Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: kBYWw8dp8esY/cmh5lIpgUFFQok5YC4/QoLXdAaXqi4=
Subject key identifier: E4:36:EB:41:76:08:3D:FD:A5:C8:9D:5B:E5:ED:55:61:7C:0D:40:7F
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 0199FD6B14863B7FB7F5816A6A15C5558050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 16CA
Signing time: Sun 19 Oct 2025 17:01:17 +0000
Manifest this update: Sun 19 Oct 2025 17:01:17 +0000
Manifest next update: Mon 20 Oct 2025 17:01:17 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: V7/Ng6kEZ/1dOESDkJrFmrIXFdv0RF4GFzn283gFK9c=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:14:86:3b:7f:b7:f5:81:6a:6a:15:c5:55:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Oct 19 17:01:17 2025 GMT
Not After : Oct 20 17:01:17 2025 GMT
Subject: CN=e436eb4176083dfda5c89d5be5ed55617c0d407f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:c0:ab:91:40:5b:a4:75:b5:05:84:41:8b:
f4:60:47:ef:9e:2d:4e:af:bd:c6:d2:6e:d8:4f:63:
71:b8:0f:ba:01:55:b2:ba:d5:b8:7a:0e:7e:bb:8f:
cb:6b:84:7c:cd:96:99:c7:cf:9a:3d:ee:a8:33:50:
5b:36:1f:fd:d6:68:cc:a3:34:f2:9f:02:ec:76:a1:
95:4d:64:3a:90:2d:fc:94:82:9b:bb:37:77:64:22:
eb:0c:da:cc:43:28:40:04:91:66:47:9e:17:c6:bd:
9e:2f:b3:ac:e4:31:3e:3c:c9:e2:2b:4e:d5:fb:f7:
8d:f5:6e:80:d2:c5:4b:f9:45:b6:e5:2b:f1:90:58:
cb:f6:62:fb:da:88:e6:2c:19:d2:3d:27:f2:b3:f1:
c0:6d:18:93:c6:7c:e3:d0:46:60:12:50:8b:7a:a5:
e3:ba:bc:9a:9c:f3:b9:7c:9e:d9:9c:c9:6c:cd:37:
c9:01:06:ff:8f:d0:76:d8:1b:47:f8:43:d2:0f:c0:
f7:8d:7d:86:1f:a4:8a:31:18:a0:26:e8:53:0e:a2:
3f:d5:e5:06:14:c9:bf:3e:56:c9:2e:a7:f4:ee:50:
ed:31:38:b9:02:bb:70:ac:66:92:0b:ed:e0:f1:ab:
33:32:63:f7:e5:a3:74:4a:9d:b7:75:fd:66:a8:99:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:36:EB:41:76:08:3D:FD:A5:C8:9D:5B:E5:ED:55:61:7C:0D:40:7F
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8a:8a:3d:fd:a7:77:c3:c9:0d:f0:d0:bb:2b:3e:85:b4:11:
d7:f3:a7:f2:f0:d4:37:28:d8:d6:da:ce:0e:4b:47:77:c7:97:
7d:fc:2e:d1:9b:b9:d2:c7:8d:e6:79:79:5b:9d:67:6f:2b:ee:
24:c0:25:4f:44:88:20:1a:a1:cd:ac:56:5b:48:5a:b8:79:10:
50:53:6e:bd:0f:57:0b:0e:32:92:be:93:1a:b1:a3:df:6b:6c:
6a:fe:44:ba:6b:a5:50:f7:f3:69:a4:98:15:8f:c2:a7:7e:f3:
d2:a6:ff:2e:42:54:df:c0:de:2c:ec:30:97:11:f8:52:ac:f0:
27:9b:94:ca:21:93:f8:50:3a:d3:85:bf:71:83:f5:de:82:0b:
3c:cf:b2:73:72:97:ae:68:a1:41:22:28:9a:aa:80:70:87:8c:
90:50:d1:cd:07:d9:bd:68:d8:cb:d3:cf:9a:5a:da:15:9a:be:
2b:29:6d:88:aa:9b:53:58:f7:bc:da:75:1b:90:6f:1e:5f:e3:
08:d6:d2:ff:f7:fb:f5:4b:1d:00:94:2b:ba:e6:cf:ad:eb:af:
2f:a7:2a:da:0d:3a:de:70:b5:83:94:9e:06:89:2a:a0:69:c7:
50:9d:78:b8:e8:ae:3a:ca:ce:55:67:c7:c4:b9:f7:b4:7b:0c:
11:aa:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:07 2025 by rpki-client