Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: IX0ah+lyNn+6qqfbAMrUFTUDoDj2YHgwCdK4bFTRE20=
Subject key identifier: F8:3C:47:C9:33:A3:7C:F4:48:AD:80:AC:E1:AD:76:A1:EA:46:38:AF
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 0199FC213D85EEC0A917F82E32ADCC4F85C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: vZ6oaKe4TOHjLUbnfQP42zjIilka55lrx/wSXNatWlQ=)
2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:85:ee:c0:a9:17:f8:2e:32:ad:cc:4f:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=f83c47c933a37cf448ad80ace1ad76a1ea4638af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:c2:dc:f5:a7:d6:33:91:39:2f:94:2d:5c:
b4:9f:97:62:7e:1c:15:a7:39:94:8e:fb:57:61:56:
9b:64:82:9e:ba:d6:77:62:4f:b9:3b:d9:f1:02:79:
44:d5:a0:c7:aa:66:20:88:ee:b5:c5:e6:06:aa:3b:
4e:e4:a0:8b:15:18:62:a6:e7:aa:2e:a5:21:c3:d8:
84:78:0e:ed:1c:97:8c:d6:4f:c4:36:2f:27:f4:ae:
b2:07:bc:17:f8:3e:ef:4b:d4:c5:78:24:56:b7:25:
df:af:49:5c:08:a4:dc:dd:68:e5:62:ac:a3:76:12:
c5:89:6c:a8:bc:3f:36:ff:ef:7a:88:8b:61:75:7f:
04:f0:91:75:53:3e:f9:59:58:ad:a4:7b:0c:67:05:
10:9d:00:09:34:45:38:a3:61:ec:47:3b:bd:e5:de:
ca:7b:37:d2:ef:10:9d:8a:b4:ae:58:52:73:ac:f8:
1d:5b:16:70:43:c6:11:ac:b9:90:8f:9a:66:a2:9a:
02:72:6a:08:f6:1c:5f:f9:7c:6b:fc:f6:c7:5a:50:
0e:a1:f4:2d:eb:b6:00:29:2a:57:65:bf:f6:26:29:
57:dd:d0:ab:36:58:80:5d:b8:dd:de:96:03:ac:1a:
f5:3e:a1:3d:fd:fd:73:5e:1c:73:22:3c:ca:91:57:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:47:C9:33:A3:7C:F4:48:AD:80:AC:E1:AD:76:A1:EA:46:38:AF
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:0c:6e:3d:c7:1c:e5:ed:ae:9c:d4:f7:2c:49:e6:72:1b:
54:30:fd:82:a1:70:3b:ab:da:b8:b8:92:3e:96:a3:7d:d2:f2:
9b:32:69:c0:c1:00:90:8d:c9:56:0c:99:fc:ff:a2:71:ff:c1:
e2:99:44:62:9e:7e:25:d3:9b:b4:4b:0a:8c:97:c3:6d:8d:92:
f2:32:c4:a1:7d:e4:c3:4c:0b:a2:6e:7c:5f:29:02:81:4b:a9:
54:73:d9:a8:5e:c5:b4:b5:00:32:93:93:c3:8d:10:85:61:7a:
c9:e6:56:12:c6:eb:21:4b:d9:ea:6e:88:0e:66:87:91:20:a3:
02:75:54:27:38:99:53:7d:ad:d3:38:8a:fb:3d:26:08:b2:ce:
c4:83:ba:b1:9e:e9:c3:37:49:e2:35:47:2b:df:43:b4:25:3c:
5c:81:c2:78:c5:df:90:74:6f:ac:ee:03:3f:7b:d5:79:58:73:
45:ea:02:eb:4a:bb:08:b3:0c:bb:38:c1:9b:69:90:99:6c:49:
f8:b3:4a:06:e5:c6:c0:12:00:39:cb:e3:14:ba:36:a1:8c:43:
35:fb:b7:ae:4a:01:d6:b3:fa:d3:e9:fb:98:fe:8a:af:24:b0:
00:a1:13:95:0b:cf:1e:7b:41:51:b5:06:59:b6:31:7a:a4:32:
3f:f9:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client