Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: pp39vBoL6VBeW5LorE0NZdQuQrwbkJ2CmcqYq2EsPCY=
Subject key identifier: 52:30:3C:97:38:DF:61:0C:21:D6:1E:35:8B:E0:3A:87:C8:87:CE:C9
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 0199FE0FF379BD130C9EAB84A0A14E5F450F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 20:01:22 +0000
Manifest this update: Sun 19 Oct 2025 20:01:22 +0000
Manifest next update: Mon 20 Oct 2025 20:01:22 +0000
Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: BncZ1VMtj8QD4gQUhnkGsONfd0bv5zd2qszrK92ivhg=)
2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f3:79:bd:13:0c:9e:ab:84:a0:a1:4e:5f:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Oct 19 20:01:22 2025 GMT
Not After : Oct 20 20:01:22 2025 GMT
Subject: CN=52303c9738df610c21d61e358be03a87c887cec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:a8:a4:38:51:d6:5d:26:bb:9e:b0:1a:95:
6d:68:40:89:83:11:b1:87:e4:68:e2:02:07:70:a2:
e4:6d:92:ff:2d:11:dd:e1:2f:68:db:2b:1d:32:1f:
ed:ec:45:e3:b6:15:84:f3:22:e1:91:af:f4:9d:83:
af:25:e6:c0:15:38:7e:37:04:2a:fc:ef:95:c9:c5:
e8:e6:c5:a2:c6:50:a0:8b:6d:e6:5b:1f:02:e8:3c:
01:c3:f9:1c:37:5a:34:84:ad:8b:82:e7:32:f9:81:
bf:c3:c3:34:b9:ad:b9:f3:4a:8d:e7:8a:34:f5:ed:
3a:c0:cc:9c:6c:23:69:7c:bf:72:10:0c:bd:c2:a5:
c5:ea:81:3c:e5:92:64:e9:92:f7:20:c8:ad:51:30:
2d:a1:ee:c7:f2:72:48:cd:16:fe:f1:9d:78:ad:73:
a9:ec:01:ca:8d:fe:92:19:63:e7:ab:a6:47:00:e0:
cd:cb:12:34:98:cb:9c:77:72:81:e8:7a:49:b7:a7:
16:c2:15:c5:cf:0d:4b:eb:9d:e4:61:76:e1:eb:64:
bc:bb:fa:ab:6c:1f:05:a6:2b:b2:c0:e1:8c:97:3c:
ab:92:47:df:91:77:d4:c2:1d:f8:04:e8:94:4d:ba:
c3:9b:df:0d:73:4f:31:8d:9b:b4:d6:e7:55:c7:01:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:3C:97:38:DF:61:0C:21:D6:1E:35:8B:E0:3A:87:C8:87:CE:C9
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:16:47:bb:77:5e:5e:2c:62:bd:4e:63:87:01:49:f9:85:
aa:5d:af:f5:21:44:59:72:25:aa:37:77:b9:9e:10:14:b3:a4:
c8:db:53:ca:df:a5:df:a9:bb:11:de:70:3e:29:ad:88:e3:fe:
3f:40:b5:14:18:5b:57:cc:da:77:f8:71:ba:4a:1f:40:c5:88:
7c:0c:33:19:55:3f:3d:3d:0e:9a:ba:de:21:5e:ec:49:44:e6:
40:f2:99:16:f9:d4:04:c8:12:fb:b2:a9:56:0a:fc:26:1d:2b:
29:35:e9:9a:2b:c0:4a:5a:8d:78:4b:92:ec:72:2b:a7:b7:83:
2b:69:24:3c:bd:7b:aa:24:5f:13:c9:fc:07:5d:5c:07:ca:09:
9f:89:cb:2d:d0:ea:1d:bf:7c:ac:cb:00:c1:8d:e7:af:3b:c1:
1b:04:be:c4:c4:6c:97:61:45:a0:76:e9:2d:1d:79:dd:05:89:
92:25:ac:1e:27:66:92:e0:ff:08:8f:e9:24:7f:de:09:41:5b:
ce:fe:a0:58:1d:3f:43:06:c8:25:82:6c:9c:ba:1e:f7:f5:f8:
74:57:81:9d:72:60:5c:81:2f:1b:b6:dd:6c:bc:85:fb:6f:da:
7e:2a:17:60:c1:cc:10:60:41:51:60:5c:0c:9a:a0:5d:47:0a:
60:3c:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:55 2025 by rpki-client