Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
File: rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft (raw, json)
Hash identifier: rwXs9w9fmSwF91N3P54mbytN16qI8VnHvvgqQoOBcsQ=
Subject key identifier: 65:1A:29:72:39:19:57:BB:DC:75:6B:0C:E0:76:5F:C6:66:D1:A9:A6
Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Certificate serial: 0199FD6B4B52B8240586B68AF9FF51353119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:31 +0000
Manifest this update: Sun 19 Oct 2025 17:01:31 +0000
Manifest next update: Mon 20 Oct 2025 17:01:31 +0000
Files and hashes: 1: 7oGA-c6QRj7wEtUqcKNVQeiPaKA.roa (hash: MiRDhCNZZYXqTOB7AxjOweIsafby8dLcnJ/tR0Eay+E=)
2: rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl (hash: 0ylnhxqL8tSwmDh6r8wQpj/m3aFJlmbhfnJ9XD97GCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4b:52:b8:24:05:86:b6:8a:f9:ff:51:35:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce
Validity
Not Before: Oct 19 17:01:31 2025 GMT
Not After : Oct 20 17:01:31 2025 GMT
Subject: CN=651a2972391957bbdc756b0ce0765fc666d1a9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:13:fc:87:34:b5:33:68:37:fb:f2:e9:c7:
e4:01:6d:e3:fe:33:22:65:b6:f8:cf:80:1d:2a:2c:
d9:3d:13:d6:11:6a:ca:eb:da:da:4a:38:e1:bb:1b:
14:9f:3b:a7:5d:ca:75:38:ee:a8:52:9e:80:09:af:
71:04:d3:e5:16:54:f6:a0:e1:35:87:5b:fc:2c:55:
8b:8b:17:42:b6:28:19:53:39:f2:ba:e9:58:19:ce:
29:6d:66:a8:94:9a:b5:93:17:72:f9:e5:fe:7b:46:
21:0a:1a:4a:38:80:c3:41:31:ad:58:74:4e:ff:8a:
db:40:a9:fb:55:6f:3f:21:96:f8:ce:49:48:14:4c:
46:66:48:24:b9:69:27:b1:19:5f:c1:0f:06:9e:c3:
55:81:bf:0a:03:cf:84:36:74:22:d8:8b:27:7e:38:
62:47:f0:19:ba:8e:d1:08:45:0d:9c:16:fb:92:de:
48:83:49:63:e8:4e:7c:43:fe:fd:76:d3:36:0f:d2:
ef:0b:a9:55:c2:19:3d:26:e1:70:d3:b0:78:19:c3:
dc:38:0f:b1:e8:2a:a3:2b:dd:ca:4d:18:ab:63:72:
b0:a4:a0:a1:63:f6:9d:dd:85:bd:1b:ec:a0:55:c8:
6c:06:54:8f:02:91:d5:76:6d:e1:33:b0:d7:86:da:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:29:72:39:19:57:BB:DC:75:6B:0C:E0:76:5F:C6:66:D1:A9:A6
X509v3 Authority Key Identifier:
keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c3:94:d2:23:9b:b0:9e:1f:0a:87:79:93:c7:de:63:0f:4b:
99:ce:17:15:13:9b:e8:4d:80:e1:4b:fd:2a:17:ed:b2:58:6b:
f2:0d:d6:7a:49:4b:a9:fa:cf:5f:9a:d6:4f:5b:9a:2c:b8:b3:
24:e3:a4:95:46:a6:a9:40:4d:1c:d5:8a:ae:3b:72:00:0d:e9:
e6:e2:01:2a:06:c5:cf:83:e0:5c:61:b0:da:13:f8:0f:8e:06:
d9:cd:e8:6d:19:2d:cc:ca:20:6a:92:3f:f5:be:49:45:1a:3f:
a6:31:e0:6d:14:ce:c7:e9:82:39:c3:d3:84:02:df:a9:11:03:
0b:15:6b:bc:44:9c:55:b7:a1:fc:c7:b6:de:62:20:87:0b:79:
bb:ac:31:c3:e4:b0:75:02:10:60:de:b3:3b:5f:cf:83:42:39:
dd:c7:ff:15:c0:27:74:89:bb:49:7f:62:f3:bb:24:13:3b:ee:
06:e7:51:92:8a:51:6f:d5:63:9f:a6:80:51:41:5b:dc:5f:86:
8a:e7:fe:87:76:2e:30:a9:66:f8:83:75:a7:21:75:70:e0:c0:
8f:d7:8b:78:f4:e5:b9:63:d8:1c:e2:b5:e5:8d:20:11:69:03:
fa:6c:86:20:d8:a7:4a:6a:d0:21:ea:c1:f1:56:75:40:06:63:
10:9a:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:31 2025 by rpki-client