Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: K+1xtbNyE1pndCwnhxQEsrDz+QV3jecHAcbpMvInwmY=
Subject key identifier: FD:AD:46:36:A7:85:3B:9C:71:35:FE:BC:90:02:A2:A1:9A:A5:E9:E0
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0199FC8F8A0A869486D15B75C02578A59003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: T5Y8EpkKeGetNi2zzo4rltFiFJA.roa (hash: s9NKmZqIE9A+OEbtw2wi/j7clLv1bNESgqd0VT1/y7w=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: Yh/LftzN+OBs83gPWDFz0NAJq3LJ2n91qgiZqpoOUqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:0a:86:94:86:d1:5b:75:c0:25:78:a5:90:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=fdad4636a7853b9c7135febc9002a2a19aa5e9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:3f:b7:62:39:88:c0:95:a3:48:1f:15:95:
e9:72:c7:52:c5:76:08:7b:94:e0:c3:d3:85:fc:83:
7e:9b:e0:8d:2d:5a:f7:4b:e8:1c:a9:75:c5:1e:71:
34:de:6a:e8:11:b7:09:aa:7f:0f:63:9c:0a:94:ad:
27:42:50:39:dc:3f:23:3b:c4:41:7d:87:fa:37:f0:
3f:16:2a:cf:e8:19:11:94:e6:76:23:05:26:e9:d3:
9e:2a:65:1e:8f:85:91:da:c2:77:46:ca:41:90:be:
1d:3d:6f:c2:06:2b:f0:75:0a:04:a0:46:92:8b:d5:
19:f5:61:11:61:0a:85:1e:5f:24:7d:d5:d6:dc:43:
cd:1c:91:10:fe:63:aa:24:8f:35:04:80:39:31:44:
f7:c8:bf:12:5c:a2:f7:3f:4d:23:8d:6a:8c:71:26:
3a:37:ae:04:22:37:60:32:45:12:55:50:39:ef:bc:
fc:57:b7:a8:c9:44:be:6b:3a:65:11:a5:30:57:c2:
fa:a9:7a:70:3d:91:78:e5:ac:16:ff:13:cb:f7:19:
b3:48:f6:1a:a9:7b:c2:a5:af:53:57:6c:cd:31:6c:
b5:b1:0d:bc:ff:6d:7f:c3:47:cb:f4:35:c8:b3:42:
5e:a2:7b:d0:0a:74:96:f9:d6:65:0a:7e:51:84:6d:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AD:46:36:A7:85:3B:9C:71:35:FE:BC:90:02:A2:A1:9A:A5:E9:E0
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bc:bd:b8:2f:21:4a:84:97:fc:3b:25:4d:fe:6c:be:2d:00:
be:61:81:59:35:e8:7b:45:76:3d:58:83:a9:2b:3a:38:e9:28:
20:6d:63:76:b8:e8:54:63:e2:67:ff:86:3d:8b:1d:9b:fb:9f:
cf:d8:3a:1a:c6:70:92:a6:7a:13:00:b8:46:ba:cf:93:c9:f8:
45:d4:a3:7a:36:21:0c:a5:a3:6c:8d:36:a4:be:bd:e5:b6:89:
13:2d:62:8d:a3:87:8f:ed:2d:5d:8c:6b:43:cd:9c:87:49:d5:
ad:3b:0f:77:4e:75:83:e5:47:a3:e7:27:6f:0b:44:66:09:59:
a8:9f:04:a5:a0:2a:05:19:e3:a2:81:8a:75:20:27:81:2d:10:
17:70:40:73:ec:c2:9a:73:a1:2a:61:fd:ac:59:e3:d7:fd:14:
71:db:e2:f3:0f:69:92:16:55:df:dd:be:4b:12:88:84:a9:53:
30:21:9c:e3:21:44:73:94:7c:aa:b7:8c:90:8e:48:1e:35:92:
7f:81:85:6a:96:b2:c1:3d:e9:e7:b2:03:6f:0a:ab:02:50:45:
02:b6:2e:66:64:aa:b5:b2:47:fa:36:7d:68:e2:94:74:0e:a1:
35:a4:e7:5a:87:a5:01:92:de:73:9a:08:e6:b9:b4:31:60:b7:
7a:48:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:38 2025 by rpki-client