Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: 8aROrcBBeeEE9S68JFyUmuzCF0dBP87mHNUE4BLMuAQ=
Subject key identifier: 45:BD:43:CD:9E:00:1B:EB:A4:09:E3:1D:2A:07:20:4B:89:13:68:3C
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 0199FBEAE570477AE2B70FD6D4CD01B7738C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: HEz+KI6YPHARhixOYeOzF3kcS/7HTJrNv9MoXsmSbUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e5:70:47:7a:e2:b7:0f:d6:d4:cd:01:b7:73:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=45bd43cd9e001beba409e31d2a07204b8913683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:3c:2e:4c:b9:58:b3:95:59:2d:53:59:66:
47:55:56:33:54:f2:4b:1f:7f:5e:7d:1b:14:72:e9:
a9:af:c9:2f:00:5f:28:77:d2:0c:b6:f2:b2:67:7e:
d2:b8:be:2e:e9:94:e0:c0:6b:ac:b0:a0:e6:44:c8:
af:03:41:ae:3e:82:f7:41:bb:d7:4d:23:b5:c7:cc:
7b:cc:bc:be:46:c0:83:3b:6c:ee:f4:ea:10:9e:42:
d5:08:19:49:f6:44:20:20:9a:43:d8:5b:65:a3:81:
de:fd:0e:cb:2b:7f:b2:15:69:9e:de:70:4a:f5:a3:
46:5c:64:39:af:60:30:65:3a:a4:d3:45:c9:13:6e:
cf:fa:07:b6:ad:32:44:ec:bc:49:b6:6d:1e:c9:9f:
81:fe:88:43:91:17:cc:17:4d:7f:a5:ef:5a:b4:39:
78:4d:58:e9:54:81:da:06:58:2b:ab:4c:8a:60:03:
f9:6e:ac:49:8f:ad:a0:32:d1:3b:6e:80:7f:ce:50:
a1:9b:7c:35:6e:9d:46:8c:1a:90:7f:df:85:e5:1d:
a6:69:b3:3e:f9:e9:fb:89:b1:23:60:c0:d6:52:62:
4c:af:03:84:5e:99:59:59:ee:55:29:16:02:c7:77:
f6:64:9d:16:63:10:09:48:d2:68:29:70:08:f3:d3:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BD:43:CD:9E:00:1B:EB:A4:09:E3:1D:2A:07:20:4B:89:13:68:3C
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b5:55:3e:2f:8b:5f:29:93:99:13:1d:ef:bf:f0:d3:1c:5f:
30:9b:e8:bb:91:40:49:b5:fd:77:2f:97:86:e5:ef:9b:fa:fb:
b5:0a:da:d6:da:75:01:1d:b5:6d:0e:a8:ad:c7:52:9d:c6:49:
96:bc:cd:94:ee:2f:31:04:42:eb:a6:48:21:b5:40:8d:62:86:
fa:96:f2:20:37:0b:20:ec:ad:93:96:83:be:aa:8f:16:09:36:
30:cb:59:5c:96:57:bb:68:2e:63:81:e3:7b:3e:db:4a:63:43:
7f:c4:3b:e6:84:51:71:ab:cc:f0:f1:2d:91:43:4c:bc:9f:ed:
65:9f:95:3e:d1:99:26:db:76:bd:f3:ca:5d:78:c6:63:be:5e:
ae:41:87:2d:6c:c2:39:ca:19:58:fc:61:96:00:a6:66:03:87:
cb:c9:e3:ed:ae:b3:9d:eb:cc:fc:f0:d7:00:a2:ed:e9:03:95:
76:d9:d4:99:e4:38:02:9c:61:41:4f:f0:33:45:85:14:82:2a:
d9:81:a3:57:32:59:2a:1c:6c:55:03:92:70:4a:50:53:89:d3:
d1:0d:04:45:ce:1d:6c:48:e0:cf:4e:26:e4:7e:a4:de:cf:c8:
10:b1:23:39:be:e1:10:46:46:ea:d8:94:f5:87:fa:a0:1a:8d:
8f:33:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:23 2025 by rpki-client