Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: nrpSs9ybJyzY1K2ms4v5sUGPWcmrQmRbsOI84CcMZzo=
Subject key identifier: 2C:9F:79:9C:A2:FF:75:A2:B5:8F:7D:58:EF:D9:0A:4F:D4:86:94:EA
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 0199FB45C95BD4A6C9F452E4E3CFA8FBCC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: +/Lnm6luWngIoq8ym1nPLw+uIIa4wdqqxVq8MIkkDTg=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c9:5b:d4:a6:c9:f4:52:e4:e3:cf:a8:fb:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=2c9f799ca2ff75a2b58f7d58efd90a4fd48694ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:fa:6b:13:56:eb:18:82:76:81:4c:bc:02:
49:1b:50:3d:d3:4f:f4:2c:81:0a:ec:03:81:ca:cb:
ec:8c:b6:aa:7f:cf:11:48:9d:d8:a1:06:d0:6c:93:
11:ef:28:f4:79:f9:0e:bb:ba:45:12:c2:ff:b2:10:
b8:96:1a:66:55:85:83:61:d0:85:d2:84:b9:cb:44:
83:49:54:f2:0f:91:00:0f:6e:9c:af:c9:61:56:22:
50:9b:3c:64:32:64:db:83:d8:a7:fc:ea:42:8d:e1:
59:4f:73:b4:c1:6a:0c:81:b5:de:8d:de:fa:5c:41:
ea:f3:72:55:7d:56:56:9f:23:40:d7:48:54:91:e6:
2b:d9:aa:2d:73:a5:d0:35:67:db:6c:a3:d4:c0:4b:
1a:02:e0:84:1c:d4:a2:95:bf:fd:b6:47:9b:7d:69:
1d:fa:b6:d3:09:8d:73:ef:3a:95:72:1b:6c:61:b4:
16:e6:f7:41:22:bb:c9:6d:f5:f0:03:0e:ca:8f:84:
37:9c:6f:c5:cf:4d:61:87:e6:04:7f:bd:f9:e0:a4:
14:85:14:03:18:19:34:7f:16:dd:9f:cf:3a:6b:9d:
1d:c3:57:fa:15:e6:59:00:78:60:cd:ff:18:b1:8c:
51:19:f8:78:3f:ea:45:fb:bc:c6:e5:64:f4:10:4b:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:79:9C:A2:FF:75:A2:B5:8F:7D:58:EF:D9:0A:4F:D4:86:94:EA
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5c:3c:86:e9:19:5b:35:f9:e8:8d:9a:2d:6b:59:df:7f:60:
fa:74:02:fe:f1:42:ab:6d:d6:db:35:b6:3a:73:d1:6a:c3:6a:
af:dd:97:11:0e:17:67:ec:be:b4:ad:29:92:ab:f1:57:ec:5e:
d0:a4:55:47:a6:6b:b5:46:0f:a0:57:d1:35:d2:e2:50:d1:0f:
e2:12:6f:29:70:b4:2d:1d:73:86:e0:2e:77:04:4a:3f:b6:b8:
ff:eb:5f:93:e5:35:3c:b3:e0:c2:9d:d9:d1:66:e9:71:df:af:
37:85:47:ce:8f:1a:17:46:1b:b0:85:c3:c5:82:67:32:a8:30:
c1:02:c4:86:c8:c7:89:ca:e7:94:f3:bf:56:78:dc:05:71:f7:
74:5e:f3:b6:fc:17:df:89:96:9c:80:2e:08:21:61:c9:38:c8:
04:08:a3:97:a7:59:f1:7c:97:a3:49:30:14:f4:83:ec:a8:bf:
cb:5c:0c:29:d2:66:31:5c:a4:ba:a5:52:29:32:93:9c:10:89:
6c:c5:88:88:79:13:41:8e:69:7a:1a:43:ec:d5:f4:ab:d0:bb:
5d:bc:88:dc:21:72:ab:3f:cd:7b:6f:20:ac:38:f8:51:63:81:
81:33:f5:7e:ca:0f:f5:4c:8e:ee:54:f3:a3:e3:40:4c:72:c6:
ae:e5:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:15 2025 by rpki-client