Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
File: pK0j9tzk2Wg8KklDvTfBczXHYYo.mft (raw, json)
Hash identifier: MHDk7RKnYVwfX12rLguXVyMSMzwwpPHsM8ZdmJX1WR4=
Subject key identifier: A1:8F:9C:DE:46:F2:56:5D:93:5E:26:4D:50:AF:57:03:07:6C:E9:68
Authority key identifier: A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
Certificate issuer: /CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Certificate serial: 0199FB7CEDFCD26FAA26B336C5D957CD75EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: RC2JkOQZBHdrMWWJ6dmI74cPa_s.roa (hash: qL9vMEtT48m8aWpCwA/eKJ1AT6hZ+DcyDfjgFWcllKo=)
2: pK0j9tzk2Wg8KklDvTfBczXHYYo.crl (hash: k82KbIDgzJbb+7+bXxE01syIrciEigGkmloNOdidYXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ed:fc:d2:6f:aa:26:b3:36:c5:d9:57:cd:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ad23f6dce4d9683c2a4943bd37c17335c7618a
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=a18f9cde46f2565d935e264d50af5703076ce968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:04:96:c6:4f:46:59:d1:46:30:32:9e:57:
5d:f0:92:e9:a9:32:fa:6e:c5:5f:5f:2b:58:d7:b6:
a0:05:98:9b:c6:a8:ed:6b:37:1b:8d:cf:0b:87:0e:
4d:77:7a:3f:64:60:77:e6:54:15:50:31:7a:92:6c:
77:f7:7b:d4:5f:2a:62:3d:d5:91:2a:d8:e1:31:b0:
5c:5a:cf:14:29:23:c4:d3:79:1b:39:58:11:38:23:
d2:fc:6d:f4:85:49:1b:99:7a:25:54:e2:de:1b:45:
3d:c0:ad:62:d6:8b:20:bd:03:4a:9e:1b:3a:1a:8a:
82:01:20:50:e5:69:27:ab:c6:c9:d5:c8:ac:9c:13:
37:5a:fe:e7:4e:c2:73:58:0c:93:41:b2:9d:4e:5b:
cc:55:0d:79:c0:c6:69:24:0a:ca:26:59:ce:c7:fc:
37:db:ee:b0:ce:5a:f0:44:09:3b:7b:ef:9a:89:e9:
9b:8d:61:31:e7:4b:60:d0:8d:de:32:73:d9:dc:c2:
18:9e:e8:76:85:c4:75:52:b6:78:22:73:24:84:f6:
9a:1f:c8:50:00:1c:cd:cb:34:ce:dd:17:6a:2f:93:
9f:b6:ce:26:f9:6d:b4:32:28:16:21:7a:ea:b1:22:
f6:41:04:1d:5f:26:8d:bf:02:eb:05:1e:bf:f5:c1:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8F:9C:DE:46:F2:56:5D:93:5E:26:4D:50:AF:57:03:07:6C:E9:68
X509v3 Authority Key Identifier:
keyid:A4:AD:23:F6:DC:E4:D9:68:3C:2A:49:43:BD:37:C1:73:35:C7:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pK0j9tzk2Wg8KklDvTfBczXHYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d1837a-606e-4180-a7f0-728e0dfb840d/1/pK0j9tzk2Wg8KklDvTfBczXHYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:07:11:66:92:8c:55:75:f8:88:55:f8:33:0e:67:b5:65:7b:
1f:e5:83:1e:12:5a:73:c7:86:97:1c:e1:e4:40:07:21:3d:4e:
7c:c8:63:e2:04:da:a3:b7:8d:0f:d9:af:9a:75:5f:d4:c9:19:
03:46:10:49:22:9f:54:04:64:0f:87:7b:4e:f6:fa:f2:94:53:
34:fc:04:4f:7b:f7:68:73:4a:02:40:19:a5:f2:88:56:80:ea:
97:3b:39:d6:da:0e:15:fd:9b:3b:aa:8c:6e:e8:d3:fa:0e:4f:
73:eb:3c:f3:4c:f6:88:03:6b:27:f3:58:ab:06:c3:ec:c3:96:
51:89:ca:1d:05:dd:93:0b:c8:fa:bd:ae:e9:5d:be:1f:67:ef:
50:c4:9e:f2:8d:95:94:31:eb:7b:cc:9c:46:d3:d4:ee:c0:7d:
73:a3:85:0e:6a:cb:bd:65:37:76:fc:4e:8b:fb:8f:e9:a9:a5:
09:ff:ba:b2:a1:ef:6d:bc:98:a2:86:aa:5e:16:53:8f:b2:64:
85:ab:b7:c8:0a:ca:14:66:04:c2:5c:b7:0a:88:c1:06:d0:a1:
55:dc:88:79:aa:e0:d5:f7:3a:7e:78:cd:12:48:b1:24:50:95:
f6:9f:93:a9:ea:e7:3f:dc:05:a4:52:de:1b:e2:04:b0:c4:6c:
7b:4f:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:22 2025 by rpki-client