Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
File: V2VnM04DVjndfMtJdqmycPcmMh0.mft (raw, json)
Hash identifier: 7y6vLMejXxvNrHuMiF2VfaBJ8kS7hKccWLZyvtuySVI=
Subject key identifier: 0B:3C:03:1B:6D:83:9A:B2:AB:27:44:56:31:74:45:24:55:E4:D2:C3
Authority key identifier: 57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
Certificate issuer: /CN=576567334e035639dd7ccb4976a9b270f726321d
Certificate serial: 0199FC218E85A9B4D0A3BE04050822293817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: BF6mEEyNMbb-xRm9_vXJ4CAvddM.roa (hash: LKI2ZmXTKLgLquBH6Yp7C5JIlsxvJUmapEogTIwlb5g=)
2: V2VnM04DVjndfMtJdqmycPcmMh0.crl (hash: s/V3Ie7d8nXr0kl2XHpmZL/B3zTVWW8AnwQLiqsqZWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:85:a9:b4:d0:a3:be:04:05:08:22:29:38:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576567334e035639dd7ccb4976a9b270f726321d
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=0b3c031b6d839ab2ab2744563174452455e4d2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:13:23:e3:f4:ac:76:d1:87:3e:68:ba:1b:
92:f5:a6:4c:86:e4:e5:58:43:27:eb:4a:da:42:98:
e5:6f:f4:74:76:50:10:ca:11:0c:c7:10:f4:da:56:
1e:6b:88:f8:8b:b3:7f:2e:a8:f9:d5:25:6f:5e:3c:
c1:80:13:d8:34:07:2e:40:58:aa:3c:49:1c:99:cd:
a3:a2:fa:20:ac:64:98:f6:dc:1e:21:ea:37:dd:dc:
36:76:dd:56:5f:38:1e:a9:16:2d:3b:fe:91:ef:51:
03:3f:ac:d1:2e:8e:37:e0:61:8f:29:bc:70:a7:b2:
0e:4c:32:7a:c4:4a:15:2a:bb:97:47:c4:2d:4f:3c:
b6:2b:f3:d2:97:18:b2:2c:2b:f2:c9:5d:f2:d7:b1:
d7:bd:4c:24:fd:d7:ea:63:e5:85:2f:bf:09:3b:89:
d2:4f:9b:e2:91:5b:03:60:4a:f2:8e:0c:0d:a4:96:
e5:9d:12:10:0a:1a:7c:13:cf:7a:f5:49:91:dc:61:
14:1c:30:2f:7f:27:c9:40:a2:c2:d7:e5:9d:e4:e1:
97:f3:bf:8d:e8:89:ed:1c:1f:12:9f:fc:7b:8c:32:
0e:99:cf:d4:84:76:08:fa:11:8f:25:e5:12:ba:d3:
d4:12:cf:67:79:87:80:2c:34:ab:62:b5:8f:b1:cc:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3C:03:1B:6D:83:9A:B2:AB:27:44:56:31:74:45:24:55:E4:D2:C3
X509v3 Authority Key Identifier:
keyid:57:65:67:33:4E:03:56:39:DD:7C:CB:49:76:A9:B2:70:F7:26:32:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2VnM04DVjndfMtJdqmycPcmMh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/V2VnM04DVjndfMtJdqmycPcmMh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5f:be:de:07:27:ca:44:2f:2d:2d:a0:1d:1d:d4:70:98:ea:
0e:26:07:61:b9:4d:9f:17:fa:b1:dc:5d:e6:4a:48:77:85:7e:
41:ac:b6:77:3a:dc:a8:b6:59:f8:1c:a6:36:15:a0:fe:3f:8b:
90:6e:20:91:fc:61:b4:43:2a:98:73:ff:1c:77:79:5c:a4:e1:
46:a8:0d:91:3a:54:2c:e4:f3:bf:2f:c3:2d:d9:6e:ed:68:45:
25:24:af:54:c9:45:c6:4c:f7:8a:63:83:c9:8b:e3:f4:8c:78:
96:a8:cf:44:90:69:e6:37:55:69:a5:43:d6:54:c2:9c:2e:ec:
9e:86:33:b7:3b:91:e9:91:b3:9f:1b:ac:4d:b7:b8:64:03:06:
5e:56:98:83:dd:2b:3b:75:8a:c2:1d:fc:98:be:47:3e:e5:19:
46:d5:43:8e:cb:75:38:3d:07:3f:d6:26:4e:ee:3b:a7:fa:cc:
96:24:a4:80:17:29:52:7d:74:df:4c:bb:04:2e:c4:39:72:a3:
4f:f9:e1:63:6b:1e:f4:c9:20:f3:51:14:ed:24:03:79:16:61:
e0:d5:1b:f8:29:cb:b8:56:e4:4a:8c:9d:dc:50:2d:3b:3f:cf:
9d:36:5d:fb:ec:18:0a:9a:84:e5:91:e6:5d:9f:fc:4a:7d:ee:
58:c5:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:31 2025 by rpki-client