Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: VB1y8F1ir1ymA+ksOE49B/QK2+//JQ9UfkYdXeqEaZg=
Subject key identifier: A3:CC:D7:F5:70:8A:B3:1F:B5:7E:E4:EB:38:FD:20:81:2F:0B:8D:14
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 0199FEEBB54DB05DB08EB11665C3384FE676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 00:01:24 +0000
Manifest this update: Mon 20 Oct 2025 00:01:24 +0000
Manifest next update: Tue 21 Oct 2025 00:01:24 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: 5imDunCB2p1sslQSzaYbJr4AOGCHwFtiM0cQLrZwv4o=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b5:4d:b0:5d:b0:8e:b1:16:65:c3:38:4f:e6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Oct 20 00:01:24 2025 GMT
Not After : Oct 21 00:01:24 2025 GMT
Subject: CN=a3ccd7f5708ab31fb57ee4eb38fd20812f0b8d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:2d:ea:78:7e:ba:9e:7c:e4:1d:89:58:eb:
4a:c8:ab:f5:dc:a0:72:ab:87:b1:bf:9b:4e:08:07:
b5:c3:f3:f9:1c:97:7a:45:e0:2e:c1:fc:d1:10:e9:
a9:d1:cc:43:1e:c1:f4:5d:c7:1a:e0:8f:45:a1:bf:
a2:75:a1:fb:69:78:2d:aa:04:08:4d:a0:eb:ac:ca:
75:97:af:05:5f:c3:8c:48:6f:3a:e6:db:03:b3:e7:
fb:61:1f:db:82:67:4d:12:3c:df:1d:27:ee:9f:02:
f1:b3:bf:3c:ee:cb:0b:99:a5:3d:49:4c:53:be:44:
a9:58:6e:64:94:b9:02:89:18:48:45:39:4f:a9:55:
86:90:ab:26:58:1e:4b:4f:e2:04:ee:de:34:d8:31:
27:9b:42:55:d0:dc:58:5c:86:23:18:e5:d9:51:cf:
56:98:67:c5:b2:d7:9a:b5:53:dd:1e:7f:07:b8:73:
aa:19:79:21:ae:83:ca:36:ab:ee:3e:18:3b:29:91:
af:a7:58:32:9c:be:30:4c:3e:64:59:3f:9c:ed:65:
dc:3b:4e:3c:3d:3b:2f:89:35:82:9e:4e:b4:53:39:
f3:16:05:71:3c:0e:a6:31:88:05:6d:ec:24:f5:9d:
fd:28:58:db:f3:a8:6e:f1:17:4f:08:76:88:9a:79:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:D7:F5:70:8A:B3:1F:B5:7E:E4:EB:38:FD:20:81:2F:0B:8D:14
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:08:bd:93:e7:f5:26:9f:91:ab:ec:3d:c9:eb:68:eb:1c:
19:79:0a:30:b9:2e:00:ee:0b:dd:0b:32:3f:d0:dd:da:32:c8:
fd:e1:63:ce:51:5f:81:59:35:02:35:6e:5e:b0:82:69:92:b1:
41:b9:9d:b2:b7:67:55:60:01:da:d5:8e:76:37:cc:56:f9:5c:
1a:4e:3e:05:ad:9c:df:b2:cd:d8:60:ce:c4:13:5c:4e:cf:2b:
45:d2:39:e6:78:a2:bb:82:9e:63:ff:59:be:db:ea:fe:32:8d:
90:78:d0:13:91:af:02:0e:51:08:4e:63:21:d7:d6:87:b2:bc:
79:99:fb:c6:b1:1c:56:ab:5b:bd:c6:6b:6c:de:8e:cf:c3:18:
81:6e:dc:13:1d:c8:fb:c7:44:02:1a:65:65:89:5e:f5:c1:b2:
99:9d:e7:b2:c0:cf:90:9c:f7:fa:c9:46:fb:9c:aa:58:79:ac:
6e:85:fe:a8:85:c2:6b:12:b0:43:36:e2:5c:7b:94:7f:84:33:
77:d9:bb:bd:0b:73:a6:b8:9e:c9:5d:1d:ab:aa:40:21:6e:36:
e4:6f:70:cf:17:d8:9f:cc:43:bf:8c:70:95:9a:2d:ff:5d:ca:
14:12:85:04:7d:4d:d9:8b:57:f3:fa:d5:44:20:42:de:21:a0:
6c:43:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:45 2025 by rpki-client