Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: mVnEaqOczh4QgTJtAzPZLCa1og6ug6y7mbRwVM8+ZHM=
Subject key identifier: 5D:08:7D:08:8B:66:55:99:00:DC:1F:20:9D:C2:12:77:97:BF:CD:C6
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 0199FA69FE6FD2039E299234E7CAA648D852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 03:01:14 +0000
Manifest this update: Sun 19 Oct 2025 03:01:14 +0000
Manifest next update: Mon 20 Oct 2025 03:01:14 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: It8dahzIjZml4zTtqHrORc3gjBLo4C+wF+plcNBw0Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:fe:6f:d2:03:9e:29:92:34:e7:ca:a6:48:d8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Oct 19 03:01:14 2025 GMT
Not After : Oct 20 03:01:14 2025 GMT
Subject: CN=5d087d088b66559900dc1f209dc2127797bfcdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:69:07:4b:7b:6d:1d:5d:33:2e:be:ea:f0:
ca:d2:61:6b:66:a0:9e:fc:9a:8b:fd:bd:93:23:cb:
63:40:a8:92:65:88:97:c8:b5:19:16:09:8f:94:28:
fd:e6:f6:0f:0a:00:4b:bd:4d:21:0d:ae:ae:be:0b:
6a:e0:4f:39:f1:aa:23:88:84:cc:b5:bf:d2:56:fb:
f2:66:ce:dd:b4:68:94:3b:c0:fe:97:fa:90:7c:bd:
84:b2:c4:d2:32:d1:a1:74:8f:bf:a1:9e:64:cd:d2:
a7:72:31:a0:9b:57:92:ce:b5:43:06:95:a2:bc:d3:
19:ff:bc:7b:36:53:b2:44:a0:6b:58:0e:83:5a:87:
5f:e3:b8:4c:ee:9d:31:60:eb:30:67:34:cd:d9:1c:
5c:e2:6d:53:5b:c0:1d:e7:eb:9f:5b:73:f1:bf:c2:
8a:72:35:f0:be:46:ba:52:71:0c:c8:46:0b:45:a9:
18:d3:fd:82:73:ca:d9:c9:79:4e:d7:81:34:9c:97:
39:64:06:3e:50:cd:ba:78:b7:81:fe:e6:99:6d:4f:
48:3b:07:c0:10:d1:2d:eb:14:9d:7e:d9:65:8e:6c:
23:6f:d8:44:f8:6b:3d:3f:8c:88:65:b7:55:95:16:
ca:d2:be:5a:a1:9d:73:50:fb:f8:09:ab:d4:03:c8:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:08:7D:08:8B:66:55:99:00:DC:1F:20:9D:C2:12:77:97:BF:CD:C6
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c6:70:4e:92:dc:db:e7:27:60:4e:70:c4:0e:6c:fd:08:e9:
be:91:70:d4:35:eb:44:76:de:35:3f:09:84:12:fa:08:c5:e1:
b7:01:c5:fe:54:c8:53:d1:5a:a0:4e:4f:b9:3e:08:fe:ab:18:
ae:a2:6a:d3:3b:82:7b:96:71:63:b6:af:26:56:a8:78:ab:c0:
59:54:d6:07:2e:32:6b:52:de:bf:59:2e:0c:09:62:08:37:fc:
fb:42:5e:fb:01:bd:2c:01:6b:50:af:70:af:a3:f5:ea:11:53:
d6:34:72:8a:dc:ae:90:69:32:32:b2:15:8b:9c:df:a4:6d:b6:
58:9f:1b:6f:fc:5e:29:f1:5a:f7:ab:02:d1:c7:f4:29:e7:e8:
9c:6f:c2:c1:c7:7d:a0:15:fd:2d:e7:ee:90:16:21:c4:dd:38:
1b:be:45:72:ab:63:94:e9:62:c4:20:c3:7e:d0:db:db:d7:da:
e5:33:27:dd:1a:8e:c4:b6:98:c2:fe:1d:58:57:cd:3c:d8:26:
30:d5:3b:4d:82:ab:a8:1d:96:47:41:42:7d:ec:d8:f5:45:01:
cf:1d:66:6c:74:87:3a:36:96:8b:8b:62:ce:9c:53:1f:43:ce:
8a:2a:eb:39:c6:de:ee:3e:b8:6f:4e:db:c0:fe:52:a3:4a:92:
06:9e:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:59 2025 by rpki-client