Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: LmwhxI32QYOkVg9E2j2iOqBHU89ODVLhFnZ7cP73NgU=
Subject key identifier: 0E:40:0D:AF:21:4E:3B:41:59:EE:73:C7:41:7B:F3:E7:B8:8E:AB:94
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 0199FDD9F8A4DC46C94205403ED3C645B869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:24 +0000
Manifest this update: Sun 19 Oct 2025 19:02:24 +0000
Manifest next update: Mon 20 Oct 2025 19:02:24 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: 98WzKWrjebXXd3VLtUARG1O449BskL/auUq/ghFdKs0=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f8:a4:dc:46:c9:42:05:40:3e:d3:c6:45:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Oct 19 19:02:24 2025 GMT
Not After : Oct 20 19:02:24 2025 GMT
Subject: CN=0e400daf214e3b4159ee73c7417bf3e7b88eab94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:7d:c2:2a:19:48:54:5a:56:93:c8:00:63:
50:77:61:ee:8a:68:34:89:eb:83:04:8c:57:73:b1:
37:e9:50:2c:ac:29:69:20:ac:af:a9:cd:2d:8d:1a:
78:d8:b5:ed:a3:2d:a3:14:b9:b8:92:00:08:77:e9:
69:56:ab:dd:28:42:9d:b4:9d:3f:11:13:e9:48:7f:
24:4c:4e:32:e4:7a:ae:7a:1a:2c:db:18:79:9c:09:
59:ca:7a:37:be:b8:e1:26:49:99:04:41:76:44:42:
7f:a2:af:c9:1f:76:54:eb:f4:12:34:b3:57:0c:c7:
81:e2:4f:c8:60:52:26:da:df:2a:54:ed:92:95:54:
b5:a9:ea:51:6c:c7:d2:a9:7d:ae:0f:2b:64:c6:bf:
78:dd:e9:7f:49:12:64:35:fc:97:17:64:8c:7d:7b:
52:b7:cf:5d:ef:91:5f:0b:61:c4:e6:bd:ea:c3:c9:
74:47:cd:b8:93:65:e4:41:88:1a:c3:63:d7:25:5b:
ab:48:60:84:5e:ca:3d:7c:82:61:1d:63:88:9c:89:
12:5d:fd:d1:48:9a:fe:6c:9c:2f:ed:db:4b:57:34:
92:28:37:35:fd:e4:28:86:93:28:85:0f:5d:95:6a:
d8:c7:49:3a:39:06:9a:aa:88:78:20:33:6c:c3:4e:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:40:0D:AF:21:4E:3B:41:59:EE:73:C7:41:7B:F3:E7:B8:8E:AB:94
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:47:c8:e4:c0:71:c3:6e:58:04:c0:96:b2:aa:ed:4e:56:
b2:a8:68:a9:27:56:47:61:ea:a9:cd:b6:b7:ff:b7:52:62:6a:
b2:bf:78:ed:54:94:19:30:71:9a:cf:ac:4a:ec:c3:f4:7c:75:
40:0a:99:c4:d6:a4:0f:c7:c0:51:60:31:68:77:77:cf:31:5c:
93:f6:d7:49:d2:d0:7f:4e:07:ac:e9:a4:13:37:ff:ad:ea:b9:
c9:9d:6b:a1:a5:e5:7f:72:3a:69:72:7c:b6:7d:5c:93:00:ee:
40:1a:b3:00:5e:41:7d:8c:f9:02:18:48:09:30:fd:d1:68:ed:
ca:94:5b:01:8f:7a:7f:0e:d6:d2:c9:ea:ee:de:c4:66:13:90:
e6:a3:93:ae:9b:11:97:0f:db:72:10:9d:a8:b6:dd:51:b7:62:
21:53:8c:19:69:a0:64:57:34:e3:3b:59:2b:58:bd:19:27:12:
b9:16:15:72:bc:f3:b0:d1:29:d4:0c:35:9b:56:f8:7d:5d:a1:
cf:e1:cc:f8:ea:cb:3d:f6:c2:f5:cf:2f:32:3e:68:dd:c0:81:
0c:d4:92:9e:79:44:29:97:e5:c7:1f:cb:f5:05:1d:3b:26:91:
c1:57:97:93:02:7d:85:d6:ea:e2:ca:f1:85:57:3d:38:9f:45:
e6:23:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:10 2025 by rpki-client