Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: NtAijGIbHACJQVaaPf7efjhTlpLEoCvwov8tXE/yTfo=
Subject key identifier: B8:27:C2:29:01:1B:0F:B7:1D:04:46:FA:78:CA:07:CD:E4:5E:73:7E
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 0199FB45F0CFCE598F9AE6D96A12BA6DBD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: iIQ1f2A9kJAxp+QVhy1q96GjwOdIAv9zyDQcscaHtOg=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f0:cf:ce:59:8f:9a:e6:d9:6a:12:ba:6d:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=b827c229011b0fb71d0446fa78ca07cde45e737e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:b3:e1:16:93:cb:e1:a1:ce:9c:62:e9:6b:
39:6b:b6:61:8d:42:ac:c3:3c:b2:8d:41:3b:7a:9f:
ce:62:ac:d1:29:aa:ed:8d:f3:c3:1f:4a:83:e0:af:
78:8c:5e:22:d1:f8:c9:5f:ad:5e:77:33:51:bc:0d:
dd:5a:33:06:da:6f:ae:4d:48:0b:0f:93:74:e2:75:
30:1b:a8:ad:a0:1a:22:92:fd:6c:2c:84:08:d8:e5:
ea:89:58:55:45:f7:a2:46:f2:47:68:4a:82:97:e8:
05:3a:70:35:a4:d5:85:d8:06:b2:27:e5:4d:d9:ad:
4f:09:5a:c0:fd:7f:38:cc:09:e2:10:8b:34:1d:5c:
0e:27:6a:5d:2c:9f:c7:e9:0e:e6:66:96:5f:39:9b:
98:45:90:25:7e:5e:92:4c:a3:bd:12:bd:c8:96:45:
56:32:79:3c:ef:ff:93:f7:58:61:2d:a5:f4:95:30:
d7:31:fa:6d:d8:a5:5c:b7:d3:c4:b2:43:ba:7b:b3:
47:29:71:03:7a:53:e3:b8:bd:07:fa:0d:44:5d:c8:
74:24:64:87:66:94:11:46:e4:82:83:b7:2d:f8:a6:
f3:d8:2d:24:f4:a0:7b:96:45:c7:8c:fe:8c:05:f6:
46:84:08:fa:64:05:e2:c8:c6:4e:97:4b:16:90:fb:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:27:C2:29:01:1B:0F:B7:1D:04:46:FA:78:CA:07:CD:E4:5E:73:7E
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d6:0e:fa:af:36:06:b9:0c:27:3b:2e:9e:57:1a:b4:37:4c:
e6:f0:6b:09:ec:e5:97:86:ac:8b:d0:7b:fa:36:cc:c5:5d:26:
d4:64:be:dd:67:b3:b9:4f:62:a0:ff:57:4f:2e:3e:f9:4c:75:
d3:e9:a9:d5:ed:d0:20:f4:68:29:7c:c2:05:6e:a3:78:d6:f7:
48:5f:6e:70:16:23:29:ac:d8:ef:24:f5:16:f7:80:05:77:b3:
d2:36:04:1f:91:e8:86:45:97:22:71:4e:54:37:7a:30:40:08:
1c:5d:ff:a7:40:54:49:d1:25:2a:65:a6:32:7a:ce:65:37:67:
f2:b2:92:10:d2:0f:f4:48:5e:d5:8a:e5:ed:56:ae:81:b6:a3:
d2:c8:10:e9:3c:09:c2:2f:40:8f:fd:9c:d5:9a:c4:38:a8:d1:
5b:ad:68:a6:e5:4a:77:c6:db:19:11:a8:50:fb:69:a1:ca:99:
b0:a3:0a:70:39:21:65:dc:44:cf:88:f6:2e:6b:94:6b:ab:d7:
20:45:98:a5:67:f0:24:4c:e4:b3:d8:a0:c9:95:48:22:e9:9b:
24:b4:14:33:6c:14:30:ed:da:b7:db:f5:a0:7d:d5:68:39:ae:
29:42:df:d8:8b:2f:66:3d:b1:ba:e9:c2:72:f0:9a:b4:6e:cf:
65:99:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:30 2025 by rpki-client