Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: 3xzlPp/ao6P41yMnGW7cNJALAJvNtx9ATGOzQRTdGRY=
Subject key identifier: 24:6F:E0:64:34:D2:B4:62:AD:36:08:BA:FF:7D:8D:23:DA:76:D1:85
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 0199FD3490C5AE1FB020D74F2873339D7762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: 360htbsSr2AtlTJTH7WMtZUrBRAUMG8WZCElnky6grs=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:90:c5:ae:1f:b0:20:d7:4f:28:73:33:9d:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=246fe06434d2b462ad3608baff7d8d23da76d185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:4b:d6:69:69:f4:c9:f7:b5:6f:3b:c7:b6:
7a:e3:91:d4:30:d8:6e:ae:78:c4:c0:5c:47:5f:47:
19:e7:2c:29:f2:88:bf:7e:97:8e:08:7e:db:e4:15:
4e:cd:42:6d:fd:00:a1:f3:35:6e:19:94:92:38:6d:
94:6b:6f:ff:bf:b8:66:e7:20:4e:f7:f7:fd:4c:4f:
96:c3:93:04:a3:d1:cd:f6:59:63:be:ae:ba:07:cc:
45:4b:ee:c6:f7:db:7a:92:7b:c8:fc:79:bf:40:cd:
a2:90:c6:bb:e4:36:16:3a:35:54:3a:35:87:8b:17:
71:24:fe:75:8f:8f:a2:55:b0:f9:7b:b8:34:ab:5a:
9d:71:5b:f8:39:69:0a:78:74:c8:9d:0a:ef:42:1f:
7e:26:65:01:93:4c:f9:b5:88:92:13:2a:2d:74:9c:
43:5a:14:cf:1f:66:f9:20:1a:50:8c:a8:25:5f:c9:
a4:24:18:31:59:39:64:11:5d:89:2c:f2:09:96:3c:
8a:07:40:f7:f0:4d:4a:53:d2:b5:5d:84:c5:e0:4a:
89:4f:7e:c6:58:a1:56:04:60:70:f0:ea:84:99:cc:
8d:8d:32:a2:1b:21:f3:f9:82:83:30:b7:f1:f5:c4:
aa:59:dd:0a:2e:7a:d0:0b:fd:04:99:d3:90:a3:3e:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:E0:64:34:D2:B4:62:AD:36:08:BA:FF:7D:8D:23:DA:76:D1:85
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9e:47:ad:db:45:ec:33:5f:b3:2f:40:a8:9f:1c:f2:b5:be:
9a:5f:34:a5:14:0e:12:80:c0:68:77:fd:71:5d:24:f9:9c:47:
82:c4:fa:00:c8:80:5a:8f:70:d2:2b:2e:e9:f4:41:3a:0c:93:
fb:e1:d1:74:c7:6a:59:dc:ad:93:12:72:9b:c1:b4:dc:50:7c:
c1:4b:9c:53:13:6c:3d:09:79:73:9c:7b:35:f3:e8:6d:27:b1:
5b:31:52:f8:58:46:d5:5a:49:45:5b:7e:fc:4f:6b:55:b9:d2:
89:e3:ba:57:aa:4f:a8:35:b3:a4:c4:bd:f9:ab:66:10:fc:73:
1c:95:2c:ca:c3:52:73:50:7f:3a:94:f5:88:e3:be:ac:89:5c:
84:94:4d:a9:39:6c:08:0b:84:d5:f9:da:51:94:70:3a:42:fd:
9f:8b:8e:b2:af:cc:14:23:95:9e:31:ca:d0:a8:d5:b0:3f:65:
ce:cc:fc:ce:5c:66:b0:e6:c2:d6:0f:02:f6:c4:7b:a4:2e:d7:
a9:32:e8:50:b3:4b:e6:05:e9:7e:69:bd:2d:c6:c3:20:b7:03:
6e:05:0d:bf:49:a4:59:bc:4e:16:d4:6d:f9:d4:36:83:ad:7f:
42:a0:dd:bd:94:8c:94:5a:e9:93:2c:44:98:4e:8f:60:57:32:
6c:b8:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:19 2025 by rpki-client