Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: WSXWbZDv5eJ5aU7wy0YaoayMejClNC5JzbA93lXHbro=
Subject key identifier: 78:63:A8:86:7B:DE:55:C2:96:E7:A5:43:0A:AC:A7:21:69:44:9C:52
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 0199FD6B552490586058F10BA1D43DF13A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: AkKW7m-MHHB19PTWABc4m9rKocs.roa (hash: qHV2PtoHadaa9NwNl5xTEsUFUv4QzTCLjq+mny689nw=)
2: _GG8qubp_g9Px6E1DCD6hAdsvxo.roa (hash: 7gqHqwq0qb4WMuA79mugfXtlkRY7UZiMzeqs0bw/bLo=)
3: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 9d31y16W2Et+B1ouKDl8DSZn8VefHYrIq3WLdyd50v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:55:24:90:58:60:58:f1:0b:a1:d4:3d:f1:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=7863a8867bde55c296e7a5430aaca72169449c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:bc:c6:9a:ed:22:ca:a0:22:f3:6f:c2:30:
eb:6f:11:8a:e3:54:12:7e:4e:21:a8:ef:38:1f:bf:
bd:aa:b9:ed:dc:4b:5c:c0:fc:b7:5e:69:e4:c1:da:
77:e6:6c:be:e6:4a:9a:cb:80:48:27:71:34:1a:f9:
e2:11:fe:1a:58:6d:be:b9:48:c4:ee:36:b8:31:fe:
4a:61:b0:66:65:17:bf:34:58:42:2a:0d:51:ea:a8:
23:ee:c3:9e:08:00:75:d6:34:0a:05:ea:07:4e:b9:
7f:c3:22:6d:90:d4:ae:6b:5d:03:c8:c9:9a:6a:92:
11:c3:87:14:f9:44:53:2c:2b:3c:ce:5a:8e:ee:5a:
f6:93:13:72:0f:ac:c2:61:2c:dc:a4:e2:78:4c:f5:
d2:3f:17:e0:fc:f5:68:78:25:f8:6e:af:85:1e:3a:
5f:61:9e:05:f1:a8:7f:4c:13:42:46:f7:da:53:3f:
f3:37:1e:16:a4:20:66:0e:76:fa:c6:24:98:3c:70:
fd:67:aa:44:23:b1:5d:48:e9:89:7b:4f:14:08:58:
25:29:9b:39:fd:72:bc:70:99:9e:b5:e2:c8:74:f9:
8f:9f:51:de:13:0d:e6:43:a8:79:36:8e:a2:27:30:
09:7e:8c:aa:58:75:b5:2c:38:ea:d0:8d:7a:60:32:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:A8:86:7B:DE:55:C2:96:E7:A5:43:0A:AC:A7:21:69:44:9C:52
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:85:38:7a:f7:b4:cc:67:53:a8:d6:c5:48:19:0b:17:34:
ab:4c:b5:93:d0:ee:09:56:db:f1:7d:b4:f6:b7:6b:5d:31:40:
0a:d8:e5:ac:e0:ee:16:41:1a:97:93:9b:11:26:bc:67:df:f5:
9d:d4:86:1a:36:d7:03:93:6a:92:15:84:24:4a:29:d9:91:bf:
c1:39:b1:4a:83:48:fd:d2:de:0e:2f:32:04:42:8a:57:db:e5:
08:01:e7:46:55:ee:fa:ce:8b:d5:eb:37:11:c6:3d:df:d8:d4:
30:65:43:47:48:16:23:50:b3:29:53:f8:74:c1:dc:78:bc:14:
ae:7a:5c:c2:14:38:42:43:d4:2a:2a:d1:fd:75:f4:16:a9:47:
ec:68:89:76:4d:cd:8a:0b:5a:01:d9:c2:d5:b0:f5:39:49:e7:
e6:8e:b8:df:47:d1:e1:e8:a5:95:e4:9c:57:c2:01:86:9e:03:
ab:93:51:0d:b2:6d:9a:36:df:2a:89:6f:cb:e4:0f:3f:e7:04:
d8:c2:01:7e:96:d0:72:20:a8:e8:27:ce:d1:cf:4d:15:b7:1a:
ab:98:1c:7c:21:b3:ae:e7:39:32:ed:60:23:18:81:38:51:8e:
b7:a6:77:42:60:47:a3:76:49:20:b7:b6:82:6f:3b:ce:2f:34:
a3:a6:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:53 2025 by rpki-client