Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: D8Brz+6+uy+wHtzWIGzXZaGrisvTBwdmqsiLPVB2JQk=
Subject key identifier: 8F:83:AC:2E:0E:B6:E7:7E:A7:FB:07:B0:F5:4A:A7:AE:92:34:E3:92
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 0199FBEBC171F07A1905F8BF8F8C96AAD476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: UKIxVUfbThwVrxkZEqKJOb2667IjqXRhEXsw9h4SxlA=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c1:71:f0:7a:19:05:f8:bf:8f:8c:96:aa:d4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=8f83ac2e0eb6e77ea7fb07b0f54aa7ae9234e392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:64:b8:c0:e1:46:1c:35:2b:23:b5:9d:ee:
5f:2f:d4:ec:a2:2c:02:e5:dd:b5:d0:fe:85:b8:d6:
28:e3:d8:d8:52:1b:80:22:a8:76:d3:c2:d4:99:ed:
04:b2:69:77:58:70:d0:bc:6b:1f:64:6c:87:0e:71:
07:80:d7:31:1f:6c:08:d1:4d:c8:2b:88:21:c1:cd:
54:05:dc:c1:fb:1e:38:af:40:d6:2f:5b:fb:9b:bb:
48:80:44:27:3c:79:9a:a3:03:2d:cc:04:45:d2:20:
c3:81:d4:ae:dd:43:93:e1:c4:0f:14:4d:5f:33:d2:
18:a0:86:79:f6:04:a1:cd:6d:a0:39:da:f1:8e:6a:
27:01:2e:8c:29:63:21:56:47:bc:1e:46:81:7d:f6:
89:48:17:0d:f9:8e:e7:27:bf:d5:e6:8f:0c:d0:b6:
76:48:55:a4:07:ac:69:be:e7:8e:70:8d:29:8e:5a:
4d:ed:67:f3:dd:85:2b:bf:a7:78:7c:23:e7:7a:02:
67:e1:69:b2:15:5c:27:b0:51:3c:ba:af:1a:d1:a2:
8f:a7:67:18:12:66:6e:b5:6b:4b:40:84:a7:10:99:
de:16:34:00:07:5c:29:ce:80:c8:86:82:96:f5:40:
6a:ad:ea:1f:9f:71:16:87:30:b6:49:e3:5a:59:10:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:83:AC:2E:0E:B6:E7:7E:A7:FB:07:B0:F5:4A:A7:AE:92:34:E3:92
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d8:31:50:42:b9:42:73:cb:96:7f:c1:71:2e:28:f1:e4:07:
64:ea:6a:05:aa:97:9f:f9:f2:bd:15:2b:e0:b7:b1:18:2e:be:
28:40:a3:2e:8e:20:0c:4f:ce:b3:e8:1b:ff:50:f2:e8:56:24:
9d:49:ec:f6:92:4c:35:27:4b:21:ce:7d:0a:d8:d5:e2:81:c9:
a9:95:63:99:64:9d:a1:3b:26:99:ae:53:0f:1f:0e:6a:dd:52:
a9:3b:d1:b1:55:fb:66:9b:25:9f:3b:3e:9e:f9:7e:13:ed:a0:
d2:c1:6d:e2:ad:0b:83:f3:f8:78:7c:18:2d:17:c2:dc:3e:e8:
16:ff:04:0d:13:c1:13:13:6d:c8:15:b7:1a:83:e4:ba:78:1a:
8a:e7:7a:24:8d:12:d0:7d:df:30:dd:c1:ff:c2:b7:89:d0:36:
4d:64:f7:20:04:bc:09:b5:85:ab:dd:fa:b1:eb:6e:5b:d5:9c:
f1:e3:5c:6f:4c:1d:59:98:58:95:44:64:4a:34:dc:b4:01:52:
46:5d:23:c8:20:83:19:37:6f:4b:74:49:b3:74:88:18:66:02:
51:b5:31:12:d6:9b:31:41:06:2c:98:e7:3e:8f:9c:0a:dc:a8:
7c:a1:51:28:c4:f2:ce:02:3d:69:b8:92:96:36:a4:24:a5:89:
87:db:b6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:42 2025 by rpki-client