Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File: j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier: OkxqQ3+qucWzkGT/SNTL+gD920WRFxrezyREeC19wTg=
Subject key identifier: 1F:8C:7D:65:53:1E:16:4A:CE:FC:BC:08:E8:C5:B6:59:37:5D:2D:C1
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer: /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial: 0199FCC6C62DC71372A78029E5E849C211FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: GI5eR-bcyPUXcabh8oF3ym-w-jY.roa (hash: HMe9khM1DXfAv5MN/QlZDROBBZj6X8B6CZKWjkcWcFY=)
2: f1jshjvqQC1or_SUp4VaHxnz0vg.roa (hash: HU3zUMPmn0Fu+40+47r6GzF5dnxd/KAN0UXFve0A1sw=)
3: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: CxCvs0HOZrZE57yz3NYU87HERX+liq39qtj6EbDU0Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c6:2d:c7:13:72:a7:80:29:e5:e8:49:c2:11:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=1f8c7d65531e164acefcbc08e8c5b659375d2dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:6b:e7:ec:72:22:61:29:84:b2:0c:4c:b1:
f0:bd:97:08:b1:79:0f:09:f3:97:bc:70:97:cc:2b:
b1:d3:60:e6:a5:4f:07:22:6f:25:b7:18:d2:48:f9:
f2:7a:e0:c4:db:b2:0f:ea:39:f7:d4:cf:df:82:df:
f1:4e:12:5f:2a:b2:ca:0b:a3:8e:14:c3:d5:c0:f8:
ec:76:db:f1:7e:13:23:69:5a:1b:ea:2b:ae:b9:59:
06:5c:67:31:dd:d5:f4:a2:d0:4b:a3:bc:23:ce:33:
cc:ef:4d:c8:8f:cb:a3:b1:73:cf:ce:d5:9d:f9:9d:
0e:05:39:21:70:d8:5a:e3:10:84:79:9e:fc:6d:6d:
67:38:b5:e2:5d:5d:37:82:34:a1:1f:29:95:e3:3e:
a5:24:ba:23:a0:8e:b8:1a:e3:70:53:4a:15:1c:66:
28:3a:26:5b:16:61:18:b9:cc:b9:af:7f:c8:4b:ae:
a3:90:d2:54:1d:cd:83:9a:95:c2:4b:52:41:0b:b2:
c4:f7:73:2b:0e:58:88:9f:0f:ff:f6:79:85:f4:e8:
f1:22:72:35:87:e8:6f:3f:32:ac:cc:4e:1a:2c:c3:
5d:4f:41:f5:39:cd:17:65:9b:0e:a8:6d:e1:d6:22:
43:68:91:e3:4c:bf:24:fe:cb:4c:92:4a:e7:10:b0:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8C:7D:65:53:1E:16:4A:CE:FC:BC:08:E8:C5:B6:59:37:5D:2D:C1
X509v3 Authority Key Identifier:
keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:d5:bb:f7:24:a9:a1:8c:65:e4:ef:66:53:ef:16:21:d2:
02:3b:54:76:d3:52:5e:d7:e8:1c:9a:0e:83:3a:34:dc:7d:ad:
58:e9:92:d0:7c:85:36:15:29:9b:6f:a8:98:81:62:1b:92:f5:
97:9f:a2:cc:97:b4:63:9b:be:3d:2b:70:82:3c:e2:85:71:fc:
9d:8a:94:4f:36:51:c5:68:7f:09:ee:a9:07:d6:8a:27:67:6a:
b8:94:ac:12:3b:d2:03:3b:0e:48:0f:ee:c4:09:0b:56:0e:fa:
4b:7e:85:24:eb:d7:47:b1:2c:29:21:22:8f:10:f0:4d:ad:85:
5f:18:9a:16:9b:a4:81:e0:35:56:e2:bd:89:a2:0a:8e:bc:7a:
e3:82:5d:09:83:80:49:7e:d5:f4:de:fd:28:9b:dc:bc:39:4b:
63:46:47:f8:39:90:2d:82:43:2a:6e:d0:86:14:e7:17:47:14:
e3:ad:a9:85:74:fa:f8:98:be:35:27:cb:f2:af:97:43:8e:7e:
f5:d2:7d:9f:18:c1:32:d6:cf:9e:12:a2:00:d5:6b:1c:06:b9:
f9:3e:a3:11:37:d4:8d:06:58:15:8b:b8:2d:4a:ea:9c:07:55:
68:34:c7:df:f8:46:91:f1:f4:85:e2:86:41:49:b5:d7:bf:0a:
5b:55:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:19 2025 by rpki-client