Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: 9PTiOSATyooVZWYOPZscsewfxkCY8/gUjS8Um0lKjK0=
Subject key identifier: DB:43:55:54:0F:79:6A:53:92:52:8D:ED:C6:00:22:03:B4:07:84:AD
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 0199FC21796FB4D90CCB7E65A10B0ECCEF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: qbiJY6nuWFU6MoMsaP1L5O3DHxcYTPFDMaMnlDSIqas=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:79:6f:b4:d9:0c:cb:7e:65:a1:0b:0e:cc:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=db4355540f796a5392528dedc6002203b40784ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:3e:17:2d:bf:eb:77:bc:39:72:9b:3a:f4:
35:4d:d1:2a:f9:de:f4:c4:b0:fd:6e:5b:42:f6:f3:
d6:6d:d3:03:e6:94:80:c7:81:1c:b6:0d:d7:6e:7f:
1f:a1:7c:69:5f:90:a3:00:5e:c9:b8:43:d4:df:d4:
d9:70:1a:8b:9f:cc:f4:03:34:69:43:24:f7:42:12:
e2:9b:73:6d:32:38:bd:34:dc:c2:d9:4b:da:7a:89:
e8:03:f2:d1:8c:1b:34:22:96:0e:60:4a:11:41:01:
25:f2:45:f8:e7:f3:43:ad:dd:60:f8:94:4d:dd:1e:
9d:02:ec:84:b8:ab:aa:51:ef:1d:30:68:9d:e4:8e:
d7:c0:b4:fd:e7:a6:58:0a:12:c0:49:31:01:d2:bb:
dc:87:fb:ff:61:c4:bc:9f:3b:4a:85:8d:fe:21:b3:
94:e2:02:fb:e1:68:c7:c7:ac:14:58:5a:26:c4:54:
ea:41:40:20:c5:30:a6:15:f5:4d:35:99:22:07:1e:
24:46:bb:02:70:c5:c2:31:bc:e1:c3:d8:17:c7:3a:
f3:06:50:be:d3:8c:1e:e7:31:17:64:08:c9:9d:9a:
2a:55:35:48:de:e5:f1:89:b6:77:d3:8c:78:6c:b0:
98:2c:98:38:c0:9e:a6:c2:50:83:ed:02:53:26:81:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:55:54:0F:79:6A:53:92:52:8D:ED:C6:00:22:03:B4:07:84:AD
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:58:17:87:91:a2:d4:14:cd:ce:ed:10:4c:cd:91:cd:91:60:
ab:a2:fd:84:56:56:1a:37:57:c1:27:d4:f9:35:dc:02:57:91:
51:d7:0e:08:a7:67:25:69:8f:34:50:28:80:ec:87:37:ed:6e:
5c:52:a0:e0:0e:1c:7b:d1:0e:2a:27:f8:ef:9f:4b:4c:16:ce:
2b:d6:d2:cc:c7:be:d8:b0:47:4b:fa:e5:53:02:f5:4e:5b:df:
38:70:e0:1b:0b:71:75:7c:6a:fd:72:aa:2e:f6:27:53:2f:48:
5e:04:cc:d5:33:de:96:1f:52:23:3d:33:17:99:2c:95:39:92:
6d:6b:58:27:02:58:fc:29:12:4f:86:7a:83:36:9b:a1:b4:5c:
85:34:a8:6f:8e:c9:bb:a9:0f:26:da:7c:df:44:1a:ed:af:a6:
fb:41:c6:e1:7e:c8:9c:1c:31:92:2e:d9:68:e1:50:cd:a8:7f:
78:87:6c:82:54:17:74:b3:2c:8a:c3:de:70:2e:2e:da:de:a1:
60:17:62:4c:c0:b4:f7:d2:ca:78:cd:83:fd:71:36:cf:88:0d:
38:64:d6:1d:cf:71:76:b1:4d:a3:3a:52:3f:4b:fd:e3:9b:ef:
04:c7:d8:f9:fc:3e:19:b0:47:78:4c:84:2f:da:a5:2f:ac:cc:
19:73:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:01 2025 by rpki-client