Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: zpzMVp2f41ooiUKhcYp0QfwzvC+GDN3UBb3ten2Wdtc=
Subject key identifier: 27:75:7A:3B:E7:75:7D:5A:5D:5E:D4:78:C8:87:ED:8B:EC:25:FE:37
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0199FCFD797F61701D09E1CA468E90F9CA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: m2aIiSmqtM91sZU4VP2F/Kxez3Puq5lISfTvvjtPUNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:7f:61:70:1d:09:e1:ca:46:8e:90:f9:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=27757a3be7757d5a5d5ed478c887ed8bec25fe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:81:d8:38:f4:f9:89:b3:77:9d:72:9a:bb:
a0:33:1b:72:2d:a6:6a:a4:ca:50:79:0a:c5:7e:c0:
df:5a:74:db:62:fb:63:23:31:f5:5c:45:db:ea:98:
1b:23:b3:07:14:4a:a2:d6:1a:ed:8f:1f:eb:f1:a6:
9e:20:e0:89:7c:f4:0e:60:ee:2e:9e:60:67:37:5d:
fe:92:9e:da:46:68:0c:61:d8:b6:4e:b5:53:76:3f:
ea:4f:fa:1c:7d:3c:15:fb:8a:64:8c:4c:c1:67:d8:
4e:02:24:4d:57:ad:af:82:14:b6:dd:1a:3a:05:10:
7c:86:ab:e0:1f:86:c4:08:39:ad:23:b2:be:97:2f:
44:37:44:cb:98:8d:a5:ec:13:dc:7c:08:cc:fe:b5:
55:7a:94:43:a5:8c:c8:f5:fa:7c:c6:6e:3f:97:1e:
a7:c3:63:e3:8b:4a:9f:7c:49:01:e4:b0:f3:11:29:
4f:ed:88:4e:3e:a9:34:48:b9:77:46:2a:ac:ae:85:
99:5f:69:04:9b:43:be:b9:64:23:44:ab:dc:1e:88:
31:60:67:fc:52:9e:9d:be:d0:f7:8b:f0:7d:24:b4:
bd:12:f0:34:29:d0:16:2d:c3:03:80:e8:1f:57:96:
e6:6f:06:53:e1:39:ba:e3:10:5a:4d:2b:41:a4:dd:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:75:7A:3B:E7:75:7D:5A:5D:5E:D4:78:C8:87:ED:8B:EC:25:FE:37
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:17:da:c9:c5:4d:c7:b6:9a:ad:3b:26:d9:15:d1:27:fb:
42:87:dd:6e:ac:75:a2:67:9a:af:2b:b2:37:ed:9b:96:85:83:
b1:a2:09:57:d5:83:c0:bf:5e:b5:6d:f4:ec:94:c4:14:83:27:
4b:fb:81:a1:a5:4d:2a:c5:d1:2a:95:f3:2e:b2:a8:d2:fc:ec:
a8:a5:5b:92:4a:00:6b:4d:64:ac:6e:5b:6f:12:78:0f:e1:09:
e5:78:ef:7c:9e:b4:09:c8:02:99:db:54:5c:df:5c:d5:8f:ea:
a4:36:f9:33:b9:05:4b:95:aa:ee:ec:f4:c4:cd:b0:39:f1:a7:
43:42:d2:be:fe:c3:8b:84:85:af:1d:c1:56:d5:27:48:dc:49:
d3:24:ad:26:80:07:9f:c2:59:dc:c4:c6:f7:9f:3f:62:63:78:
07:55:05:8d:ab:26:7a:de:56:05:2c:ea:92:6b:2b:03:43:1d:
bc:3d:02:6e:41:c2:c9:58:94:89:aa:bc:42:eb:8d:21:39:c2:
58:4f:e5:ed:16:da:6a:f1:6f:be:b2:db:58:50:a8:9d:07:59:
27:29:0f:aa:c2:d7:f8:1a:47:e9:e5:1e:90:2c:0c:94:82:88:
87:50:45:66:a2:80:5d:62:2d:c3:31:33:b5:df:f3:90:29:c2:
86:47:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:00 2025 by rpki-client