Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: 5pvbFlfhMgSSWq4fa+wrJ1Hx8Z0fja+A0dV/DUhOigg=
Subject key identifier: 1E:52:C8:95:A3:43:EA:7F:B1:CF:E7:DD:18:96:9E:32:24:F2:CB:CB
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 0199FB45F6A6FB83FB3D3406F5BABAF7CCA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:30 +0000
Manifest this update: Sun 19 Oct 2025 07:01:30 +0000
Manifest next update: Mon 20 Oct 2025 07:01:30 +0000
Files and hashes: 1: 7a4UPx06lYNEEu_8hOujHiCjI3I.roa (hash: KGEycmI2h25GEHvIQbSwQGJ1oU96GoNn5z0Fg/wO3lQ=)
2: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
3: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
4: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: FmhmQX/prTWRvFHGf574Z5nmbedXcFYvqztI3MA5X7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f6:a6:fb:83:fb:3d:34:06:f5:ba:ba:f7:cc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Oct 19 07:01:30 2025 GMT
Not After : Oct 20 07:01:30 2025 GMT
Subject: CN=1e52c895a343ea7fb1cfe7dd18969e3224f2cbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:00:cc:13:99:88:10:fb:96:6a:10:9b:ad:
f7:1a:b8:96:d0:69:db:2b:0a:f6:f2:0b:2e:b5:ce:
9c:d2:e0:29:c8:02:22:ba:82:5f:53:d8:da:d0:37:
02:5c:bc:fe:c3:2e:41:4e:42:6e:33:8f:09:cd:f4:
33:ba:c6:57:3f:a1:94:31:03:91:c4:72:c1:57:dc:
c4:f8:cc:4e:1a:31:11:02:ec:e0:f8:0d:7b:8f:2d:
66:be:b4:27:39:c7:f4:27:73:62:43:76:e0:79:3c:
67:07:24:4b:b1:45:36:73:67:63:b9:cd:70:fc:96:
10:ed:5d:19:11:0a:cc:af:bc:62:ff:d1:60:6d:ed:
9f:5e:1a:1a:56:ad:fb:d6:51:e6:5d:29:75:fe:d7:
92:03:95:e1:80:93:79:8e:46:63:52:36:8b:bf:92:
7b:d5:18:70:04:7d:fa:18:f0:5f:e8:ab:7e:8d:2f:
57:60:10:b4:d0:5e:33:5d:a1:a4:ab:de:eb:d2:a3:
99:31:8b:c6:75:73:15:93:96:d8:12:f5:1f:23:e2:
c2:70:9b:36:a5:f5:df:5a:1b:f3:c4:bd:5a:56:5c:
c8:26:03:03:50:02:3d:17:7c:c3:55:3d:3e:6f:fc:
01:2f:13:25:05:c1:6d:fb:22:a8:64:e1:a2:a9:53:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:52:C8:95:A3:43:EA:7F:B1:CF:E7:DD:18:96:9E:32:24:F2:CB:CB
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2d:6b:b6:0c:46:0a:e8:94:ff:f6:86:fe:c1:cb:da:8d:53:
65:df:9e:8a:69:76:4b:74:95:4b:f8:af:29:0f:be:88:1c:ff:
6d:e2:87:2e:f5:72:a5:f4:8b:53:db:37:02:24:64:33:a4:66:
1c:58:02:ad:be:2f:c4:5c:2a:e3:6d:0e:dc:e8:90:fb:74:4a:
3f:d0:85:6c:58:8a:bd:93:86:37:26:61:81:6d:24:20:3f:0a:
4e:c4:c1:71:d0:77:74:18:85:d1:88:57:10:6a:72:01:80:22:
c0:2e:bb:3f:75:3d:31:d3:c1:a8:c5:38:42:32:6c:8c:6a:32:
6d:0c:67:af:32:4f:78:bd:d8:28:af:0c:8f:25:38:3b:d0:4f:
78:19:ca:e8:7a:d8:31:71:f8:9e:c9:35:03:f4:0b:c9:f2:86:
29:e1:c6:e8:b5:f1:1d:69:ba:ab:45:a5:7c:aa:75:52:33:dc:
77:73:3c:d9:24:a4:d2:96:46:53:ca:89:3e:45:b5:04:b8:32:
0c:83:c9:a2:91:70:68:db:c3:d4:f0:ab:e1:6d:2c:07:5a:8d:
36:db:8d:5b:25:28:d8:1c:4b:98:44:86:75:8e:0f:6c:32:e2:
dd:f5:9e:90:f4:73:95:3c:98:39:ae:94:6d:ec:7e:42:be:51:
c1:99:9f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:08 2025 by rpki-client