Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: u9/MGsZgXItmhU0q8l5lJzJH/VOh5xYOju3XYVaNaqs=
Subject key identifier: 9F:20:E6:84:A4:79:06:B5:35:99:DF:FD:E4:CA:04:FB:CD:13:85:E5
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 0199FDDA5274204703CA3CE1DA5AB72E1E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:47 +0000
Manifest this update: Sun 19 Oct 2025 19:02:47 +0000
Manifest next update: Mon 20 Oct 2025 19:02:47 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: kmzTSsdwi+r8OgYB0j1Bn+oPb765w/rgXxxl3C3NQzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:52:74:20:47:03:ca:3c:e1:da:5a:b7:2e:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Oct 19 19:02:47 2025 GMT
Not After : Oct 20 19:02:47 2025 GMT
Subject: CN=9f20e684a47906b53599dffde4ca04fbcd1385e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:62:af:35:a4:98:58:1f:ef:a3:a9:ea:9d:
82:5d:53:a5:38:dd:ee:ca:02:b7:0f:52:d6:4d:de:
ad:1e:c9:5e:b9:be:4a:5b:fc:40:6f:48:18:ab:38:
30:08:c9:cf:6f:38:f7:84:43:40:a4:3e:56:05:31:
02:5b:a3:b5:8a:4c:0d:6f:1c:28:84:6e:90:ea:67:
f3:36:ea:8b:c0:d1:64:4a:0e:f9:a8:2b:af:82:f3:
f9:bc:84:e0:9b:54:26:41:f5:58:ae:cf:cc:65:d6:
8f:e7:7d:25:ca:3e:59:17:e4:fa:13:cb:2b:d4:31:
2b:4a:08:70:85:57:c1:23:df:c4:90:9e:de:80:e0:
c5:ac:5a:6b:a9:c7:fc:f5:db:e5:6f:59:c6:d3:5d:
97:e3:a3:1a:15:e9:f7:06:ca:58:2f:cc:14:f0:a2:
52:c8:db:fa:4a:b0:d0:83:69:19:48:c3:4c:ec:21:
33:81:ea:c4:0c:76:59:cd:2d:91:8c:35:6f:24:a5:
e5:e8:46:bc:89:0d:08:3c:7e:ae:82:0a:d7:1b:e4:
cd:49:f1:dd:cf:ed:d3:f6:65:32:89:a8:aa:8a:a1:
ee:30:5e:1f:db:17:85:ca:61:e0:2e:8a:93:dc:04:
de:97:cd:4d:5e:7f:a5:23:55:cf:a8:b1:db:f5:91:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:20:E6:84:A4:79:06:B5:35:99:DF:FD:E4:CA:04:FB:CD:13:85:E5
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c1:33:a5:84:0c:1f:65:b5:27:e9:43:94:c9:e3:91:03:2a:
23:99:64:80:0d:c6:30:c5:6f:67:88:2b:96:5a:a2:a2:19:dc:
c9:ba:be:ab:20:54:fa:30:5d:b7:c0:b0:07:7f:bd:b6:81:f5:
8d:2a:91:65:d4:98:7c:71:a7:a7:ce:4f:45:4f:39:28:ea:7f:
9a:55:60:dd:61:8b:ab:14:e2:2a:74:12:31:ce:7b:c7:04:d7:
b3:b6:b9:7d:6d:d4:e5:24:48:ef:51:7d:64:0a:e1:ab:4b:66:
04:7f:4a:35:f1:5e:58:03:e1:06:cf:c6:66:eb:63:84:f0:82:
d9:a9:eb:4c:e8:d0:0e:ea:9e:b2:9c:ff:b0:47:9d:fe:6f:59:
d9:38:cc:53:1d:d7:f2:ac:36:d0:3f:82:1e:aa:09:0f:f4:9a:
f8:56:61:d2:5a:da:92:36:6f:5a:99:16:e0:bd:0a:4d:f2:79:
ca:6c:a7:c2:ea:fd:29:f9:d6:d0:f3:9b:b7:a1:f1:9e:52:ef:
7a:5e:8b:71:e0:51:b8:d6:44:68:b1:cd:65:da:cc:e8:1e:83:
03:ca:a4:80:73:fe:21:a3:8f:2b:62:49:eb:0d:4f:e2:d7:9d:
3f:0b:68:33:9d:fd:b0:23:7a:4c:cd:33:93:1f:e7:7f:59:cd:
d1:1d:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:39 2025 by rpki-client