Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: P18F11ZfybEe97dUc9OFHer9aYLHsu7CA6WKeO8otnY=
Subject key identifier: 1E:D1:40:91:56:88:B8:4C:A8:58:EC:5D:DB:45:B1:C9:FF:B4:80:69
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0199FC2158D7649B7D1CF24E2DBD1FF8513C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 4Zj4bZa6+ctU4Mw4EYePHpqhED9O5gJoOTnmnIhaSVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:d7:64:9b:7d:1c:f2:4e:2d:bd:1f:f8:51:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=1ed140915688b84ca858ec5ddb45b1c9ffb48069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:11:db:08:e4:d7:70:5d:34:bc:99:f2:b7:93:
d3:60:ca:7c:2f:b5:c3:52:1d:3e:39:98:ec:21:7e:
61:52:f0:17:d8:03:e2:ab:41:da:67:3a:b9:02:46:
c4:bf:d4:3a:ab:df:66:f3:4d:7f:d7:05:46:21:ee:
2b:a3:9b:bd:fa:05:c4:a7:67:02:7a:39:bd:a7:8e:
53:97:2f:7d:6f:49:90:31:65:1c:16:c4:5b:36:1c:
2b:82:29:f3:ec:71:de:f6:e6:37:be:94:5d:73:f3:
42:66:5c:52:2c:16:e9:4a:87:29:ae:a7:36:94:b8:
46:02:5a:78:aa:ee:41:72:bb:48:1d:1b:29:97:0e:
e3:20:1f:ea:b5:16:04:08:ac:86:60:c7:d6:15:b0:
be:9d:63:1a:b1:b9:9b:9e:dc:e8:8a:60:90:14:47:
73:c1:5a:50:34:92:89:7b:17:2e:cd:6a:4d:7c:bb:
3c:a1:3a:d1:20:f5:1d:35:19:d9:18:fb:fc:b3:dd:
e4:0e:9c:03:82:ca:34:f1:96:0e:22:7a:db:3c:71:
6d:06:38:4a:65:36:f6:b2:de:7f:b0:c0:df:28:3c:
d8:69:7e:bd:bd:fe:e4:fd:cc:a5:c3:52:51:09:d6:
86:ff:16:9e:39:50:cd:78:0e:67:f0:6b:2b:91:a8:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D1:40:91:56:88:B8:4C:A8:58:EC:5D:DB:45:B1:C9:FF:B4:80:69
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:02:bd:b8:10:4f:be:54:de:58:c8:bd:e8:fe:06:34:66:76:
97:4a:6a:cf:ac:f1:a5:bc:49:3b:1b:de:6a:6e:62:ef:37:bd:
a7:7a:2d:29:4a:ac:88:03:53:c9:47:31:55:8f:5a:38:1f:41:
72:84:59:b4:0c:9e:46:dc:b1:6d:5d:06:a1:0f:1f:5f:78:55:
02:e6:3e:e1:84:4e:2c:ec:50:06:b2:81:97:6a:b8:e0:b9:2a:
72:bc:a0:33:45:2c:0d:59:b2:ad:9e:d0:26:78:db:9d:7b:87:
8d:ee:62:06:30:fb:8e:ec:30:e6:6c:42:9a:7e:f6:87:e4:5f:
66:75:43:8d:1b:22:ee:7b:9f:bf:ee:44:61:d8:f9:23:b6:22:
87:56:37:4a:1b:cc:83:50:86:5e:92:77:06:ff:9b:14:b8:d5:
e4:26:0e:c5:d6:d7:de:c0:24:b9:77:14:0e:67:b3:ac:87:bb:
ef:b4:24:d4:ba:47:9c:55:01:a4:cc:9b:5c:96:df:a9:5e:8b:
1b:96:c0:85:db:fc:b7:d0:b4:c9:f3:3b:3a:e1:7b:b7:7f:89:
7a:d0:8b:88:f0:af:d6:dd:ec:df:d8:47:29:fd:45:ce:37:ad:
72:72:93:1c:6d:8f:31:82:ee:14:e4:32:97:d8:ad:e5:62:87:
d0:b4:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:33 2025 by rpki-client