Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: CqmlUSyYONWyPRoGzZBTNlKmPirhFXCbZo2SX6hEdnI=
Subject key identifier: FD:A0:FF:98:03:04:0E:62:1A:E0:37:46:BA:7D:DF:42:75:85:B0:BD
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 0199FBEC5D165D2861AB1E18BB27AB1BFD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:03:15 +0000
Manifest this update: Sun 19 Oct 2025 10:03:15 +0000
Manifest next update: Mon 20 Oct 2025 10:03:15 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: rtz4YrgzTYSRGix4aB11zt4zsEfv+UWfLYDTxQm0zSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:5d:16:5d:28:61:ab:1e:18:bb:27:ab:1b:fd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Oct 19 10:03:15 2025 GMT
Not After : Oct 20 10:03:15 2025 GMT
Subject: CN=fda0ff9803040e621ae03746ba7ddf427585b0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:6d:83:ea:5b:0e:c4:50:56:e0:71:51:88:
cb:4b:df:cf:c6:fb:a7:dc:69:7c:cb:d6:74:93:56:
91:87:1c:88:74:55:c2:09:1f:ba:f6:ff:d6:64:09:
7b:f9:1d:65:50:e0:a8:49:e4:b8:d7:63:4a:b1:3d:
47:3e:84:94:d5:a2:d3:a4:76:a2:ce:78:bc:fa:f4:
d0:fc:c3:1a:db:ac:a4:20:0e:e1:73:10:6c:39:5e:
9e:53:90:4a:ea:91:4a:62:08:ce:60:a4:be:b3:83:
f0:5f:f9:5a:bb:38:2f:0e:c8:7f:f2:30:2f:f7:58:
a1:c5:e0:a1:f6:aa:35:c3:d5:96:e9:12:9e:e7:b3:
d2:b9:fe:1e:42:0a:6f:e8:f4:01:72:59:cd:47:bd:
5f:0d:3d:93:9e:b5:1c:2a:4f:9a:64:ec:e5:38:9a:
01:44:2c:de:62:bd:2d:1f:2c:b6:3a:5d:d4:a7:7b:
a3:ac:c1:e7:1f:d6:82:5d:20:2a:61:bf:a9:61:0a:
7b:9b:f9:0f:89:22:1f:4c:d3:4b:0d:f0:98:0a:95:
5c:3e:67:96:91:8a:54:41:ce:2b:a7:4b:6f:5a:8c:
77:90:87:cd:ec:61:fe:43:22:a2:43:bd:ee:ea:db:
0d:02:c6:0e:cb:a2:97:de:5c:9c:7b:74:8b:fb:0d:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:FF:98:03:04:0E:62:1A:E0:37:46:BA:7D:DF:42:75:85:B0:BD
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5f:f3:15:30:fa:1b:97:d6:07:f3:2f:73:05:fc:f9:7d:59:
2a:d7:64:c6:98:d3:1a:8d:24:be:0e:b7:45:98:98:5b:89:36:
48:2c:1d:2a:8f:c1:79:a5:ec:94:90:2b:58:fa:e4:38:2f:24:
20:d8:87:67:a1:7a:f1:c5:f6:d4:e5:22:3a:cb:d7:93:ea:01:
ef:39:35:3c:fc:ee:b5:90:16:a3:ea:71:6d:a4:86:c8:07:a3:
90:e8:f1:a4:7c:82:78:11:3f:99:1f:f4:4e:1e:51:af:94:ac:
1a:fc:dc:5d:1b:fd:21:df:72:99:2c:8f:db:77:9c:6a:35:55:
43:e1:df:01:9e:6a:27:24:a6:b2:19:36:93:65:d6:2b:6e:b6:
0d:ed:5f:99:97:fc:ed:d5:32:a1:f7:73:76:c8:bc:d8:68:9d:
7b:c4:94:05:3e:73:c8:93:dc:58:5c:86:73:63:46:6b:d8:8a:
a4:35:55:00:5c:96:3d:39:b6:eb:c0:b2:4f:ec:6c:03:1e:98:
78:4f:78:3a:03:e5:f0:74:56:ee:f8:fc:ce:a7:df:a9:0a:f7:
fa:44:bf:95:eb:6a:ba:08:cd:2f:19:5b:8c:06:99:cd:a5:d8:
72:a9:21:c0:ac:66:b7:9f:2c:04:3f:6d:40:67:96:93:95:da:
04:46:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:16 2025 by rpki-client