Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft (raw, json)
Hash identifier: vn1kKk7tuZ2gx4S7Urue0v1KaYWw/7uAxNig7J2upsU=
Subject key identifier: D2:E4:86:91:A5:AC:FC:35:11:53:4F:24:E2:AD:59:8A:4F:87:0A:CD
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 0199FC582EA7BA963E1EFDD29E373D6FB41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: 6QBVEiLusjnuHnwecVMK9Kg-WII.roa (hash: OapSvDTUmzDRZu9Q3KlIrLgI0CjCfgxrem8xot5UiSo=)
2: Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl (hash: bJIwmM29Po5ZgQcfvJo3vQ6mGPMDfK3Pzrz/l8gSIds=)
3: GiC40GdnPgHbIqIbDNeP-spJi-M.roa (hash: Xd4LHWf6P2V0nuixtM1f8JXOI9EnPVM3k32pXeFOXiw=)
4: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (hash: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=)
5: L5lOWtMXwmLYho3Arxcpd76R5sw.roa (hash: XM0Za1PmkukhwAWipMkx42usukTFibdWlbabSAWWgH4=)
6: Lwic0o2gw3k82wpfSkPa-wUg5Aw.roa (hash: pZ1a8TMxYqDEEa657nYARi2g7u3tXGj01SXvh3eUl1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2e:a7:ba:96:3e:1e:fd:d2:9e:37:3d:6f:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=d2e48691a5acfc3511534f24e2ad598a4f870acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:92:df:77:8e:90:7a:94:9d:b2:9e:f4:43:
ee:49:4a:4f:67:71:29:52:d8:39:f6:6f:01:52:37:
31:7e:79:41:2c:e4:45:4d:0d:38:c4:83:3a:61:39:
bb:11:ae:f9:a5:66:3a:1d:bb:a5:44:68:59:2f:61:
c5:0f:98:4f:7d:0d:40:59:ad:39:90:43:bd:de:77:
39:d2:f0:d8:99:9e:69:52:0b:38:57:08:1d:f2:e8:
8d:f5:1e:d9:39:c5:a9:3d:a4:fd:fb:f0:00:b7:d2:
58:4e:dc:fa:d5:8f:ef:d9:6d:76:57:1d:5d:3d:b4:
f4:f5:36:10:e3:f4:a7:14:4f:ee:e5:c6:07:11:38:
50:b0:07:50:f6:8e:59:a5:cb:a2:da:8a:14:55:43:
30:46:f3:74:a4:6b:c9:e3:d3:2a:3c:c5:1d:df:21:
83:3f:a0:5e:79:9d:a7:84:23:b4:f1:5a:01:cb:6b:
65:64:38:58:06:ac:b5:d6:de:e6:0f:aa:b6:72:1a:
23:42:f0:92:21:5e:77:a3:c0:96:ca:24:1c:16:fc:
fa:26:24:4d:d6:32:92:55:ac:6c:63:c8:f0:a3:b1:
a6:14:f0:cc:66:e4:c2:ac:99:46:c0:b0:df:62:c9:
c0:3a:ae:29:59:aa:dc:42:09:34:68:99:be:2a:cb:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:86:91:A5:AC:FC:35:11:53:4F:24:E2:AD:59:8A:4F:87:0A:CD
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:1c:ec:42:a4:61:59:3c:6b:0e:fb:28:d8:ca:4e:1d:67:
28:ca:bc:5d:62:ae:ac:9d:a6:d1:ba:d2:d1:66:81:b3:84:97:
d7:ba:b0:f1:f1:64:53:e8:fe:f1:8c:78:58:b4:c5:53:cc:ba:
3b:e5:59:0c:71:ed:2f:f5:20:19:e7:f7:60:d5:bd:83:1a:29:
d6:59:15:cb:6a:2c:d4:ee:07:30:fc:f4:f9:70:8d:d0:ce:5d:
a8:c2:c9:f1:46:e9:c3:db:1e:8e:16:0e:1d:6c:df:4e:58:ec:
ca:6e:39:ba:44:c9:04:ee:e3:a8:92:b3:b0:6d:2d:c7:e0:01:
6d:c7:d5:9c:62:af:18:92:f2:30:40:9f:b0:44:f9:bb:24:51:
02:2f:a4:1f:d6:5c:54:5c:06:fa:f6:3a:14:e1:51:6e:1d:c6:
80:60:c6:c3:df:24:e3:9b:82:a3:2c:b1:4d:24:90:cf:57:b8:
c4:81:87:39:0e:c9:61:15:45:b3:a9:76:b7:4a:34:7e:7b:46:
fb:c8:aa:bb:bb:97:96:0c:c9:db:05:ce:a6:4f:ce:62:bb:b5:
ad:ba:71:3b:e5:93:ed:f2:bc:74:38:7e:e7:99:97:f1:c4:d9:
1b:d3:f7:7e:84:3a:75:ee:93:56:54:ec:1e:92:92:37:71:45:
b3:39:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:09 2025 by rpki-client