Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: uqEhctTi0ScvCLPJ/YI1RkwuFH/cJYilAy2n3dgpgas=
Subject key identifier: 30:2A:64:E0:A9:EF:F2:F9:F6:0A:EB:51:E1:A9:F8:63:BE:98:AB:9D
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0199FEB4888EBB30A63FCF1613EC4FDED1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 23:01:08 +0000
Manifest this update: Sun 19 Oct 2025 23:01:08 +0000
Manifest next update: Mon 20 Oct 2025 23:01:08 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: bUwm2hQCt3n2wdj0IU+EjvhsslGlLb9UKDO6HohLFKA=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:88:8e:bb:30:a6:3f:cf:16:13:ec:4f:de:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Oct 19 23:01:08 2025 GMT
Not After : Oct 20 23:01:08 2025 GMT
Subject: CN=302a64e0a9eff2f9f60aeb51e1a9f863be98ab9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:da:96:43:91:c9:10:e6:4a:50:cf:8b:ba:
78:14:ed:bc:ea:27:12:f6:17:7b:e8:e6:6e:63:ed:
d2:a1:86:44:49:5c:56:28:83:03:22:bf:de:31:4f:
41:e3:1a:63:d7:08:62:c7:7d:1c:72:ea:5e:9b:f0:
af:19:a9:aa:0d:d2:60:7a:35:3c:57:cd:73:7d:23:
70:ee:a2:40:11:04:8e:b6:df:12:fb:a3:bf:03:e4:
ad:04:e6:06:34:a3:39:5c:12:10:27:50:37:41:76:
e3:1b:81:a0:0f:2b:b8:28:af:8d:be:6a:a4:96:ba:
78:20:0d:6a:2a:4e:99:8c:47:05:1b:66:e0:21:37:
00:d5:9b:bf:b0:f5:89:b0:24:e4:27:56:ac:e6:20:
36:d9:c5:77:be:db:ff:81:0b:b0:1b:8c:18:db:9b:
ca:53:78:c1:cc:fc:19:aa:d0:08:0a:1b:99:96:ad:
e3:32:5a:a1:4f:65:55:53:fc:ca:29:88:40:1b:71:
f0:d2:3b:78:fa:63:cf:bd:9c:5e:1f:5d:1c:f8:76:
7f:9a:ad:f1:fc:dc:17:fa:9b:9d:e6:fb:5f:da:d6:
76:3b:33:6a:5e:2d:5a:3e:e2:a6:08:49:cb:da:3f:
3f:61:fa:ff:ac:39:eb:62:9a:cb:a4:77:dc:2a:4f:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2A:64:E0:A9:EF:F2:F9:F6:0A:EB:51:E1:A9:F8:63:BE:98:AB:9D
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:38:f8:47:08:48:ec:cc:20:97:e0:ff:47:dc:c2:7b:22:
43:dc:53:38:db:37:d9:d3:ef:ee:fd:45:77:d9:ad:d3:39:ba:
68:9a:0b:b8:51:ab:eb:e6:4e:81:0e:c9:5f:90:c2:a4:c0:97:
8e:70:05:80:9d:cc:a9:11:87:43:d5:58:0c:78:c4:75:89:8d:
32:4c:31:b5:d7:e4:68:ea:1b:46:00:80:99:2d:43:2e:f1:01:
43:20:ad:60:62:e4:54:fa:70:58:38:ba:36:e2:c0:8a:d7:f0:
ad:f9:79:6a:f0:2e:00:e9:65:b8:f3:65:19:76:6c:18:4f:52:
62:2c:12:61:36:ba:92:dc:10:ba:0c:a4:60:23:bc:fd:ee:6c:
3d:31:34:fd:03:47:07:20:0e:34:ed:29:81:bc:00:7d:f6:15:
4e:5b:11:ad:c2:2c:c1:a9:3d:68:4d:d1:07:4a:c3:56:33:71:
ad:84:8c:f2:55:25:67:43:f5:b6:37:45:79:86:30:8e:bf:b9:
f3:58:00:b4:e2:2e:4d:a4:e8:b8:de:9c:38:d8:ee:af:df:9c:
07:a4:9f:54:9d:ef:28:90:11:51:d7:75:14:fc:38:e5:67:a5:
fb:c4:da:d7:42:2a:55:3e:18:09:ed:0f:ea:c2:42:65:08:e4:
b9:03:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:43 2025 by rpki-client