Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: sqZp8Hs2DX0mQXAgqTJB1KCxBzVealYdsI9z9z0v3Lg=
Subject key identifier: 3C:E5:BC:A5:F6:E3:31:7D:9A:D7:CC:DD:D6:D7:A0:87:D6:B8:51:12
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019A01112529A6307385C367815A9D34CBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 10:01:32 +0000
Manifest this update: Mon 20 Oct 2025 10:01:32 +0000
Manifest next update: Tue 21 Oct 2025 10:01:32 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: EwK4NCbC5H0y4EYnkexIbdWhcZMJg6QPq95gzswlHnA=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:25:29:a6:30:73:85:c3:67:81:5a:9d:34:cb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Oct 20 10:01:32 2025 GMT
Not After : Oct 21 10:01:32 2025 GMT
Subject: CN=3ce5bca5f6e3317d9ad7ccddd6d7a087d6b85112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:63:72:f8:75:66:6f:88:81:84:85:3d:f5:
cf:bb:1b:b6:10:40:d0:fd:5a:f6:44:c1:73:49:60:
45:4a:9a:c9:70:3a:43:8b:fc:85:fa:b2:e5:6c:a6:
b3:e9:d0:0f:08:1a:4b:ff:bf:a5:b1:7a:28:b7:70:
b5:6d:c1:81:cb:13:74:5e:54:dd:88:0d:a5:56:84:
5b:e2:c8:d8:cc:f8:c1:d0:04:8a:f9:29:91:04:d2:
e6:e9:32:ee:95:56:f2:a3:24:a7:a2:ba:f1:07:12:
19:81:ad:42:25:ad:ac:21:a6:77:ef:75:da:c7:14:
43:51:ff:d9:5d:86:85:6e:8a:68:16:97:4c:af:da:
5c:2d:c8:4a:bd:63:a9:ce:eb:ed:37:b4:f3:d2:09:
c1:18:2c:32:17:7a:38:46:71:2a:30:05:02:90:d7:
45:34:d4:e1:c2:9d:7c:f6:3c:df:9e:39:85:a7:5a:
41:30:7a:33:d2:9e:77:7a:c3:ab:58:7a:e0:ac:f2:
b5:42:a1:cc:d8:3a:bc:99:28:f8:39:1f:54:12:77:
c2:4b:c5:dd:7f:af:3f:db:64:27:a2:50:92:79:7d:
f0:d4:80:53:6e:de:74:c0:ef:83:da:15:3f:98:da:
d0:70:70:2e:5c:7b:ad:a4:a3:f7:47:8e:c6:33:c9:
c8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:BC:A5:F6:E3:31:7D:9A:D7:CC:DD:D6:D7:A0:87:D6:B8:51:12
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:71:33:b7:95:76:ec:3c:36:15:57:bd:1c:2c:93:b8:c1:8e:
57:10:7a:ed:a3:be:38:1e:7b:b2:dd:60:5b:d7:29:2b:86:bb:
5d:62:9b:af:bd:77:40:78:31:d7:e5:fa:38:e9:a2:96:d7:f6:
53:a9:a2:d2:d1:82:5d:8a:70:37:41:f5:e7:03:4d:25:a9:ca:
19:1a:4a:8b:4a:a0:0d:06:50:18:83:e2:2c:b8:02:b2:e6:96:
52:70:b2:4e:44:b4:09:38:38:2f:e8:9c:2c:d2:fe:43:5a:3c:
a0:a5:0b:34:ed:eb:50:f7:05:96:15:63:f3:60:07:cb:e4:2d:
00:5f:1e:5b:51:5c:b2:ca:9a:c7:10:c9:29:79:27:75:c0:b0:
a5:61:4e:fc:39:14:00:11:9d:9d:a8:f3:67:80:45:4c:c3:a3:
f9:ef:79:fa:e4:b2:2a:fe:d2:4c:27:f8:56:d3:cb:6e:c5:dc:
32:d5:6b:f0:62:c8:c3:5a:73:ac:af:b0:16:c1:f6:35:6a:4f:
f7:01:09:a2:84:b9:07:05:9f:3d:4d:9b:ce:89:d0:a6:c1:f1:
59:c7:79:b7:c8:f6:ab:d6:2f:b9:73:c5:73:92:f2:16:af:6a:
fb:f9:d8:ed:86:bc:d9:fe:7c:bf:03:bf:51:3e:4d:ad:40:19:
ab:39:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:02:03 2025 by rpki-client