Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: uVyMwD3FSg+0N66zSO1regARFpK/PS/F0NYlCeN2fQ4=
Subject key identifier: A6:16:F5:E0:C7:67:AA:5D:42:2A:F3:B1:D5:B3:A1:78:14:29:0D:20
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0199FC591C6CE4A4F9FF5B9FFF2CB57B16FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:02:02 +0000
Manifest this update: Sun 19 Oct 2025 12:02:02 +0000
Manifest next update: Mon 20 Oct 2025 12:02:02 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: mzSdbs5jns89nHQqfRiHhngsQGRH8RF3CVayri12fh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:1c:6c:e4:a4:f9:ff:5b:9f:ff:2c:b5:7b:16:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Oct 19 12:02:02 2025 GMT
Not After : Oct 20 12:02:02 2025 GMT
Subject: CN=a616f5e0c767aa5d422af3b1d5b3a17814290d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:2a:c5:5e:ad:2f:8f:d5:f4:33:9a:1a:d0:
9b:fc:12:fa:d4:71:d8:fb:98:1e:f5:db:d1:1e:06:
b2:c5:20:f6:4e:aa:b9:fe:d7:6a:53:5b:ff:42:57:
30:fd:f3:bb:e5:66:76:8b:a2:b7:ec:21:02:c8:67:
63:60:1d:3a:77:f3:59:a3:f2:d6:2c:f9:be:05:d1:
44:63:f2:02:23:e9:a9:c1:eb:9d:bb:09:b8:b9:83:
0a:e9:ef:ed:a8:7e:ca:e3:ac:21:17:b6:a6:0e:9a:
33:e7:42:af:8e:3a:d5:12:29:16:fd:a9:81:0e:1b:
64:b5:b9:52:40:0d:e1:fd:d5:55:e8:ad:bd:13:4c:
24:bc:fe:70:fa:9b:6c:a6:c9:06:08:d3:7b:0a:99:
a7:25:f8:05:74:1f:00:57:7c:b9:78:b4:39:d8:5b:
a6:de:1f:05:f4:98:84:08:7c:f5:79:2a:a4:be:52:
0d:26:50:e9:bd:a5:19:a6:6e:2b:a9:54:84:11:0d:
d1:1a:00:88:3b:6f:52:d2:47:2b:3a:55:af:85:ee:
a1:9c:93:78:9b:21:d4:1b:81:bc:59:80:3e:29:5b:
6e:fa:c2:68:3c:a8:0b:41:6b:5f:00:38:14:cd:00:
9d:b2:23:73:a4:99:05:df:48:7b:4d:76:5b:84:ec:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:16:F5:E0:C7:67:AA:5D:42:2A:F3:B1:D5:B3:A1:78:14:29:0D:20
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b3:22:e0:02:a4:06:1e:c4:a2:52:20:da:ef:64:79:ad:b2:
85:e0:46:4f:e3:58:66:e2:e3:00:b5:68:39:e7:bb:cc:4e:d2:
17:f4:f4:08:ef:ac:28:ab:38:84:0b:70:b2:c1:49:7f:38:b5:
ff:5c:49:be:5d:69:8e:3f:2a:cf:24:f6:37:83:62:6c:2a:c7:
5e:ee:fc:f7:90:91:ac:a5:89:46:ef:75:08:f0:8e:aa:e8:54:
c1:25:9e:b6:91:db:6b:e2:bf:3a:46:59:dd:91:fd:3d:b3:8f:
63:cf:65:62:04:13:44:c6:c4:34:66:62:2f:9b:ce:3b:81:f6:
b5:18:b6:79:fb:9d:8d:35:a5:77:c2:1b:02:5d:48:30:68:c0:
b4:ca:8d:27:2c:f6:e5:dd:4a:98:be:4e:17:12:c5:10:cf:5e:
1e:bd:a0:68:a8:49:6b:78:ad:2b:81:f7:ef:86:53:34:b4:23:
58:33:42:09:3f:df:65:e3:f6:5b:85:05:2a:69:75:e4:e0:c0:
7c:c2:ba:2f:6a:07:a9:d1:0f:36:20:9a:b0:c5:a8:68:1f:23:
2d:ec:90:86:b5:ed:fe:23:7f:36:c6:25:97:99:be:73:a0:e8:
77:32:0f:63:07:e9:de:8c:a0:4d:29:6b:4d:a8:08:fe:12:8a:
a6:33:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:00 2025 by rpki-client