Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File: V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier: +q4VNW1zs32kEj/7XtTfre7DHWANxDqkDU8rvkABgQI=
Subject key identifier: 3C:C2:C9:7D:BA:11:3C:CC:A4:70:D0:FB:EB:5B:0A:C6:1B:B2:0B:DC
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer: /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial: 0199FC8F507B39429D75FB77409272CE251B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: eFngI9/XdXtQCZdoIFTj7O7iGOPktbhHvFNPR3lQZ/I=)
2: hJUOwaTvP74lE8UHTrGlvy92Ql0.roa (hash: AMxeUVD26hTz30vzgYyULbbdEqiL9GrkX+UdMqFq2KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:50:7b:39:42:9d:75:fb:77:40:92:72:ce:25:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=3cc2c97dba113ccca470d0fbeb5b0ac61bb20bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:52:4a:2e:25:c6:7f:90:f9:d1:cb:59:f2:
f9:f8:64:41:82:61:7d:70:e9:e7:f7:12:43:d6:5e:
96:07:ac:94:f8:04:17:51:71:d6:c7:7e:a1:28:63:
b9:94:1b:d6:da:d5:ae:9e:95:b3:22:cd:30:af:74:
ec:19:25:92:80:4f:61:0c:97:09:96:23:4e:63:e0:
b3:ff:92:63:c7:3f:df:5f:63:b4:19:87:f2:0a:9c:
ca:3c:22:e4:07:18:2f:9f:33:b1:0d:9a:13:98:9b:
fb:0e:3e:db:c3:1d:46:bf:84:cc:ad:08:25:da:8c:
8e:92:bf:fd:6e:ad:4c:1f:8d:9b:60:84:24:ec:da:
8c:37:eb:89:17:d1:78:4d:31:a1:81:9d:9a:ee:49:
53:20:ad:41:a4:8f:37:4d:f3:f6:ab:69:a4:4f:ce:
a3:3e:80:a5:cf:40:fd:1a:6d:dd:ae:d4:ef:da:0b:
5e:83:fd:f1:c2:ec:f9:8f:58:21:b7:65:74:d8:f7:
44:3e:3c:52:b2:df:6d:0d:52:a2:ed:11:c6:76:ad:
5e:f6:9f:e8:42:c0:fe:77:89:d9:fe:82:54:aa:10:
19:41:d9:cb:01:41:4a:58:b4:12:77:9f:ef:d9:5f:
4f:e5:2d:a0:3c:f9:fd:64:25:e6:d5:d0:8a:0c:7b:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:C9:7D:BA:11:3C:CC:A4:70:D0:FB:EB:5B:0A:C6:1B:B2:0B:DC
X509v3 Authority Key Identifier:
keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:6e:28:c7:9a:38:22:b9:86:24:6f:c2:d4:0f:18:9b:78:b5:
1a:66:d0:e3:2c:46:75:a0:43:39:f5:ff:19:d5:94:6f:3f:52:
d2:19:49:71:df:eb:15:0f:4d:0d:7c:50:0c:d3:0d:9b:74:83:
1b:e4:5f:6d:11:81:56:a3:38:a6:75:0d:a2:52:47:85:df:56:
73:97:9a:05:ac:c6:33:d2:29:a3:82:ba:90:bf:7f:ae:94:c6:
43:40:c3:34:be:b5:6e:46:87:73:97:61:72:2d:1a:d8:1e:6e:
0a:05:2e:81:9e:1e:94:9a:b1:09:85:93:96:45:95:2a:40:6c:
c5:28:f8:17:f5:b8:3a:13:2b:01:2f:b6:e8:53:86:d2:f9:8d:
3f:83:52:9f:ad:b3:65:3d:2f:ff:4c:75:62:7b:c6:ce:b1:bf:
42:bc:4e:f4:38:b1:3c:20:1a:0b:94:ff:2a:92:ce:31:69:d2:
ff:ad:19:05:e2:d5:e6:8e:5c:4b:24:f3:83:9c:a6:fd:fd:e0:
34:84:08:1f:39:0b:1a:d4:4d:80:be:4e:1f:46:0f:45:0c:0c:
b7:69:59:c7:c8:18:cd:63:a5:1a:9e:45:de:7a:46:fb:1c:9b:
c3:9f:fb:97:8d:08:db:76:ca:23:b7:4c:06:13:28:e3:47:4e:
98:05:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:25 2025 by rpki-client