Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: 3EKDZ/eTcQSuIYnv63dQx/PkrnuqRll4P/bRME2piZE=
Subject key identifier: B3:F4:86:68:F0:FB:4A:4C:5C:E1:BB:BD:E9:02:C4:76:A7:A9:23:14
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 0199FE46EAD1871FF470F7109B393A2C0D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:24 +0000
Manifest this update: Sun 19 Oct 2025 21:01:24 +0000
Manifest next update: Mon 20 Oct 2025 21:01:24 +0000
Files and hashes: 1: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: WpeImJqvafR0sWt4iOIZu89cEUZMoMJBI8gzYOKA2kQ=)
2: DgSG9NAY-GeZhhQF_9nz_5bnH4g.roa (hash: HVd5RwrEtlWn4VmR//6rMsJVil50z8bOvrCZBZiqbC0=)
3: KW9AN_X4Hh4VKuAnb6bJtRrKymg.roa (hash: J21F/I0zRgekIus74H7I/v2eoj4Bzdqg85T8XsMU8eI=)
4: KaCCbIDfk6xPLr8lzeQM2ayQkYY.roa (hash: stYyC3DZ280ukMQVQAStdzjvt9KMG36guiRh8dH8BRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:ea:d1:87:1f:f4:70:f7:10:9b:39:3a:2c:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Oct 19 21:01:24 2025 GMT
Not After : Oct 20 21:01:24 2025 GMT
Subject: CN=b3f48668f0fb4a4c5ce1bbbde902c476a7a92314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:83:e8:ab:d5:f5:3b:66:db:be:7c:d2:2a:
4c:30:c5:ed:99:3b:e0:94:6e:4a:e4:dd:1e:c6:a5:
77:97:58:8b:fc:c3:3e:26:63:a6:2d:b5:74:85:90:
c2:72:6d:6d:bf:7b:53:04:cb:61:84:30:c3:27:06:
77:e0:87:1e:d4:7f:41:70:41:7c:30:d0:42:f8:f9:
e0:c9:2e:9d:1c:5f:0d:b7:fb:71:e8:d3:ee:02:83:
ca:30:b4:30:8c:b5:ee:23:01:3c:48:20:14:66:9b:
9e:5f:e9:e3:09:0c:d0:50:f1:a2:5c:f6:c2:00:b4:
83:d3:3a:f2:05:53:73:d0:6d:bc:37:bb:d9:0a:ca:
f9:72:e1:e7:fd:0e:fa:3b:58:46:bb:1a:1f:ae:2f:
4f:e4:03:8a:92:d8:9a:67:8f:97:4a:6d:2f:3b:01:
e1:39:01:60:08:c8:6b:de:f7:94:2c:ad:98:81:bf:
54:be:7c:cf:d5:59:5c:53:e6:1f:eb:08:ca:62:18:
0a:0e:0c:7f:ca:34:4b:44:f4:26:cf:6f:f8:5a:10:
c2:b3:3d:d8:c7:50:c9:c4:24:5a:38:82:fb:05:b5:
e3:82:d5:d5:10:1c:ab:72:f1:f0:5f:02:16:ab:49:
ac:07:64:26:13:63:df:ba:c0:6b:0d:9c:d8:4a:3f:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:86:68:F0:FB:4A:4C:5C:E1:BB:BD:E9:02:C4:76:A7:A9:23:14
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a8:5c:1c:3d:05:9a:4a:1a:1c:43:c0:56:1c:5d:81:59:22:
54:b5:f2:ff:49:c4:3e:c5:6f:61:bf:2d:8e:d8:dc:74:8a:4f:
68:86:e7:50:d8:fe:4a:80:20:a7:62:0c:84:90:68:18:80:c1:
f4:fe:ea:f9:92:cc:d6:30:ad:59:8a:db:4f:a6:87:9c:f2:36:
ef:d0:01:be:5b:2e:ce:bb:ce:9b:c3:85:5e:34:4e:14:f7:25:
11:ad:39:47:db:4a:44:5b:73:a6:f7:1a:0c:9e:84:72:a8:eb:
b6:0e:8f:89:b6:75:aa:7c:3a:1e:ad:27:57:0f:2d:50:a3:ff:
75:9e:2b:6d:15:92:ae:a6:c0:68:e4:38:bf:5a:d4:02:60:59:
11:3f:c6:f3:6d:05:d2:6d:a5:e3:5f:63:9e:09:f7:0e:57:a9:
50:12:13:b6:0c:3b:54:d4:65:da:10:4a:10:23:b7:09:9e:a4:
cf:5c:81:2f:78:d2:38:64:08:1e:f8:c2:e5:7f:ac:c2:bb:9b:
87:ff:37:1a:a6:58:f8:05:d3:dd:90:ab:94:01:dd:13:cd:48:
7e:59:c4:6d:78:90:2a:81:89:db:80:a6:25:6b:30:da:ed:23:
e0:ac:9c:85:dd:86:79:3e:2e:a1:d4:9b:ee:1e:7b:4d:cb:e6:
3a:88:d3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:16:54 2025 by rpki-client