Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: V3F0cglpZgzWpEpP5rb9zdaX5z7sx8dKAfI9jd03F8g=
Subject key identifier: 28:BB:3E:D8:09:45:51:B0:56:38:06:1D:F4:8B:F8:A6:E0:B5:98:05
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 0199FBEB990A29819585B5D058491F426E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: hOyeVPfcUZoI5t0PT0h8hEQnrtQ.roa (hash: GeXT9//cL/zNTjZxuaw4Cm/U6jftaxUYi+/QSdMp5D0=)
2: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: M7rILZIsIu+eiaf95uRzBmzK/wU9ddJ45R1f5e3urNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:99:0a:29:81:95:85:b5:d0:58:49:1f:42:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=28bb3ed8094551b05638061df48bf8a6e0b59805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d3:ee:26:89:b7:44:3c:f3:66:b0:fb:a1:7f:
cb:6b:61:12:cf:c0:82:9b:7e:2d:93:08:2d:53:37:
d9:31:52:95:89:59:69:da:b1:03:f5:2f:35:13:94:
f7:80:35:d9:61:78:b3:1c:99:55:2d:79:a5:89:d1:
be:29:78:16:01:2d:0b:88:c7:71:3f:90:00:d7:33:
8e:02:56:30:92:e0:3c:4c:7c:97:94:23:67:3e:39:
12:ea:48:aa:e1:09:e1:22:18:07:b6:3f:54:75:67:
85:04:44:55:fa:c8:0a:ba:fd:b2:29:5b:eb:d8:8f:
51:6c:81:49:1a:23:11:fe:aa:89:47:3c:20:96:08:
dc:ba:a2:ec:02:4d:53:ee:72:f7:de:4d:cb:99:11:
47:c1:3f:50:26:92:de:41:14:71:44:fc:5f:7e:c8:
9a:88:a0:48:b1:91:9d:18:ad:01:0b:fe:de:c7:12:
60:08:5a:8f:bb:c7:61:e8:c9:b8:c1:ff:e2:9d:1e:
93:4e:15:e9:2a:29:32:26:00:43:33:79:55:be:c3:
1d:36:4a:0a:00:89:1f:b4:b9:3a:e8:37:4e:38:0d:
15:e5:bf:50:27:80:6b:9a:0a:7a:64:d3:fd:2b:8e:
d9:17:a4:b2:fb:ef:00:23:f4:0b:1c:39:c5:b7:83:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:3E:D8:09:45:51:B0:56:38:06:1D:F4:8B:F8:A6:E0:B5:98:05
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a6:b9:42:34:5a:49:74:db:5d:34:2e:b6:ec:e0:15:13:05:
31:6a:ff:ed:d0:85:11:ba:c9:a7:1e:39:d2:a2:94:17:09:48:
44:1b:8c:0c:fb:84:94:fa:b9:c0:d4:b0:d4:65:3f:1a:60:3f:
1e:21:75:01:44:4d:7e:87:18:ab:c4:94:1c:27:a9:14:c8:5e:
56:b9:1b:ca:d7:74:8f:66:15:0f:0b:df:e9:c6:3e:16:07:44:
19:33:e6:d9:eb:a2:e9:cb:f8:4d:61:91:83:8f:70:5a:71:05:
d0:70:cf:6d:36:33:81:8a:99:78:71:45:11:ea:60:17:0a:bd:
c2:d5:da:a9:bc:01:69:e6:f1:df:24:16:ab:af:c5:d9:3d:37:
18:6c:22:d3:9c:76:0a:a0:cf:d9:47:fa:c8:14:20:de:70:ee:
19:17:a9:d0:65:b7:6b:48:31:f4:5f:21:ab:5d:9b:50:f6:a1:
90:cc:8a:bf:c0:a9:87:88:a1:76:44:23:3f:de:ff:56:26:54:
a7:a1:f5:ec:cf:41:e1:47:9b:c8:3f:97:b1:10:9a:6e:7a:97:
3b:bf:fb:a5:af:40:dd:0c:33:ae:4c:5c:31:7a:e2:50:90:f9:
be:f9:ab:a4:39:f4:9d:0c:9c:83:7a:e5:82:eb:0c:21:d1:23:
35:f1:84:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:49 2025 by rpki-client