Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: kDUQKNobMJkUbaem3xn9/Nlbdnb7b2rCESsAr5mEYhQ=
Subject key identifier: A2:48:75:2A:E5:52:EF:38:E2:D0:AB:99:EA:CC:A4:B0:99:E6:43:C2
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 0199FB45B9113C098A5F7D1A3FC9EF463646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:14 +0000
Manifest this update: Sun 19 Oct 2025 07:01:14 +0000
Manifest next update: Mon 20 Oct 2025 07:01:14 +0000
Files and hashes: 1: 3Et5DSQTmjw5JoMUf-Wa1H5e4PY.roa (hash: FOwnE+/UGLrWULx1HSQ846yUR+XWmJ/pKo/EVwX3S1M=)
2: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: 8q6Jm+P/EuVnuvcejUPmCh3BELYFM0kyBxQG60Xl6jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b9:11:3c:09:8a:5f:7d:1a:3f:c9:ef:46:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Oct 19 07:01:14 2025 GMT
Not After : Oct 20 07:01:14 2025 GMT
Subject: CN=a248752ae552ef38e2d0ab99eacca4b099e643c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:89:d3:cf:78:19:c7:7c:cf:ed:13:19:29:
91:20:c6:5b:5c:35:49:f8:87:3e:c7:86:3b:05:a9:
fd:00:da:8b:4c:e6:1c:fe:08:14:50:fb:6f:da:57:
3f:9c:13:5b:27:7c:fe:2e:9e:e5:63:ca:d6:fd:8e:
c1:a0:28:b9:f9:12:f7:7f:ea:38:5c:99:1a:44:aa:
06:32:b3:63:0c:24:75:43:22:c7:15:54:21:2d:5e:
36:fe:e3:05:c1:e6:41:8d:fa:cb:8c:71:a2:c9:d6:
68:21:ec:2c:56:82:bb:bd:78:87:a4:24:bc:aa:3c:
1e:a4:51:e2:95:ac:f1:4f:99:33:a3:80:f6:7b:c0:
16:2f:9b:77:f9:7b:68:34:22:e6:a9:17:1a:90:e7:
c9:71:a7:aa:96:64:4e:11:e5:3b:e1:82:aa:8c:55:
5c:ed:58:c4:17:f2:54:33:4f:60:2c:fe:1e:3c:68:
ac:66:d9:a0:0c:d3:c3:da:33:3d:5c:3b:91:49:e4:
61:30:68:3b:8c:59:c8:92:00:12:91:f6:10:a2:bc:
33:5a:07:2b:df:93:dd:84:e3:53:21:16:71:9c:11:
4e:18:5f:0a:72:be:5a:01:d8:5f:28:c3:59:aa:d4:
c1:90:18:fb:48:a6:42:96:88:8f:bf:8e:5e:a0:18:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:75:2A:E5:52:EF:38:E2:D0:AB:99:EA:CC:A4:B0:99:E6:43:C2
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:79:dc:07:9b:46:2d:90:0d:80:e7:78:a6:6c:ab:4d:ae:af:
39:dc:61:41:f6:b1:b0:e5:63:d3:39:4a:66:33:b0:e4:45:3a:
28:44:e5:23:bd:fb:d7:df:09:c2:19:18:d2:b7:65:77:64:c5:
0e:c9:06:90:d1:25:8c:c3:d6:64:67:36:cf:3c:90:09:b9:c3:
c7:9c:79:94:74:87:bd:9f:a1:17:03:bc:83:61:e9:c9:b9:53:
25:20:fc:78:b5:7f:2e:de:15:0a:0a:c4:56:9f:27:37:62:86:
ba:57:11:83:ff:a8:0e:a4:2b:6a:ee:9c:41:74:79:a8:71:b8:
8d:fa:d0:97:49:f0:c2:9c:4a:c3:af:2b:83:ef:34:2d:7c:5a:
f3:54:b4:3c:64:c9:4c:80:f1:33:b8:f4:cc:4e:27:a7:3f:cb:
b5:6b:7a:27:b1:46:ec:3c:18:a0:1b:79:8c:dc:35:3d:62:64:
27:2a:aa:75:8f:55:cd:de:04:a6:30:d6:6a:c1:6f:f8:80:46:
92:3d:c5:f3:85:55:30:13:7e:4b:59:e9:ab:84:84:9d:c5:76:
12:54:1f:2f:68:f6:49:76:c7:83:96:30:fa:f8:1e:eb:ee:48:
eb:65:35:e5:db:28:24:25:aa:35:c6:b5:72:61:c2:a8:c6:03:
66:e2:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:15 2025 by rpki-client