Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: BaAyJIFUBcPzI4jghepLYJjvq7VkjKfJmmred0MhkZ8=
Subject key identifier: 13:A0:48:F6:A0:13:FD:29:E0:CC:17:EC:DC:DD:E6:DF:7E:F5:4B:9A
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 0199FFFE3983A3F61A2115CAC34CF221FDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 05:01:14 +0000
Manifest this update: Mon 20 Oct 2025 05:01:14 +0000
Manifest next update: Tue 21 Oct 2025 05:01:14 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: /yv8MWlW0uYekthQI/+eRi+bzxl+OM2zaEfwKHlWU+Y=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:39:83:a3:f6:1a:21:15:ca:c3:4c:f2:21:fd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Oct 20 05:01:14 2025 GMT
Not After : Oct 21 05:01:14 2025 GMT
Subject: CN=13a048f6a013fd29e0cc17ecdcdde6df7ef54b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:43:77:10:a4:2b:2f:f3:ed:3e:5f:a0:ba:
97:cb:6a:20:af:03:98:0e:82:33:6f:22:7a:12:b3:
2d:8b:b4:31:66:44:9f:d0:b7:4f:32:1f:b1:22:38:
66:4a:f1:69:00:19:de:a5:c5:81:b0:c3:97:45:f4:
d3:9f:15:96:6d:92:2e:3b:e0:e0:f7:14:85:f4:ad:
3d:43:73:2d:1c:8d:dc:93:11:5a:c1:79:6f:12:9c:
6e:e8:f6:25:61:b7:7b:2d:23:7b:fa:32:0c:48:da:
f4:a5:36:8e:f1:bf:7a:ac:29:2c:b5:87:ae:ba:8e:
e5:5d:e0:ad:42:ed:1d:96:0e:0f:2f:32:a5:66:32:
59:f5:12:1c:38:b1:66:e0:03:1e:0d:bb:7c:b9:45:
55:eb:80:76:f7:3d:bd:d6:f6:09:4c:1a:aa:85:81:
b0:a6:5c:ba:1d:80:1c:e6:ba:f8:63:63:27:90:bd:
46:b8:16:ff:96:3c:c8:2a:a5:e3:92:a8:6f:c3:ad:
30:c8:c2:d2:e5:76:36:47:21:1b:8f:65:48:c3:dc:
8f:04:77:00:ce:f2:94:42:68:d8:65:1a:aa:54:ca:
18:91:a5:71:08:f7:c3:ca:22:44:b8:a6:e0:db:d3:
2f:c7:af:cc:7b:c2:75:d3:13:f0:1b:74:94:ee:69:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A0:48:F6:A0:13:FD:29:E0:CC:17:EC:DC:DD:E6:DF:7E:F5:4B:9A
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:be:42:0c:0e:4b:4c:d8:c5:eb:46:ea:2a:14:8b:20:ab:6c:
5a:ac:f6:35:1d:ef:77:5a:4e:76:0e:39:ad:03:1c:72:d0:73:
b6:64:64:e4:e6:22:a2:43:b6:f3:5e:a2:f1:6d:ab:6b:85:23:
2e:56:2d:d2:ce:cf:31:15:fa:15:82:43:82:36:6c:29:01:18:
09:5e:88:a7:7e:aa:d1:2d:cf:3d:2d:e3:b0:e6:24:3b:13:c4:
14:f5:b0:f2:79:be:f4:c0:a9:31:12:5c:82:30:4e:da:23:4f:
ea:8f:83:45:1f:6e:b6:5b:22:f0:2a:9a:d5:cf:43:1e:68:95:
53:6d:4b:11:fb:f3:33:59:1a:90:a5:f0:1b:8c:71:de:db:0a:
e0:93:fb:d3:fd:7b:f9:3a:27:8b:9e:b9:45:37:e3:17:88:67:
77:dd:ce:1a:df:34:4d:47:07:6c:00:9e:6c:90:3e:e9:38:c7:
d8:f3:69:bc:80:f3:a0:4c:62:87:11:fa:03:ad:50:21:bc:a9:
10:a7:e1:d8:24:c8:58:6e:92:ac:7f:3b:a7:82:7f:72:17:6c:
ee:0b:c0:b9:cf:6f:ef:15:d8:8b:bb:22:24:17:a5:74:9c:09:
4e:9a:61:5d:67:58:bb:19:72:e6:1a:f2:3d:ab:90:b6:79:39:
28:6d:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:30:46 2025 by rpki-client