Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier: UA+p0iMk4qUsz+0WIkjYiq7PIxEJ3obBfRI7XTxH2Xg=
Subject key identifier: 77:B8:D1:F3:B2:39:8C:44:58:3E:73:5F:A9:C3:B4:54:22:01:7F:AE
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 0199FB0EBF2F81E4FC06C6D753B2856C5BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number: 16F5
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=)
2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: SFPuXSDOJUjqQCkwKg5XYOKZWIn9yJzuMhg/uemo3Zw=)
3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=)
4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=)
5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=)
6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=)
7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bf:2f:81:e4:fc:06:c6:d7:53:b2:85:6c:5b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=77b8d1f3b2398c44583e735fa9c3b45422017fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:22:e2:27:7e:c8:56:b6:ac:a8:75:84:4f:da:
c2:aa:d0:2f:4f:21:db:f0:45:da:37:db:39:01:78:
6a:b4:aa:51:01:b4:ab:48:71:e8:4d:52:54:a6:6c:
00:a8:bd:ba:48:75:6e:23:ec:83:0d:7a:c7:26:1d:
c5:f7:9b:6f:67:a5:46:bb:19:82:bf:fe:ce:8a:ba:
35:2e:70:8a:04:20:7d:93:1a:6b:6a:5d:59:13:f0:
7a:3f:d0:82:b0:9b:a4:f8:fc:8d:6a:d3:28:de:d8:
41:a7:88:fd:cd:02:32:18:c7:bf:5c:0f:31:23:08:
53:47:aa:69:de:27:d9:b1:4e:4f:f2:d4:f9:ff:53:
c0:c8:28:5f:92:f3:27:4d:83:e7:4f:f1:44:15:be:
71:e9:7d:3f:4d:e2:5c:81:3a:ec:51:a8:dd:62:03:
b7:8a:cf:9c:7a:f7:83:67:40:6d:61:07:ad:3e:c9:
1a:c1:57:5f:16:a4:d0:50:16:e7:49:33:49:3e:51:
7e:50:39:c8:bf:05:3c:53:a5:32:2b:32:01:ed:90:
43:b2:1a:ad:0b:35:b4:16:34:d0:1f:3c:03:a9:ae:
48:ea:70:9d:c2:fd:9f:91:91:dc:67:a5:96:8f:68:
b0:1d:61:65:8c:87:06:5d:f7:cc:14:03:4e:f6:9b:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:D1:F3:B2:39:8C:44:58:3E:73:5F:A9:C3:B4:54:22:01:7F:AE
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:99:52:f3:2c:d3:d3:17:59:fb:20:7e:a0:1b:9c:63:99:79:
6d:b3:84:84:f3:52:15:a7:88:5e:05:d6:e5:50:ab:fb:4e:98:
47:74:df:ac:12:04:cb:3b:80:38:b8:d1:3b:f9:fa:b4:28:f8:
47:28:d0:93:d3:1f:21:09:d9:56:d2:3a:78:70:58:7b:e2:1e:
ae:db:59:da:83:27:0f:be:76:6f:52:7a:38:93:db:c1:17:cd:
f5:5d:f3:bf:dc:d4:5e:d5:34:81:c0:8b:fa:b9:4f:b6:79:8a:
c1:d8:30:5b:7d:d4:45:4f:e3:35:c5:e8:61:00:89:2f:af:80:
a9:a7:f3:b2:97:11:96:5f:77:98:b9:de:24:58:8f:04:b6:45:
97:b9:49:23:72:70:fb:1d:ce:0c:66:3a:96:ce:e5:94:4b:ac:
f7:07:9e:5b:86:e0:dc:47:17:38:1c:5e:5b:9b:6e:48:47:9e:
ba:92:02:59:8f:59:9f:50:6d:6c:4d:32:bc:81:be:7f:b7:81:
23:c5:04:25:28:be:2b:19:7a:35:7c:c3:b8:ac:ca:58:82:5f:
fb:26:b2:01:cc:55:e0:1f:b4:f3:cf:22:9f:1a:4c:bf:99:b3:
d9:82:3c:d5:48:bb:38:88:e1:a6:cf:35:22:d7:41:9d:0e:2c:
b4:a2:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:42 2025 by rpki-client