Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
File: SiIu0bilM4WPRljF0lOfr1Kr2qc.mft (raw, json)
Hash identifier: /0lC2KGhaASjfjJwQqMfgWvwYlq5pztfQplraLXyuwA=
Subject key identifier: 7C:70:B0:2E:8D:D9:F0:2A:E8:1C:E3:06:E4:E4:C1:44:BD:C4:DD:9F
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 0199FC8FB6455C5DF3AD3B7A5EC2284B9810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: SiIu0bilM4WPRljF0lOfr1Kr2qc.crl (hash: MrLmzSgBL6w2YfAdKjRtMtPd98jJs7u4QAXMG0a6Mqg=)
2: bpYsiF18QRf5QtGXZ_iQjax9NTk.roa (hash: sxWNeli2Kw0W0CpyWRBKMIXDOOMhbuvbRuOafrwk3qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b6:45:5c:5d:f3:ad:3b:7a:5e:c2:28:4b:98:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=7c70b02e8dd9f02ae81ce306e4e4c144bdc4dd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:e6:21:48:26:57:50:37:e6:a2:53:9d:24:
f7:49:70:a7:75:c8:69:aa:e2:97:62:37:ce:25:67:
a9:43:e9:f4:05:bf:f0:16:39:72:76:23:a8:52:6c:
f7:9e:7d:5a:6d:9b:be:bc:72:a3:7f:aa:a0:9d:00:
ec:14:33:00:64:6e:3c:59:41:ee:72:f5:36:6d:53:
41:94:a4:04:fb:7b:f5:0b:b0:4e:ac:51:30:21:6c:
39:cf:8e:e4:ce:f7:b8:ca:d0:53:d3:1b:c8:cb:d2:
7c:d0:80:2b:3e:84:80:f8:4b:5b:5d:e0:f6:8e:02:
d8:0b:2c:82:32:22:9b:5e:dd:c1:36:86:8b:e8:55:
10:c1:d5:f6:fb:95:8d:b2:db:86:b4:fe:eb:b2:df:
da:ad:82:ae:33:ca:7c:35:07:0f:17:42:58:0e:af:
a2:51:20:76:dd:6e:72:8c:bb:db:f2:5f:13:46:e8:
eb:a0:e4:60:89:f2:61:2f:46:19:44:cb:d5:0d:d0:
c6:8c:fa:21:e0:34:02:17:6b:33:ac:e4:d0:5c:13:
59:f2:4b:79:86:a2:f0:9e:fd:e0:b0:1a:ed:d6:0b:
b6:f7:1d:34:9b:33:6d:e8:28:6c:25:c2:bb:c7:05:
8e:84:81:5b:3a:d4:8a:61:f0:7f:7e:4e:60:8c:fd:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:B0:2E:8D:D9:F0:2A:E8:1C:E3:06:E4:E4:C1:44:BD:C4:DD:9F
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e1:94:01:b8:01:89:7f:3e:95:eb:ba:16:75:6b:02:38:c1:
cf:a6:09:cc:15:34:90:11:f5:05:68:df:dc:e8:ff:6d:7a:25:
69:95:94:d8:f6:72:a7:1a:eb:26:7b:b7:33:1a:ee:8d:2a:b0:
b0:65:94:9b:7c:8c:0f:93:b1:df:45:b5:e1:e8:e1:f4:ae:2f:
d3:aa:e7:ce:bc:e0:8b:7e:a4:99:56:f1:21:b5:d3:7d:6f:83:
f1:e0:86:8e:a9:6e:0c:a1:80:6e:b2:1a:5b:b2:8f:0f:d7:72:
96:c8:5e:bd:8f:00:c6:81:14:6b:fb:89:aa:dd:3b:ce:83:f1:
3b:5b:07:eb:83:4d:14:1d:dd:f7:5f:3f:f2:f5:e0:61:68:cb:
4c:fd:06:ce:ed:c2:d5:01:b8:3e:db:d3:ad:e0:cf:62:53:39:
47:3e:20:88:d7:24:7d:c0:b1:12:7a:bd:a2:22:3c:ae:02:9b:
2f:ba:4a:e5:be:40:ec:4c:70:ed:f9:06:03:2f:1d:b3:bd:28:
f6:11:f1:b1:97:c7:c0:5a:4a:aa:6a:f4:b4:d3:7c:cd:78:d7:
37:c7:68:79:06:4e:8d:4b:2b:f6:5d:22:6e:a7:7a:b0:1f:07:
00:e2:1f:e7:71:e8:c5:e8:c6:30:b4:e8:25:2d:5e:a0:48:f9:
99:62:98:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:37 2025 by rpki-client