Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: 16HmmDiRApkUT8ncSZnl+kPKPzeiOLnEI7nVYTVH2TM=
Subject key identifier: 34:3D:88:00:EA:55:DE:A7:97:D7:60:B1:DB:FF:74:C6:11:27:6E:47
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 0199FC8F4EA37EA0C08F5C8E6C96222756F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: 2yZoMru+YJRKhOxrlRDsrvrMCxgdTEMu2HDreMIV8+w=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4e:a3:7e:a0:c0:8f:5c:8e:6c:96:22:27:56:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=343d8800ea55dea797d760b1dbff74c611276e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:6f:91:ea:6a:27:e2:0f:23:d4:c4:3c:4e:
43:94:7a:0e:bb:c3:ff:8e:b2:38:16:a2:c6:35:54:
62:b7:5e:9a:31:cd:57:80:3b:1d:53:57:c6:1f:44:
a2:66:b2:1f:42:24:c8:75:1c:d0:da:9b:18:f7:43:
7a:8b:05:fc:37:37:2a:a9:74:ce:c2:08:15:43:4b:
e6:70:05:e1:88:6c:81:34:c7:ce:9c:ba:9f:39:54:
49:dc:32:5f:02:0b:a8:68:0a:5f:a7:50:3f:7b:38:
54:cf:cb:ec:72:ca:a4:87:8b:d9:8c:ae:40:4e:00:
da:9f:90:83:03:ab:df:f7:72:7e:cf:98:35:89:11:
09:aa:c6:e4:e7:37:f3:ee:7e:c9:7a:68:15:0c:60:
a0:36:46:e7:0e:5d:0e:b2:e1:a0:1f:65:c5:d4:64:
67:84:be:d3:d1:6e:e1:c3:ea:c3:bd:d9:5e:ce:a6:
4a:33:90:0e:f5:62:10:60:3c:a4:59:b5:3d:30:39:
cf:10:5e:b9:42:76:79:78:07:b0:3d:19:f1:b7:13:
7c:bd:77:8b:d6:33:b7:56:08:92:60:a1:66:51:f8:
c6:57:bd:bd:9b:26:98:47:2b:0c:ba:19:88:64:e7:
76:e0:59:50:aa:99:78:de:2a:f0:b9:67:65:c7:d2:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:88:00:EA:55:DE:A7:97:D7:60:B1:DB:FF:74:C6:11:27:6E:47
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ae:1a:3d:87:cc:45:68:5d:35:d5:b9:3b:25:94:77:13:de:
33:9d:8a:b1:cb:98:84:f8:ab:71:8c:ec:ea:4e:bb:02:58:ef:
5a:7a:4a:c2:ce:bc:10:6f:a8:a9:ac:5c:b5:f8:ca:6f:04:2c:
9e:dd:fd:19:e4:d5:ce:f1:2a:67:91:9f:28:5f:7c:80:2c:a3:
38:ea:4e:13:fc:96:6e:54:b3:de:7e:89:a2:09:de:4e:80:37:
70:4b:51:05:b1:a2:42:f9:20:5b:a4:51:89:6e:6f:93:2c:4a:
9d:7b:ec:ec:99:b2:03:dc:38:58:de:74:57:c4:2b:5b:50:5e:
b3:69:89:fa:8f:c0:9e:7b:3b:f8:f5:54:60:a8:a1:6f:e4:c4:
4a:82:93:fd:09:48:93:5b:c5:3e:cb:56:ef:36:6c:17:2d:8c:
d3:96:b7:81:46:75:ce:03:5e:4e:3f:01:2c:e5:dd:1e:6e:68:
0b:b8:ad:0f:40:6e:2d:bd:6c:de:85:48:6b:84:3d:79:1c:3f:
f8:2d:e0:26:8f:17:29:2b:70:88:c4:bf:90:5a:5a:02:bb:51:
cc:28:bf:3f:b3:a4:ec:a8:11:b7:a8:66:71:6c:90:af:73:3a:
d8:b1:b1:f0:59:43:4f:92:0c:e5:fc:9b:7b:ba:7e:2d:dd:93:
d5:c6:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:36 2025 by rpki-client