Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: +ZXpcd90qY7PpNRmFRkgBsxwl2R+UKGlpzNvWAyX1+M=
Subject key identifier: B5:B1:F7:83:EB:A2:AD:C7:2D:DE:C9:03:12:93:1B:88:15:71:3C:2C
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0199FF595EE18E9796C91EA3DFDB9BF31BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 4aGqV37R+VxSty0HfyNpKAQL8i8o4t3CUv1wGj98R8w=)
2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:5e:e1:8e:97:96:c9:1e:a3:df:db:9b:f3:1b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=b5b1f783eba2adc72ddec90312931b8815713c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:74:27:16:5d:60:82:e5:51:ce:d8:fb:85:
6e:c7:80:f4:56:dd:89:12:39:b0:63:80:ba:53:b1:
eb:45:3e:3f:18:74:2a:91:a7:bf:bd:38:74:f4:52:
ce:7c:ad:4b:15:29:12:da:fe:eb:eb:c0:01:d6:21:
51:28:14:78:2e:bd:e5:c7:31:b4:fa:a3:72:a6:e1:
ba:94:28:fd:84:96:94:b3:92:e7:7e:f9:05:b8:eb:
e5:cc:10:49:05:88:61:bc:1e:29:fa:5e:dc:06:7f:
f2:2e:92:1e:ab:1c:e2:bc:58:bd:97:a6:25:82:28:
5a:58:e6:5d:98:f0:da:4e:cf:d3:4d:e0:d8:e0:1a:
e3:03:e9:01:ea:61:60:31:0d:b5:ff:e3:be:6f:4a:
60:77:7f:d4:12:dd:aa:ef:82:28:31:2f:33:b3:38:
08:49:1e:5d:e8:47:90:81:3e:e4:9f:91:7b:f3:2b:
fa:a5:c5:29:38:df:63:e1:6a:70:4d:96:5e:ce:16:
1c:8c:8c:38:79:42:47:7d:fe:a6:72:c7:5c:a3:5f:
ca:ad:c3:53:d9:3c:1f:50:ed:a8:36:ab:de:30:f1:
e4:b7:c2:7f:e8:23:eb:a3:a8:8f:5e:0d:82:2c:db:
0b:f0:a6:ba:a6:c1:be:f6:d7:48:fe:dc:f5:f9:e3:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:F7:83:EB:A2:AD:C7:2D:DE:C9:03:12:93:1B:88:15:71:3C:2C
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:f2:a6:2f:50:d4:1c:24:3e:9d:02:65:78:f6:be:1f:69:
98:7a:25:1f:01:16:4b:1b:f3:64:95:3b:bd:d3:c7:9d:87:0c:
62:98:e9:7e:d6:1e:e9:ff:26:11:4c:91:3b:95:ae:1c:50:4f:
a1:14:32:90:f6:78:fb:fb:bd:4e:7f:48:2e:f3:50:21:0b:10:
11:27:89:80:52:a0:f9:d3:4c:d1:0e:30:15:77:a1:64:3c:28:
b8:97:5b:5e:9e:a4:74:89:f0:8d:2a:62:4a:56:56:2c:d3:12:
31:e7:7b:c4:ea:8b:36:0e:36:f3:cd:61:aa:d1:db:f1:69:b5:
34:ea:97:da:f1:51:6a:0b:b5:d5:4f:62:b7:57:f2:f2:90:53:
e9:e0:eb:f5:0d:ca:c5:d9:f3:b0:02:51:59:fd:6d:b6:50:c7:
52:25:f8:1c:99:e4:b7:7a:b8:79:e6:8d:97:f1:dd:9b:28:f7:
0b:75:a9:3e:65:c1:f0:d7:72:0f:4f:05:84:b6:6c:b5:b4:52:
07:49:ed:93:66:da:a5:63:92:e6:5b:fc:f8:c1:ad:16:50:82:
64:c0:f3:fd:25:3e:7b:52:8a:fa:dc:af:98:31:fe:e1:c0:df:
a5:a7:0b:c3:02:68:24:6f:d1:5c:0d:be:0f:cc:8e:f4:55:df:
e8:3a:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:29 2025 by rpki-client