Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: jwaUTz4YbL0k7BdoGHMNy/JGSosNPHuwfUiwDGazA2o=
Subject key identifier: 1E:1C:EB:BC:E0:CC:63:60:A7:83:1D:B3:41:EC:29:E3:C3:79:F7:6D
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0199FFC86E714A8D744E9010BCCBCF18C6B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:02:29 +0000
Manifest this update: Mon 20 Oct 2025 04:02:29 +0000
Manifest next update: Tue 21 Oct 2025 04:02:29 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: J9fgNVZkrDv8l8K0AYwr4+7zWBRGXSilL1Iv2gYg2kI=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:6e:71:4a:8d:74:4e:90:10:bc:cb:cf:18:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Oct 20 04:02:29 2025 GMT
Not After : Oct 21 04:02:29 2025 GMT
Subject: CN=1e1cebbce0cc6360a7831db341ec29e3c379f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:25:45:2a:b2:9f:0e:e0:a2:76:67:52:85:
04:8a:8c:16:98:5c:c1:59:f5:6c:ca:6a:97:2c:06:
2c:46:13:3e:87:a9:1c:11:9c:24:35:58:a2:a8:6e:
47:7b:7b:e4:14:45:d8:12:d1:5e:2d:b1:9f:97:e7:
74:f0:9d:eb:b4:d9:83:18:90:11:20:99:83:b7:b1:
1f:37:67:f9:cb:2a:00:1c:ab:88:81:7b:86:59:89:
3f:32:67:ad:9e:b6:e5:a5:24:27:ed:20:6f:6d:1f:
d1:fc:a5:1a:74:7e:22:06:88:73:b7:17:d1:65:57:
04:ae:b8:92:b8:49:06:68:5b:e7:95:a1:f0:4c:c3:
b7:47:de:61:93:4b:f4:ff:f6:3d:8a:e7:02:fb:7a:
29:fb:0b:19:2e:9c:99:0e:ac:5c:50:ec:9d:41:47:
0e:0b:61:e8:3f:34:f6:8d:85:90:bf:11:33:61:4b:
ba:70:6b:b2:a8:da:5e:5e:10:57:41:f4:01:4b:e9:
e2:93:be:39:0e:36:7d:96:a9:bf:36:59:88:06:a5:
54:10:27:16:6d:04:a5:e2:76:3c:37:1d:3d:5b:7b:
08:9a:66:90:15:97:dd:ac:d4:6d:1f:e1:76:49:8a:
82:e3:b5:be:b3:e4:09:54:e2:e4:bd:d9:ef:c5:72:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1C:EB:BC:E0:CC:63:60:A7:83:1D:B3:41:EC:29:E3:C3:79:F7:6D
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:f9:d3:ba:b9:57:f2:9c:db:aa:b6:56:23:2d:f3:34:e1:
41:3d:87:d5:19:59:1f:f4:32:dc:b0:19:3c:b2:4e:7f:0d:b3:
37:96:69:e1:7e:fd:1b:ee:c5:04:c0:c2:74:14:df:92:cf:8d:
ce:fa:1b:1d:ec:24:f5:b4:4c:f8:29:e1:07:f4:e7:a5:1b:e0:
0a:f9:34:6f:ad:9e:83:2f:46:5b:4b:51:db:f4:68:fa:d8:0f:
da:e8:f0:67:05:eb:a4:db:fa:f5:76:84:18:af:05:59:50:3b:
d3:e5:5a:59:5b:f3:e1:1b:35:ff:d5:01:26:e7:c9:d9:50:66:
83:b3:32:f7:74:08:af:71:52:11:85:b6:18:72:b2:e8:7b:c6:
90:2a:69:7d:ec:cf:e5:f7:4f:de:cd:99:d5:fc:a0:a4:31:39:
f8:ea:36:5c:40:2f:7c:06:b7:3c:7a:ae:22:66:18:20:84:b7:
f0:86:8d:0c:f9:e4:dc:4f:09:bb:8f:5a:aa:13:84:09:53:cc:
78:3e:b1:a6:6b:83:a1:de:38:68:22:50:94:0f:a1:2f:62:17:
2c:77:1a:79:4d:77:d3:bf:b6:67:dc:b8:fa:51:e0:be:67:c7:
e4:61:a6:54:19:c1:26:24:55:8c:a9:ae:34:8f:76:92:04:fa:
e2:fc:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:52 2025 by rpki-client