Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: rLdA4RZMfgrxKseS/cTPXjT1C/YrRfq78MzgY5RgQFk=
Subject key identifier: B1:5D:8C:24:6C:93:55:E4:DE:53:52:55:B0:6C:5A:5C:D2:AB:42:EE
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 0199FE105A0AFE0E78849C63EEC931D381E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:48 +0000
Manifest this update: Sun 19 Oct 2025 20:01:48 +0000
Manifest next update: Mon 20 Oct 2025 20:01:48 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: 1sTbFBjUflX0jsdyqtbg9PGW2ppEzSYlK4f58DSQa7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:5a:0a:fe:0e:78:84:9c:63:ee:c9:31:d3:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Oct 19 20:01:48 2025 GMT
Not After : Oct 20 20:01:48 2025 GMT
Subject: CN=b15d8c246c9355e4de535255b06c5a5cd2ab42ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:fc:f6:eb:41:81:24:5f:cb:f7:f2:bb:fa:
b2:73:73:82:66:09:bd:08:b9:9f:36:cf:83:c3:58:
5c:80:1a:eb:41:28:32:99:5f:d5:85:c0:61:27:d6:
81:c1:fd:e4:f8:bc:f5:55:f0:38:96:1e:c5:b3:86:
f7:e2:81:f2:9b:fe:f5:f5:1b:bc:00:30:76:16:ba:
bc:3d:75:e0:cd:5d:38:c1:44:e1:48:83:e4:c7:4a:
2f:2b:0a:ca:db:b9:92:24:99:ff:10:20:8d:de:d0:
2a:ee:49:cf:c3:dc:00:49:eb:f4:60:12:b9:07:57:
ff:85:e5:e2:fe:6b:03:54:34:19:97:fa:a3:b6:4a:
74:6d:37:7f:58:ea:4a:e7:56:b1:66:3c:99:dc:67:
3f:53:79:97:66:99:c4:45:56:03:0b:af:7e:66:3f:
df:52:b3:58:09:9a:c5:fd:80:cf:28:a0:fd:12:9b:
3d:ac:b9:04:0e:70:b7:69:40:af:6d:08:e6:8d:7e:
1d:8d:a3:17:fc:e9:fe:4e:a4:09:04:27:76:e0:98:
1b:aa:c7:bf:f5:21:a4:65:bf:25:71:fe:2e:c9:b3:
f8:9a:36:d0:0e:44:71:10:05:92:f4:fb:6b:80:93:
42:3e:44:9e:9f:9e:b8:03:94:c5:77:fc:4b:d5:93:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5D:8C:24:6C:93:55:E4:DE:53:52:55:B0:6C:5A:5C:D2:AB:42:EE
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d6:96:3c:3c:b8:a6:01:09:41:8c:67:13:d4:67:be:6c:11:
b1:a4:15:3b:f5:5f:89:c4:d9:c9:78:03:5d:c2:50:55:16:37:
07:8b:b4:f1:21:78:bd:2c:f5:16:47:e6:ff:4f:09:4f:25:71:
3e:22:96:79:3a:38:f6:94:3e:51:c3:23:03:7e:c8:60:f5:7f:
bb:60:57:5e:67:84:90:a2:48:e3:1f:70:65:af:b8:35:dc:a6:
8c:a1:71:c3:68:c7:a8:42:44:35:31:aa:78:42:61:ff:f7:12:
71:a7:26:64:a3:1b:e0:a8:8f:4f:75:c7:3f:6e:33:69:c5:33:
fa:5a:4a:63:c3:63:82:29:e5:79:cb:c6:41:53:33:69:2b:70:
2e:be:59:f9:b6:47:95:d1:90:e3:39:a1:c4:d2:42:3f:46:7b:
a6:56:84:22:10:f7:e8:13:de:01:06:a9:7d:a3:d4:5c:db:67:
2a:9e:05:32:74:45:66:99:bd:8c:1d:e8:a4:0f:89:07:ee:eb:
d8:9a:08:09:25:2e:89:89:d4:58:e2:5b:9e:a4:c9:81:d4:dd:
52:63:e6:00:b8:52:88:08:bb:4b:44:56:40:f9:f0:84:5f:cf:
c6:bd:7b:ce:6d:78:90:82:61:a1:1d:96:2e:e7:cc:1a:0f:aa:
ea:14:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:59 2025 by rpki-client