Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
File: 0lE5LNfm5ApFwbikR5iA7vlg8zA.mft (raw, json)
Hash identifier: KK8gg28pWWyP83I93OmPa4jcLck7MKBRQv/aYqpyGAw=
Subject key identifier: 78:21:36:B3:39:98:63:DE:84:02:73:7E:45:3C:84:04:AC:85:3D:13
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 0199FE7DC9E9166BDDD386845FECF82DBC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:20 +0000
Manifest this update: Sun 19 Oct 2025 22:01:20 +0000
Manifest next update: Mon 20 Oct 2025 22:01:20 +0000
Files and hashes: 1: 0lE5LNfm5ApFwbikR5iA7vlg8zA.crl (hash: HCk24kqb+FCVcO1ISAqZuLvABa8Fj8OyuOwTC8I1XQs=)
2: FJ052FCXxgY8148DvYkO__En3kw.roa (hash: JLmqR8aNA75wEnRdZMPO0CuZGQnOp6G+B6BOZat9Lxk=)
3: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (hash: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c9:e9:16:6b:dd:d3:86:84:5f:ec:f8:2d:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Oct 19 22:01:20 2025 GMT
Not After : Oct 20 22:01:20 2025 GMT
Subject: CN=782136b3399863de8402737e453c8404ac853d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:5f:8f:a9:f3:dd:86:7e:42:9a:8d:f5:bd:
13:f5:e0:f6:10:d8:f1:28:ed:ec:b5:22:cd:4b:5a:
2d:8f:2e:cc:6d:21:c3:19:ce:d7:4f:78:f6:cb:94:
69:51:29:d5:57:ae:7e:f9:9c:d2:8c:8a:7b:af:64:
b8:eb:0a:d8:7f:70:e9:77:df:c2:3a:dd:a9:bf:ef:
be:5b:36:39:bf:ad:7c:03:36:21:06:22:67:56:ac:
76:76:02:d5:53:8b:c7:99:fe:f5:c5:93:1b:1f:a8:
08:a5:7c:4a:fb:05:40:54:a4:86:cf:eb:7c:e2:30:
b9:12:7c:41:a0:3e:30:e4:d7:b3:23:84:cd:49:12:
95:37:15:58:43:b4:92:9a:64:37:f7:d5:96:40:49:
ac:b1:39:21:a3:cc:19:34:5e:85:24:65:43:4d:8d:
32:7a:b6:53:7e:9f:da:4a:1f:d9:8a:e7:f7:ea:0e:
42:29:f9:82:6a:aa:c6:e7:a7:97:74:2c:3f:f7:c5:
d4:af:e1:fe:0e:e2:b2:ab:b2:58:33:73:b0:2a:ff:
5f:7d:c2:04:fe:a7:6c:c6:4e:be:55:72:03:7c:7e:
a1:5e:05:7e:f4:af:a9:72:ba:ff:a9:05:5e:ae:35:
2b:ea:24:1b:b5:16:5c:3d:42:37:5f:c6:05:87:14:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:21:36:B3:39:98:63:DE:84:02:73:7E:45:3C:84:04:AC:85:3D:13
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:c3:b4:e3:04:df:0c:fd:e3:01:38:a3:fc:65:9d:85:e8:
8e:6f:4c:c5:a8:6c:f7:f8:6e:48:e1:7d:cb:fa:25:ef:03:cf:
00:bc:b2:58:53:a7:13:87:02:17:a4:e0:d3:76:fd:a9:e2:94:
c2:d0:a1:96:ee:c0:c5:5b:37:6f:67:6a:26:83:5f:28:80:74:
6e:c2:4f:4f:26:71:81:22:17:ef:bd:ad:29:9c:4a:65:aa:c1:
ec:5e:4e:fe:46:47:00:48:47:70:16:ce:11:85:f0:cd:5a:f4:
92:aa:a6:c6:63:1f:9b:c0:d5:e2:19:e1:4a:44:b9:01:5b:50:
d3:c4:04:05:79:71:6f:2a:61:01:38:15:02:37:f3:2b:0f:d8:
d8:85:e6:2b:e5:d4:3b:f2:86:d3:fa:cf:f2:8b:1c:08:df:eb:
94:be:66:b8:b3:51:99:d5:fd:75:d7:f6:87:d4:c3:31:81:04:
df:03:d1:3f:ff:58:fb:f6:b3:29:20:e5:e6:a3:b7:45:ec:8e:
ab:bd:0b:2b:6b:2e:f8:f7:d6:3d:9f:5c:8c:69:af:81:4b:34:
4a:b2:d9:f4:4d:30:a5:d3:20:04:56:38:4f:7d:53:8f:35:59:
9d:9d:51:63:c7:6f:d6:3a:cd:a6:ad:1a:dc:e1:eb:3b:59:65:
9e:81:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:14 2025 by rpki-client