Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: DzR2/GoAjgVKE+WSIiuEqHxE0mYxmw0PDWB5jFpuC3c=
Subject key identifier: CC:51:C2:21:07:9D:CD:27:7A:EC:2C:AF:BF:F1:76:2B:50:58:10:60
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 0199FC21A92F535118409BA57579337F4721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: YfPJSwAVYSfSt6ei98l/Aw0Cnf6H4u7ueoZbIGsjWLY=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a9:2f:53:51:18:40:9b:a5:75:79:33:7f:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=cc51c221079dcd277aec2cafbff1762b50581060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:33:37:96:55:34:98:6c:a3:d0:f5:bc:bf:
56:49:13:4a:38:34:f1:b4:1f:1c:60:2a:a3:ea:75:
e1:8a:21:e3:5a:31:23:29:05:1c:7b:3c:83:ff:db:
e8:57:e5:37:c7:fd:95:59:47:f6:73:f5:3f:1c:6e:
f1:fc:4f:c2:2d:5a:b1:3e:7f:6d:40:a9:42:66:b2:
2a:ce:dd:f7:fe:2b:78:2f:fa:21:63:31:06:47:10:
b7:3f:a7:14:c1:00:84:81:98:a3:24:e5:e4:86:d3:
59:fe:80:cc:30:76:af:cb:9f:47:5e:e9:a5:b4:2c:
07:3c:85:bd:17:a6:32:ce:40:03:b1:9a:2e:be:ba:
e1:ef:3a:87:80:18:05:aa:ad:b0:c6:df:40:a2:db:
0b:1d:f9:c0:80:1f:84:fc:c3:38:30:53:fa:e8:75:
1e:6c:8d:1d:8b:29:9a:4d:91:a7:5e:e4:82:5c:2c:
9a:93:3f:da:b6:ae:c3:ed:08:d9:23:c3:ba:78:30:
c4:15:cc:a5:7f:0b:94:82:18:a8:c5:a2:44:f7:e1:
c6:22:72:c4:d6:e5:62:47:6b:1f:28:73:d4:3c:0a:
35:64:c5:d5:90:76:fb:54:12:3f:bf:ce:d8:7c:5f:
94:4d:c9:d2:01:72:24:97:02:24:97:59:64:cc:e1:
c0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:51:C2:21:07:9D:CD:27:7A:EC:2C:AF:BF:F1:76:2B:50:58:10:60
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:08:94:41:d7:d2:e7:4e:ee:a7:4b:db:91:f8:8a:30:b8:c4:
02:96:6f:55:42:41:94:5c:64:70:b4:e0:d3:c1:a8:ff:d6:16:
cf:5c:db:e5:32:42:83:b8:f2:fe:6d:35:e2:a9:f2:39:9e:74:
97:c7:8e:78:44:11:2d:6a:e3:1b:db:e9:86:7d:ee:0b:5a:46:
19:e8:dc:00:e4:5a:00:4d:82:ff:a4:d6:f0:1a:c7:b5:31:2c:
9a:da:12:67:af:90:6b:47:24:c0:e3:5f:aa:c1:bc:2d:df:d8:
28:ce:25:37:d3:35:da:27:07:7d:65:0e:37:78:2e:a0:f9:65:
66:bc:b8:42:d1:b4:e2:08:be:2e:18:4c:4b:34:00:06:10:ef:
5c:04:ab:42:08:6c:82:b5:dc:54:9f:cf:dd:86:65:64:bf:73:
bb:1a:4b:ce:73:e4:29:1c:14:2a:d2:1c:29:57:8b:5a:de:99:
a3:34:2f:3a:be:ed:07:eb:66:da:d6:b4:11:66:72:83:31:b6:
e1:29:ef:dc:f2:c3:fc:76:a6:e5:fe:ca:b0:55:0b:7f:59:f6:
37:1c:14:5d:b0:86:6c:34:6a:58:b8:b9:75:ee:2e:15:f6:cb:
b0:57:9a:05:e4:55:87:3e:34:ef:8b:b2:3c:d4:79:46:6c:2c:
d1:02:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:03 2025 by rpki-client