Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: gHRJaDf9yLi4DDzBf42M3kCies6KRTiaFo/192HFBvI=
Subject key identifier: 65:59:B2:67:75:C8:83:B9:B2:A7:7D:60:EF:B4:BE:A6:EC:AF:E8:EA
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0199FD34478B512BE8A78D3E56D5A1ADBB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=)
2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: Cax5Xah4p6TiHBBfN9p1+fkeJomudL219Dd/9QeyW1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:47:8b:51:2b:e8:a7:8d:3e:56:d5:a1:ad:bb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=6559b26775c883b9b2a77d60efb4bea6ecafe8ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:21:a8:f2:de:be:c3:c3:cf:4e:06:20:96:b3:
ee:24:bf:75:33:cc:49:27:fc:39:30:d8:11:d6:88:
f4:d5:1f:9a:8e:13:6d:bc:39:17:b5:9b:1e:5d:c9:
72:d4:91:8b:1d:2a:79:7f:34:83:16:dc:18:49:66:
90:f7:c6:8f:0e:57:48:e5:3c:cc:40:9b:66:4e:9c:
a8:f0:9f:6e:bb:db:e6:1a:a3:6c:64:2b:a9:b6:ee:
d7:93:c7:64:2a:46:bd:a1:2b:4d:7b:d7:a2:d4:63:
32:34:fa:18:b2:57:af:28:79:b8:27:08:30:be:03:
16:ce:0f:c9:57:9a:7c:72:ff:03:75:92:4f:4c:83:
ae:8b:5b:f6:f4:2c:d9:4f:c0:e3:58:78:65:69:0c:
b7:4e:4e:49:92:d6:30:f4:52:4a:93:fc:75:55:3c:
98:34:b1:fd:bd:e4:d1:53:5d:42:b1:5c:78:ef:10:
14:96:68:c1:4c:e2:69:f8:d5:b8:e0:a9:e5:66:eb:
67:92:40:6b:59:ae:cf:85:1e:de:d3:04:ed:db:6e:
49:b6:7a:60:8f:22:f1:cc:3b:fa:31:19:85:b8:f1:
bf:60:fa:49:99:d4:c6:04:2d:ee:d8:19:d9:59:31:
cd:6d:64:f2:8d:e8:f3:c7:bf:3e:bd:84:f2:46:6f:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:B2:67:75:C8:83:B9:B2:A7:7D:60:EF:B4:BE:A6:EC:AF:E8:EA
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c3:b7:b9:c1:e1:0f:a7:dd:8b:9e:16:c7:2c:9e:d5:97:35:
8e:fb:d6:e1:b6:b3:70:35:e8:59:4e:01:4f:0e:c3:68:5b:e1:
55:26:e8:9c:94:50:27:bb:3d:88:9b:11:61:8b:0c:e2:cd:13:
fc:d5:08:c6:03:0d:c9:6e:9b:a1:1a:2f:e6:d0:9c:7f:95:c2:
ff:4e:26:8a:e2:b9:b1:31:ae:2c:03:98:68:7d:5b:a9:77:82:
9f:66:6c:13:0b:2d:5f:54:b4:db:3c:d9:be:04:36:47:b0:28:
9c:85:9c:8b:9a:cd:78:c7:85:f0:45:ca:65:a5:ea:44:13:0e:
78:29:0f:2b:5f:65:28:51:2f:0d:c3:aa:7b:e6:fa:8c:c9:81:
56:52:5e:c7:e8:e3:74:38:33:0e:f2:b9:ad:18:ee:73:1f:64:
53:b9:dd:96:1b:c3:56:94:41:13:c6:6c:b3:67:ed:8d:3d:a0:
8e:87:3b:b1:ee:fc:1f:6e:f0:79:d6:6a:e0:10:88:52:37:c7:
1f:cc:86:45:35:6e:5f:4f:03:9f:c5:b9:1f:87:bb:88:87:ae:
de:4b:1d:47:03:7c:66:e8:02:3d:e7:68:8b:1a:30:04:6c:08:
e3:a9:52:0f:42:36:f9:1a:20:83:dd:e5:38:b3:43:bb:fe:f2:
60:94:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:33 2025 by rpki-client