Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
File: 201SqwmxbXL0w-SMxLSQJdCDZ20.mft (raw, json)
Hash identifier: 7O74eQs1zfn8Cn2LsqrWaPYxYEzyEojmjblafGMSIEE=
Subject key identifier: E1:F5:51:03:C4:3A:EA:F8:E6:83:B9:51:36:70:0E:90:4D:24:E4:4A
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 0199FC21B1952E9576990BB1F9FD2F56F219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: 201SqwmxbXL0w-SMxLSQJdCDZ20.crl (hash: MUYFxqnXsUQ9SjWiEY03qJPNWFmKMytoR5DB0TGe6e4=)
2: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (hash: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b1:95:2e:95:76:99:0b:b1:f9:fd:2f:56:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=e1f55103c43aeaf8e683b95136700e904d24e44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:81:20:39:ca:d5:26:35:ec:82:54:0f:5a:
72:83:14:6f:b8:cc:66:6f:e0:5e:ab:a2:18:a9:24:
5d:a1:38:c4:38:25:bc:ae:88:27:e8:51:7c:16:36:
2c:fe:1a:5d:c5:b6:c3:80:05:0a:78:b2:5b:44:ed:
04:45:8b:30:c4:bb:c4:47:4d:2d:d2:2b:57:85:03:
aa:b4:2c:a5:83:de:5a:85:d1:bc:fb:6a:2b:c8:d8:
5e:3a:83:61:e4:6c:5f:45:dd:91:f5:8d:ef:a6:73:
8b:9c:66:39:ac:63:3a:d1:65:5b:f7:43:bb:51:9d:
67:b5:f9:b8:d4:81:fd:7f:db:49:92:01:44:78:c8:
ab:fe:ab:a6:ea:64:78:30:d7:d7:9a:d7:f8:a7:70:
59:8e:2e:66:af:9e:46:c1:e4:42:15:2d:a9:9f:a1:
20:eb:e7:b5:eb:75:0f:c0:8c:b2:18:43:9d:7f:5d:
28:f2:0f:8d:85:56:51:77:9e:d3:0b:6f:c2:03:5b:
39:3a:9f:d8:21:5b:37:44:ea:46:bc:b0:24:f5:55:
8e:86:2e:19:f5:36:42:7e:bc:e4:13:58:f9:fa:93:
e5:90:0e:bf:0c:7c:4e:6f:9c:77:83:b5:6a:ea:6c:
75:03:1c:b2:f5:42:25:ef:df:c8:df:dc:e7:40:fb:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F5:51:03:C4:3A:EA:F8:E6:83:B9:51:36:70:0E:90:4D:24:E4:4A
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:44:b7:d1:99:8f:d0:b7:00:bb:ad:23:a7:08:8a:f9:b6:c7:
09:bd:46:72:8e:c1:be:dc:e4:38:90:eb:5b:4b:46:27:02:56:
ee:23:85:cc:34:b8:a6:2d:60:67:bc:20:e4:06:4c:a9:af:19:
f2:6b:f9:3f:1a:63:29:40:cf:09:bf:4f:da:75:f1:3e:72:5c:
93:ca:39:4a:ff:11:b3:b2:e6:44:14:99:54:da:9c:17:59:81:
dd:22:81:59:cb:7a:94:06:90:17:4c:3a:3c:d7:a1:d6:52:76:
36:40:0a:fd:ec:77:77:bc:a6:f0:1a:e2:ce:d9:75:35:9f:4c:
52:81:af:b3:49:c3:c9:32:a4:1d:0d:cd:79:04:b9:d4:c7:e5:
cb:43:f2:1f:f7:31:66:26:7f:ac:69:28:36:db:f2:d2:af:80:
cf:44:03:32:6a:c2:0a:dc:f4:af:6e:32:5c:41:44:81:eb:6b:
3a:e5:ff:63:12:a6:f3:9f:08:93:d7:17:2a:c0:90:75:32:f0:
cb:59:7d:4c:c0:52:44:4a:f3:da:6d:93:60:65:6c:49:b5:21:
d0:9f:e1:9f:54:46:36:93:f6:8b:67:cf:5a:fb:3a:29:59:cd:
e8:3e:29:cd:34:c7:2b:a9:65:4f:2c:82:a4:81:a8:76:f2:03:
89:4b:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client