Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: I4ZZnfXyFKL8LnkOq9oqcjw9bhc2RovKK2GYJLHoo+o=
Subject key identifier: 2C:FB:34:7A:94:15:DC:EC:4D:52:A6:63:1B:76:00:88:78:02:BB:C7
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0199FC21A55842CF2D1676E304CD64DA1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: FSgW/dpw8qzktbooBOKHVVQkEKfbsM2dFgPkRNbDorM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a5:58:42:cf:2d:16:76:e3:04:cd:64:da:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=2cfb347a9415dcec4d52a6631b7600887802bbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5e:81:de:08:28:c9:e5:3d:32:41:8e:29:58:
9b:4b:3d:35:90:9f:e5:07:52:4c:12:d7:be:28:a1:
03:fd:77:ec:f1:ed:4b:cb:ab:46:6c:cd:37:5e:b1:
28:10:99:af:d1:76:8f:b1:7d:81:1f:06:fb:f4:2c:
a2:21:46:b9:a1:7f:11:73:2d:f5:01:ae:11:3b:fe:
2f:31:cb:e7:38:ce:86:6a:f3:f5:9c:97:06:f9:e7:
f1:5b:7c:2c:62:c6:97:28:3c:e5:83:3d:1b:34:29:
7e:9c:57:a2:03:a9:0d:02:9a:a5:40:82:46:e6:89:
3d:18:97:ff:f6:26:a8:d3:e0:c8:e0:f2:73:f1:7d:
37:99:09:3e:b7:2c:dc:a2:5c:31:94:97:50:6d:03:
98:4d:c3:f8:57:42:90:5c:ac:bc:56:a0:6e:fe:37:
94:f5:69:68:64:7b:3e:5f:36:16:d2:88:a7:91:23:
65:9a:2e:12:1c:30:fe:bd:75:3e:64:32:39:0e:75:
1f:fd:3b:bc:96:77:b2:98:a7:3e:75:7c:98:77:42:
bf:c3:38:8b:1f:1d:c7:82:d9:b1:5d:16:63:3d:6a:
c2:dd:0d:50:55:22:4c:59:bb:80:91:7e:0f:ce:a2:
81:76:8e:36:07:d2:66:e4:41:12:fc:65:25:7d:61:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:34:7A:94:15:DC:EC:4D:52:A6:63:1B:76:00:88:78:02:BB:C7
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7d:84:65:9f:ea:8c:5f:27:a1:c8:fb:9b:9f:51:ba:dd:4d:
16:58:b2:f5:0a:ff:41:01:df:96:87:3a:c3:60:80:9d:c5:27:
85:53:bf:be:f7:37:4b:36:27:e7:b7:ff:ea:41:ac:97:43:af:
5e:63:79:94:0a:e5:db:d1:fe:35:01:f1:04:e7:3d:09:71:30:
7e:92:3b:af:73:16:16:e7:0a:57:d9:26:23:4b:47:b3:ea:a5:
20:79:97:a4:73:b7:f5:5a:36:c4:ac:da:c1:a7:c6:f5:c0:90:
7f:bc:9f:61:c9:14:34:7c:bd:4b:36:b5:1d:35:79:a3:68:59:
8c:0b:d9:28:47:e9:3d:df:eb:3d:c2:f3:04:1a:86:c4:ad:b1:
5f:27:68:28:e8:58:67:1e:c2:84:4f:e8:36:9c:d2:03:aa:af:
00:30:b6:29:61:3a:b1:d4:f1:e9:58:01:64:cf:0c:4b:68:b9:
46:11:e3:f7:22:43:ce:d7:88:d7:a5:75:d6:29:9a:63:59:04:
3e:b7:99:17:a5:b3:33:b7:b7:c6:b0:b9:3a:02:94:df:0a:0c:
73:60:4f:02:0b:1d:aa:3c:aa:52:c5:a5:9e:f2:3a:46:f6:df:
22:a0:98:58:4c:71:20:7c:13:ed:42:0b:32:0a:12:c3:1f:b9:
31:70:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:20 2025 by rpki-client