Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: 8vM04nfVHTRplqfZuXJdTpDqvqxYzQnIvRUFLtrPURY=
Subject key identifier: 70:AB:95:3E:64:03:79:47:94:2D:F5:A3:C8:07:B0:8A:86:2F:2C:71
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 0199FE1014A5375CBB2223E9C2350565D04C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 20:01:30 +0000
Manifest this update: Sun 19 Oct 2025 20:01:30 +0000
Manifest next update: Mon 20 Oct 2025 20:01:30 +0000
Files and hashes: 1: TTDv1twa5Oq2wS4kqb31Wa4mKwc.roa (hash: kNwC0HcE7BSu6NKB5QfTvVm3I8iIUDuBU4W9LJhw8AE=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: fQGool1QdkNFvUHJ50wYmv7V3G1HnO3qKhc8JuyRQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:14:a5:37:5c:bb:22:23:e9:c2:35:05:65:d0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Oct 19 20:01:30 2025 GMT
Not After : Oct 20 20:01:30 2025 GMT
Subject: CN=70ab953e64037947942df5a3c807b08a862f2c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:08:ba:d7:53:67:43:56:a6:83:6c:a7:97:
28:6e:8a:56:df:d8:de:aa:82:2c:74:4a:17:91:9b:
01:49:90:5e:0d:b7:94:83:05:aa:90:56:95:b7:95:
c8:c0:62:02:ef:af:48:d8:28:7f:fd:3e:dd:95:3f:
8b:a7:98:20:8c:2d:70:af:47:10:eb:5c:23:2d:28:
18:d4:be:0f:09:af:15:cb:8e:b1:ce:2c:14:58:70:
bc:6c:43:79:98:be:2b:53:7f:f7:3f:53:d0:df:ae:
81:e5:e8:d3:89:af:d5:d5:f4:7d:36:e5:18:ca:22:
f1:45:30:d7:f0:1f:c9:d0:22:d0:52:df:e4:eb:2a:
d0:8c:02:4f:55:30:d6:90:02:0a:37:ea:a7:fa:a9:
72:4c:05:89:c7:cc:22:dd:ae:3d:f5:a8:18:d7:4c:
e1:a7:0a:2e:1d:be:49:04:86:f1:a1:8d:0f:0e:ed:
f4:24:1f:96:49:47:a8:89:4b:4f:03:b1:d6:99:1e:
8e:30:ab:18:ae:86:d8:7f:00:47:f3:c0:b8:a9:b5:
f5:23:53:cf:ef:99:03:0d:aa:5f:8a:81:10:2f:09:
32:b0:d5:1b:33:05:bf:81:cf:3e:44:b1:2d:4f:b7:
e1:b7:7e:38:97:10:b3:8a:f4:ac:46:6a:97:21:e9:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:95:3E:64:03:79:47:94:2D:F5:A3:C8:07:B0:8A:86:2F:2C:71
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:84:3a:b2:9b:12:15:75:0f:00:1c:63:45:15:32:d4:00:99:
33:69:a3:b7:13:ef:9e:32:3a:93:80:a1:e7:a2:d4:86:ca:e1:
94:6c:53:f4:40:ea:d2:c2:ff:ed:53:ac:0b:d5:06:6e:d4:0b:
68:db:a9:8c:c4:51:30:8a:86:3a:f1:4a:5c:02:7c:a9:4c:e4:
14:d8:e2:7c:69:7c:e5:ee:91:2a:29:ea:c6:d5:8d:f0:05:32:
30:b6:dc:89:56:99:e5:ec:59:76:83:a6:8d:73:ec:8a:ff:8a:
f3:c4:73:62:92:0a:34:40:e1:c9:6d:da:91:5e:e0:14:92:dc:
e2:32:5c:7d:df:14:e0:d6:7a:09:86:36:ef:29:f9:29:2d:12:
30:5e:89:dc:2c:ad:60:1f:91:01:ba:71:fe:f6:61:70:9d:5a:
b0:e9:9f:1d:35:19:2e:fa:0a:fa:78:8f:94:32:84:3d:72:c6:
c0:f7:03:5f:4b:19:10:02:eb:83:d8:24:e6:f1:16:f9:f3:94:
32:40:27:39:1e:0e:b9:d7:f2:b2:f0:2f:2d:5f:08:14:1d:28:
56:53:36:a1:72:0d:72:18:0d:97:07:5f:e6:33:73:f0:e8:a0:
e2:7b:35:e2:7f:0d:01:10:d0:a3:76:e0:62:c2:96:53:b7:77:
e1:c8:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:52 2025 by rpki-client