2b:
5c:17:f5:bb:ae:0f:67:f9:3f:6d:71:2d:05:5a:a5:4e:6b:96:
5b:d0:ff:c4:32:37:2a:d9:c1:78:69:f0:69:ad:ae:7a:fe:b2:
58:af:1c:72:5b:7b:ec:ef:43:18:de:92:b5:48:af:cb:27:97:
71:4a:66:23:dd:8e:7e:8d:50:3d:fc:26:c6:ee:67:17:1d:d7:
57:13:be:b0:db:3b:7e:65:44:66:47:77:cb:70:49:be:c2:5a:
08:45:65:6f:84:6c:06:90:77:a0:64:3f:9c:e9:6a:1e:25:78:
59:84:ef:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:37 2025 by rpki-client