
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: 3a97mKb7lxLIk4jsn2K0oHoKjFBjBPnzhc03mL/b0nc=
Subject key identifier: A7:62:C0:E4:99:01:A6:69:FC:2B:8F:D8:18:58:45:98:6F:A7:34:CA
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 0199FAD7D48A2E6967FE8BD88675C65C2649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:12 +0000
Manifest this update: Sun 19 Oct 2025 05:01:12 +0000
Manifest next update: Mon 20 Oct 2025 05:01:12 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: xADjM8zbuF8GjhP5UokutRqKZv9A0QtSHbfOs5XgUdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d4:8a:2e:69:67:fe:8b:d8:86:75:c6:5c:26:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Oct 19 05:01:12 2025 GMT
Not After : Oct 20 05:01:12 2025 GMT
Subject: CN=a762c0e49901a669fc2b8fd8185845986fa734ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:51:0b:f9:7e:8c:8b:ab:37:0c:ae:a3:44:
1b:31:c3:81:f7:84:1d:bd:4d:61:25:a2:57:f3:72:
96:c2:ec:6a:c1:70:30:68:f6:6e:82:6e:64:fa:81:
4d:9f:f9:5f:4a:5b:0d:29:55:be:f2:a9:e3:02:48:
99:27:53:d8:97:e1:c7:46:3b:a5:60:0b:99:f9:6b:
bb:72:33:c8:76:f9:fa:44:83:40:9b:b3:32:b9:1f:
46:95:c0:4f:87:be:3c:c0:ad:c9:e7:d1:c7:09:89:
ab:a2:bc:b3:73:e8:5e:34:60:79:c7:61:f3:47:c9:
ae:a2:be:fc:e1:d9:c2:94:d4:7e:9a:d7:d8:eb:c0:
2c:4d:60:9c:c3:1f:dd:01:45:d5:1a:f4:6f:9e:58:
c4:8f:ad:51:b6:33:c7:9a:60:f1:69:93:e0:17:9b:
b0:30:a0:11:d0:06:b2:74:52:f9:4e:24:a0:15:0e:
c6:90:50:e3:54:ed:c9:60:e8:c0:94:d1:05:c6:73:
ee:87:2c:e9:4b:3e:aa:24:5d:4f:84:a9:42:b4:96:
a9:4f:26:64:e8:78:13:28:7b:f1:fa:62:77:43:4f:
2e:5d:9d:26:d4:c4:da:7b:0e:a2:58:37:ef:f9:44:
3a:58:d7:97:be:f1:d9:e4:b5:81:e0:1f:48:94:04:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:62:C0:E4:99:01:A6:69:FC:2B:8F:D8:18:58:45:98:6F:A7:34:CA
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:7f:81:b9:6b:33:16:fa:09:7b:84:76:54:24:bc:31:83:
5a:fa:f3:e7:0d:0c:26:87:ea:3c:f8:08:0d:4c:c1:f8:f8:80:
5e:84:d9:52:ce:b7:9f:6f:ac:ac:17:73:22:65:d2:24:70:a3:
cd:a7:8d:81:f0:63:6b:b2:0f:e8:b7:9c:fd:e7:7f:41:1c:45:
f8:ed:19:46:d3:c9:84:68:a7:19:62:1a:2a:96:1b:f3:68:81:
ad:22:38:35:3e:eb:6c:e4:48:2b:a1:85:8d:4c:db:21:31:6f:
a5:92:f6:06:a7:fa:2e:f3:be:fa:7a:cf:dc:ad:23:2e:20:64:
83:ce:fc:19:ac:1d:42:5d:9c:b3:9e:96:06:93:72:6f:40:31:
61:c3:54:b3:89:e9:f6:9f:bd:a3:d9:ce:47:e5:7a:d7:82:3a:
46:ff:e7:1a:21:7d:b9:6b:7b:62:39:a5:f7:ec:4b:18:3d:50:
17:86:05:e1:81:b6:7c:59:06:e3:8f:19:05:84:53:18:27:b1:
0b:c9:4a:c5:48:a5:32:cc:2e:c2:ec:29:e5:7c:e3:3f:40:a5:
c9:14:e2:86:f4:4a:e0:84:dd:6c:fe:c1:de:da:2e:0e:5f:9e:
e3:c4:79:c3:0d:7f:7e:1d:fd:2c:ce:1e:b5:bd:e4:39:f9:dc:
c2:28:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:08 2025 by rpki-client