Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: RzT3LJ2LiMD4G2vkfAldxk074OMTt1XrCo8DRa89T2E=
Subject key identifier: EC:16:F1:C5:3C:A0:8C:7E:B0:DB:30:27:57:D7:AF:06:6E:D5:8D:89
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0199FCFD6905EFE7ED794ED517C25AC121E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 0A24
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: TgzL58JGgEpt1WrXRAjwgtdEHIYGDpJNxE+wKdmxozk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:69:05:ef:e7:ed:79:4e:d5:17:c2:5a:c1:21:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=ec16f1c53ca08c7eb0db302757d7af066ed58d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:25:8c:5b:f0:7a:49:96:bd:81:49:ea:d5:
72:9e:47:d5:72:93:97:93:d5:dc:ca:8c:47:56:05:
c5:32:58:a6:64:e1:e9:d4:d2:81:83:a6:34:70:b0:
03:ca:8a:2a:a6:71:a8:e1:4b:5c:92:4d:f4:86:93:
50:24:3a:5d:d1:aa:32:26:ca:da:0d:e9:2b:6c:50:
21:48:e7:71:4a:7b:1e:7d:98:05:8b:2e:44:1e:90:
51:4d:02:5d:f1:ab:9b:ee:9c:b2:3c:c6:4f:a8:58:
b3:3f:5c:94:56:be:ec:bc:d7:53:4e:24:4a:be:d6:
2d:8c:1e:00:7a:ee:33:1a:55:a0:0d:d8:54:12:94:
c2:1b:d6:3c:fb:1d:96:68:a0:99:b9:c6:f0:19:71:
2a:9b:71:3e:f0:99:7b:38:7d:03:f0:70:a2:86:a7:
67:16:0a:58:bc:63:a1:77:4e:24:a7:37:15:a1:d1:
36:fc:b0:ae:39:df:92:2d:c0:08:cb:2c:5b:49:c0:
fa:f5:be:b2:b4:5d:2a:a1:6a:38:d6:23:f8:cf:54:
81:04:f1:fe:ea:24:19:7f:13:d4:5b:30:15:87:4d:
62:d5:1b:eb:e7:bc:ca:5b:66:cf:d7:32:6b:18:ca:
47:43:4e:be:74:24:96:00:06:f3:51:e9:4d:6f:c3:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:F1:C5:3C:A0:8C:7E:B0:DB:30:27:57:D7:AF:06:6E:D5:8D:89
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:40:2e:b8:ad:55:f4:19:c3:c2:bb:91:38:41:14:07:85:
b6:ae:ee:4c:98:fb:0e:26:8a:95:c7:85:2b:d6:4b:3e:43:98:
c3:f6:d3:ea:d3:92:f9:cc:2f:85:12:d9:63:c2:57:3c:ef:50:
ff:ca:1a:cf:c3:1a:74:4d:39:c5:5a:a8:23:6d:2f:2c:fe:a7:
2a:8a:9d:a4:1e:4a:ae:c8:64:63:52:ec:34:3f:07:9f:02:93:
0e:16:6b:4e:59:ff:fb:8f:02:e8:79:cd:58:59:ad:ca:9f:08:
5f:f9:bd:ae:27:62:a3:31:96:63:43:60:60:c3:8d:27:fe:05:
71:5e:15:29:df:d1:f5:a0:f2:45:d0:11:b8:c5:5f:b4:e0:9a:
e1:82:7d:39:e8:21:d5:a4:76:e0:87:53:62:51:1a:9f:0d:8d:
d0:91:b1:f9:5b:85:43:3e:85:0e:dc:a8:d9:2e:69:01:0b:aa:
15:10:8d:6f:28:ea:05:c3:22:ac:ba:40:81:42:51:11:ee:1b:
91:fc:9c:e1:44:60:8a:ce:1b:41:d2:e0:6c:da:6e:59:b8:68:
a3:77:36:c8:c1:ab:75:2a:29:76:89:75:cb:84:e4:f2:6b:9e:
35:4b:ca:c3:a6:e1:d4:60:a3:40:e8:ec:01:56:e9:dd:d2:30:
63:72:91:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:44 2025 by rpki-client