Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: 3g9DGCkjzaeP9UJ6In1Te74luCaXXDF7gKkjSxZLlBQ=
Subject key identifier: AE:01:4A:3C:EE:3C:86:61:ED:42:73:52:6D:64:C1:8A:2B:4B:E7:DC
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0199FCC65B06060A0CBC31279214AC1E62EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: 8obIIdIlPtqXSemmFouJobaldT8QgnG/G8tn5xApcJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5b:06:06:0a:0c:bc:31:27:92:14:ac:1e:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=ae014a3cee3c8661ed4273526d64c18a2b4be7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:44:32:33:f0:90:c6:e4:91:77:00:92:97:
a3:b0:45:75:dc:85:95:d1:42:b2:fe:91:2c:8a:3b:
42:a8:7d:7e:9e:a5:1a:3b:c6:84:c2:fd:16:74:98:
76:85:5a:d9:43:64:04:cc:6c:9f:cc:03:ca:21:2f:
0f:1c:8c:92:03:51:04:dc:37:95:15:08:75:86:3f:
75:ce:e0:c3:ae:f8:9d:fd:b5:4e:d3:87:af:a4:7c:
6c:0b:53:0e:7b:20:c8:a6:cf:01:d7:59:3e:df:4b:
7b:9b:b5:8f:30:a6:53:2b:8e:35:d4:d4:2f:ef:5a:
9c:77:68:2d:d1:8c:c3:93:97:d8:62:0e:27:09:fa:
d5:11:27:af:a7:63:c6:6a:d0:17:c5:9d:95:a8:04:
f3:c5:74:cb:11:71:90:c1:39:20:55:04:64:53:69:
35:d0:88:e6:a7:3e:38:50:6b:84:42:b9:a6:38:e8:
4c:9b:e0:07:06:68:0f:01:94:6f:98:2b:ed:74:f5:
d9:6e:48:ea:fc:43:39:d6:fc:90:69:81:cf:83:68:
99:c9:a1:d1:df:d0:de:ff:d5:dc:29:7e:ec:0a:58:
67:23:64:18:5a:e5:95:24:b0:84:d0:09:b4:aa:00:
85:c6:11:3b:b5:7c:8a:65:5d:1e:2b:c5:80:49:d0:
d0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:4A:3C:EE:3C:86:61:ED:42:73:52:6D:64:C1:8A:2B:4B:E7:DC
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:04:58:0c:8c:e5:c7:32:29:c9:9a:1c:c6:f5:aa:37:83:32:
69:43:1e:54:b6:d6:0b:94:9a:27:82:9f:a2:80:6a:68:97:61:
0c:69:27:1d:78:a0:d8:77:7d:7b:eb:d3:ea:08:b5:2c:be:4d:
54:a0:36:e6:d9:ec:30:fb:6e:73:ec:76:b0:50:ab:48:c3:62:
a2:6a:cd:bd:43:16:6a:4b:ca:5b:11:80:0d:6c:e0:ea:0d:6e:
cc:ff:22:cb:03:dd:35:5a:db:02:b8:ba:ae:c6:da:29:3c:c1:
25:29:d9:3e:bb:b1:44:a9:a3:dd:aa:21:14:31:7f:0f:0c:a9:
02:95:b7:6f:d1:dd:5e:2d:ec:95:9a:5a:86:91:26:f9:e2:b3:
ff:dd:98:2f:21:16:e7:3d:40:08:da:ab:ce:94:cb:cb:47:83:
df:cd:f8:ca:fd:52:36:df:a2:9c:ac:47:13:a4:36:cf:ef:0e:
08:81:61:30:7d:98:c6:5e:f5:bc:da:f4:52:a7:08:2e:21:5b:
7d:97:1b:5f:99:44:36:d7:6d:cc:bf:fb:fc:a7:2d:af:47:31:
1f:4f:04:0a:ed:15:17:f1:8c:42:2a:b7:0f:8a:65:f0:6c:15:
43:dc:b5:cb:5f:f8:63:07:de:09:38:c7:5e:05:52:66:88:d1:
1a:8a:e3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:42 2025 by rpki-client