Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
File: RnSvG73Eykg8ZpxP4L3XZLisFnU.mft (raw, json)
Hash identifier: 5ZFbbsM5m8mYJ7AmSxPUu4kPUgMj+dQK1ENO4OrnAnI=
Subject key identifier: D9:30:F4:12:95:28:A9:A9:97:44:E5:F2:8A:26:1F:10:FF:E7:01:0F
Authority key identifier: 46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
Certificate issuer: /CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Certificate serial: 0199FF229AFF2855E94DEAA47B361764FDA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:21 +0000
Manifest this update: Mon 20 Oct 2025 01:01:21 +0000
Manifest next update: Tue 21 Oct 2025 01:01:21 +0000
Files and hashes: 1: RnSvG73Eykg8ZpxP4L3XZLisFnU.crl (hash: ShwLj0MpuMZ5UyLWP9zckn787SlcN9ejyZTFMVG3Igc=)
2: beiTDj2zXTqFS71TOFpPvmffaII.roa (hash: sXUiI9l6myIN9UkpCjgTw8A4sT8JADqa4WvJBsl/hwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:9a:ff:28:55:e9:4d:ea:a4:7b:36:17:64:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674af1bbdc4ca483c669c4fe0bdd764b8ac1675
Validity
Not Before: Oct 20 01:01:21 2025 GMT
Not After : Oct 21 01:01:21 2025 GMT
Subject: CN=d930f4129528a9a99744e5f28a261f10ffe7010f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:f6:8b:73:b2:36:40:ca:93:6a:19:28:a2:
e1:a3:d8:e8:fb:10:05:be:36:93:2b:91:52:ed:d8:
12:49:62:ab:47:69:03:f2:86:f7:9f:f4:89:fe:42:
81:ef:07:8b:fb:6b:a3:e7:bc:fc:66:11:df:42:95:
87:b6:bc:a7:3e:1f:7f:45:1a:8f:49:48:99:aa:15:
72:5b:38:66:41:3c:93:b3:e2:67:ae:a1:58:cb:f5:
64:79:8b:01:ae:0a:73:21:45:8c:6a:f7:6a:70:3e:
ad:22:41:1e:6f:fb:c2:d3:68:1d:f6:fe:ca:42:d1:
30:a1:e3:0e:aa:3c:7f:c0:fd:39:ae:fa:f2:eb:c9:
5b:d9:1b:2f:09:11:ec:79:11:b1:bc:24:ae:d8:65:
b2:1e:91:d1:f5:80:80:5b:e9:7b:9d:56:4d:79:8c:
3e:a5:53:ba:fc:de:02:7c:e1:8f:89:ac:fa:8b:9f:
07:68:33:d4:15:57:42:ea:e2:1e:3b:99:0e:f9:dc:
61:32:77:5b:e2:24:2d:b9:43:e2:33:9f:33:24:f8:
34:8b:02:80:65:0b:f0:b6:c8:c0:57:52:e5:ef:21:
1f:7c:78:43:8d:a1:0c:f4:28:74:ab:05:28:6a:e6:
9b:3b:23:92:39:0a:bd:c6:42:e5:a1:36:a4:36:01:
2d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:F4:12:95:28:A9:A9:97:44:E5:F2:8A:26:1F:10:FF:E7:01:0F
X509v3 Authority Key Identifier:
keyid:46:74:AF:1B:BD:C4:CA:48:3C:66:9C:4F:E0:BD:D7:64:B8:AC:16:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnSvG73Eykg8ZpxP4L3XZLisFnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d54138-1308-4b42-a170-5492e0e4ebc3/1/RnSvG73Eykg8ZpxP4L3XZLisFnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:03:d0:b9:66:27:2f:59:18:dd:cd:18:dc:9e:3a:d6:37:4f:
eb:94:44:94:d4:7a:eb:ba:95:fc:31:19:85:03:3b:13:d9:35:
5a:da:0f:a1:4c:ab:91:0d:e3:bc:54:1f:7c:3e:51:b5:d1:8b:
5b:9a:a4:8c:2e:c6:6c:4e:ca:5a:c1:0f:1b:95:d1:3a:53:a8:
af:41:85:73:bf:61:96:f3:ed:49:b0:0a:4c:d8:17:de:20:08:
b1:d0:41:5d:4d:af:0e:9a:91:0b:3d:03:45:01:df:72:1f:0e:
15:7d:9f:a1:8f:dc:e7:c6:b8:44:2c:67:a7:8c:04:53:8f:f2:
59:32:56:d1:d4:a3:c3:1f:89:dc:05:3e:dd:f8:08:d9:d6:51:
b6:94:25:16:67:b4:2b:0e:29:09:49:e5:5a:bc:16:3a:07:c4:
28:42:0d:aa:50:27:3f:e1:58:45:be:15:7b:8d:4a:66:9a:bc:
81:d0:1d:a7:12:e2:11:01:f6:60:7d:7b:1a:9d:94:ee:ee:74:
bb:4a:4b:87:e3:93:12:bf:3b:56:aa:ce:83:17:b7:c5:ad:14:
db:f2:e9:5e:d9:90:e5:55:cf:ec:a6:75:71:75:1b:64:eb:b2:
2f:4c:c7:4f:a5:45:c8:e8:3f:31:73:2f:94:54:10:02:12:b0:
45:b3:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:11 2025 by rpki-client