Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File: D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier: Mb2E/4Y1T+pNQk1B+ddIDV7AshmGKQ8UZN9vO0GvVXA=
Subject key identifier: 3D:00:C2:CB:40:E1:8D:E1:7E:AF:25:5A:46:3F:54:0C:6E:7D:4D:07
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer: /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial: 0199FBEC38710C8F3514D0DB1066CB4207DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: J13nd4WTL5JjvqmnKQOBhoqgK6LLYLzUWjYNPfaF32U=)
2: M1fWkBIHAuVSUFxtDGIthqqmrJE.roa (hash: +6gCxjSejI/as6boiaKhDkfwSxB7S4u8Oz//yZsKkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:38:71:0c:8f:35:14:d0:db:10:66:cb:42:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=3d00c2cb40e18de17eaf255a463f540c6e7d4d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:36:97:c4:4c:80:fa:7a:d3:3f:c1:bc:21:
3d:0b:23:e1:ff:c3:25:9d:ee:7d:20:cd:f6:33:dd:
62:b5:36:96:8b:7f:3f:aa:8e:08:09:00:ba:82:91:
f3:05:d5:ef:ad:1c:5e:8b:d3:62:65:4a:f3:c6:fc:
7e:d3:7e:f2:61:a3:3c:ea:76:62:48:bf:ce:c4:ae:
bb:79:51:6f:fc:de:0f:04:9e:30:03:56:b4:9e:38:
c9:60:06:0e:c1:63:7c:20:1f:02:71:2e:93:bd:58:
55:40:29:12:46:52:b6:47:0f:62:de:eb:97:9a:c3:
7e:d8:5f:6c:59:7f:56:77:dc:f0:f7:71:4a:6c:2d:
6b:87:6c:df:0c:42:dc:eb:77:00:be:d1:39:a1:30:
7c:3f:92:5d:e2:77:da:bf:32:0c:7e:cc:72:ae:bf:
8d:38:3b:05:ab:10:4d:21:76:47:20:7e:9f:d5:54:
bf:5a:16:19:db:85:43:e7:95:a1:8c:09:72:fc:67:
09:a8:34:db:b4:c7:b5:4f:46:9c:84:a1:5d:7d:87:
f6:8e:13:99:c1:80:9b:a9:1d:97:a3:51:3d:c2:16:
84:1b:7f:c6:2b:60:2b:dd:e1:46:0a:ab:2d:f5:58:
29:90:68:94:5f:cb:d3:37:b7:20:d5:76:20:fb:e0:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:C2:CB:40:E1:8D:E1:7E:AF:25:5A:46:3F:54:0C:6E:7D:4D:07
X509v3 Authority Key Identifier:
keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a5:5a:b4:5a:e4:6d:53:5a:3a:36:07:5c:92:24:f2:de:e1:
86:32:a3:1a:b6:c1:61:3f:cf:1a:e7:4a:c2:ba:2a:08:7a:b3:
f7:3f:cf:4f:02:53:1b:cd:64:69:60:71:67:3c:6a:ea:2a:48:
d5:87:43:c7:6a:26:5a:25:8a:fd:23:30:e8:5b:74:c5:e0:49:
7d:1e:91:bf:dc:46:71:fa:87:01:30:ec:ce:66:02:04:8f:a9:
13:dc:c2:12:ca:54:06:8f:4f:80:b6:d7:3a:72:d8:c5:e6:df:
7c:d7:fa:d7:1f:89:4b:f0:d1:84:83:70:77:54:1d:aa:c7:30:
40:96:68:ac:0a:f5:d6:56:03:9c:d9:6a:b6:97:16:76:e8:6e:
05:90:da:27:eb:38:8c:6f:ae:7c:71:44:79:1f:fe:91:e6:2c:
a9:44:2b:d6:4c:dd:0b:38:38:6e:e0:54:df:a7:e4:45:38:db:
00:80:62:c0:79:b7:af:75:6b:0b:a9:31:a4:fe:7d:4b:27:6d:
c5:fd:62:4b:e4:ae:63:71:b2:3d:11:48:69:45:af:5b:5c:5e:
ef:e3:de:3b:a7:52:ac:74:b9:76:52:c3:18:63:39:f5:10:00:
cf:e4:17:2d:87:54:3c:ac:d0:4b:5e:3e:ca:27:b0:57:bf:1e:
49:85:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:21 2025 by rpki-client