Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: bx04w6wWjJRSDkcbToITHjQUEepQoV/zf+9L900dndg=
Subject key identifier: 65:DB:04:AE:B1:BD:8C:20:08:E6:9F:38:55:44:1B:DF:06:DE:16:3A
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 0199FCC647B41ABAA029F43293453AA6C911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: G3t0ZOgKWHBKYnKkxH8BfNSTMxpzEiOXc7lIzB7vQ3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:47:b4:1a:ba:a0:29:f4:32:93:45:3a:a6:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=65db04aeb1bd8c2008e69f3855441bdf06de163a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:04:3f:9c:9e:bf:e1:ab:79:63:63:11:a5:
de:39:91:bd:67:10:bf:87:1f:41:7c:e2:3b:40:ab:
27:f3:72:ea:70:c1:00:8e:7c:b2:45:72:12:30:00:
8a:9d:dc:25:55:ec:d0:2f:a7:0e:2d:20:39:a9:de:
7d:82:fe:c4:87:82:81:08:51:f2:40:85:8a:27:65:
3b:5f:ab:8c:1f:eb:c2:ce:a3:27:24:d1:58:53:4f:
3b:2b:10:fe:2d:39:fa:c6:76:f3:6e:2a:75:65:12:
7a:21:be:68:63:30:10:3f:47:94:8e:02:b9:b8:ff:
d5:79:6b:70:8c:b7:87:ad:e9:23:f6:b0:f7:cd:d0:
ae:81:2b:16:7b:5b:78:ef:c6:90:5b:49:66:f5:a8:
94:81:35:a2:20:4f:52:fa:d2:06:73:ea:d5:95:96:
23:8c:9b:b8:31:35:92:3f:03:4c:c0:f4:0e:75:56:
20:26:a4:9b:e8:59:ce:91:d1:54:bc:be:6c:f7:2d:
fd:f9:a2:ac:8a:c6:68:e7:40:b3:90:7d:10:90:a3:
9d:ae:5a:dd:71:2d:ef:ac:4d:f9:8b:ab:93:f7:61:
bb:60:de:3f:59:4b:94:e5:eb:9c:78:4f:7d:72:c7:
41:2c:a6:2f:b7:20:04:bd:b4:47:b5:ee:0a:b0:e4:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:04:AE:B1:BD:8C:20:08:E6:9F:38:55:44:1B:DF:06:DE:16:3A
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:20:28:da:48:1e:42:46:d1:87:3b:cc:2c:d4:2f:02:f5:
0a:4d:32:80:57:f1:65:49:8a:c3:2c:53:9a:18:65:cc:71:88:
5c:86:29:f0:53:2b:2d:3e:fe:88:d1:d4:1b:21:71:9d:da:d8:
78:53:1e:9c:58:85:53:81:df:11:02:d4:20:e3:f2:ad:32:5f:
c0:98:f5:43:8b:c3:bb:53:34:77:f3:9a:11:d4:9e:cb:cb:4d:
ff:14:75:14:bc:a1:1d:43:9f:35:47:91:c3:1d:94:8b:01:a8:
b4:6e:81:af:ff:68:76:9d:b8:83:09:cf:be:8d:a5:04:71:3c:
8f:e5:86:98:25:56:5c:6d:bd:f6:4b:3b:0c:0c:80:47:f7:c0:
b5:0c:91:2c:1a:7f:2e:b1:35:ba:a6:2c:d6:84:2a:8e:2e:45:
c8:99:1c:d5:63:1b:7d:bd:af:78:f0:eb:8a:09:70:9e:23:e6:
a4:23:0e:6a:e2:5a:c4:d7:bb:31:14:e6:d4:ff:8c:9a:42:99:
fe:aa:97:c4:7d:02:69:b8:52:ed:cb:d7:7b:23:22:98:65:9b:
3f:7b:18:7e:f2:e6:5c:9e:af:4f:b0:cb:fa:09:ca:88:0f:b5:
1a:df:a0:f4:3f:d0:44:24:f9:5f:fd:49:00:2b:56:e6:3c:a6:
b6:67:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:34 2025 by rpki-client