Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
File: r4jIvS2oviecF3KhEQqjiPDvEQI.mft (raw, json)
Hash identifier: OmtGK8wTxiWOcs+XRXTvMb8xv09aGIj2gb0DadrTt7E=
Subject key identifier: 7B:FD:E9:09:3F:92:3B:48:5B:9F:28:A2:B8:E7:C1:BE:04:44:84:BF
Authority key identifier: AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
Certificate issuer: /CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Certificate serial: 0199FBEABC8176BB7DE2AD1E146CE90A6AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: V6I7xtb-s540gCh7ELkbFAWWNm8.roa (hash: 4XfEuv+JUU8dRovsqOYBux0Sp8hqu4SxoGQivq4ciLk=)
2: r4jIvS2oviecF3KhEQqjiPDvEQI.crl (hash: wPDsQV0a7SuZ1AP7b1/8ymAviKrx26YVVcs31w1VT04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bc:81:76:bb:7d:e2:ad:1e:14:6c:e9:0a:6a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88c8bd2da8be279c1772a1110aa388f0ef1102
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=7bfde9093f923b485b9f28a2b8e7c1be044484bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:ca:b5:00:ac:20:db:35:a6:07:e4:4a:a7:
82:3a:9f:85:de:2f:18:fc:6d:47:1a:bc:39:3e:85:
fe:6e:a4:80:48:30:33:75:f4:4d:ea:6b:18:9c:ef:
50:97:1b:4d:49:c4:12:0a:ec:6f:17:12:20:16:95:
86:1a:38:ef:18:8d:44:eb:b5:f4:fd:a2:a0:65:10:
b5:d0:ff:23:e3:35:fd:87:0c:4a:d8:a6:e2:5b:22:
c5:0f:8b:e7:2c:dc:54:04:04:1b:30:e9:38:32:19:
76:5f:e6:c2:d8:a1:99:d6:3a:3b:6b:7e:cc:81:a8:
ab:5f:63:5d:f6:87:32:06:d2:60:c1:a3:03:99:8f:
ae:50:c5:f7:03:10:08:5b:e2:42:68:a4:53:30:77:
e5:38:4a:60:f5:b6:e6:68:ba:2c:7b:f8:b3:20:89:
8e:7f:8e:8f:83:69:4d:9e:4b:9d:a9:ac:52:0b:ca:
56:cd:cf:60:c7:83:cb:81:b0:41:26:92:e7:28:03:
e5:8e:38:af:3e:fc:e9:c6:65:e7:13:ff:63:65:77:
bd:bb:d5:af:93:2d:1b:6c:4b:06:cb:4a:83:46:4c:
e5:5b:a7:38:0e:ee:37:8e:79:e2:9c:aa:bc:7a:70:
d5:c2:c5:4e:04:56:3e:16:a2:0c:bd:e6:6b:0a:51:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:E9:09:3F:92:3B:48:5B:9F:28:A2:B8:E7:C1:BE:04:44:84:BF
X509v3 Authority Key Identifier:
keyid:AF:88:C8:BD:2D:A8:BE:27:9C:17:72:A1:11:0A:A3:88:F0:EF:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4jIvS2oviecF3KhEQqjiPDvEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f2f1d3-f4c1-49df-9d41-bc76caf07860/1/r4jIvS2oviecF3KhEQqjiPDvEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ca:ad:92:cd:41:c6:bc:71:9a:de:59:4d:15:a1:48:38:9f:
ec:f3:7f:9c:f8:1d:ba:58:a6:f6:95:3f:2e:fa:9d:2e:5b:e0:
83:b2:62:b4:fd:66:38:6a:81:0e:46:f8:9a:41:63:12:17:16:
be:d7:b8:19:d6:e6:7d:f7:11:04:04:aa:58:e2:52:6f:46:58:
0e:71:af:25:25:78:b6:56:bc:79:85:c7:8d:7f:10:cc:34:43:
e4:1f:47:4c:d0:65:75:31:8a:4a:08:9e:d8:c3:88:e8:86:27:
27:f6:06:8d:ed:7f:65:fa:05:63:37:9d:dd:bb:40:d0:8b:1e:
46:5b:f0:23:40:fd:2b:87:19:1b:ee:ea:eb:70:a0:34:07:33:
c6:3d:fe:33:9b:19:9b:4b:6e:7c:a1:85:a9:9d:1a:c3:fa:33:
29:6c:41:43:45:aa:b7:ea:c9:e9:32:a0:5e:51:ee:41:3d:82:
df:e8:3f:f0:3d:b2:95:82:be:0f:67:6b:e9:fc:14:f3:d9:1c:
ef:b9:3f:6d:05:4c:ec:85:77:81:ce:cc:99:bf:48:d4:0a:a2:
f8:05:9a:76:c5:f0:8b:94:eb:ed:b3:d0:7b:97:7c:e2:34:37:
2c:70:ae:3f:f0:66:d8:ae:46:84:24:a4:bf:ab:5b:da:31:c7:
25:d7:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:19 2025 by rpki-client