Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: OUA1/w40rKT/0Y3OAwe8dkFUzsSA5suY31SV6Qwbpt0=
Subject key identifier: E1:32:E8:B2:04:FA:9D:E8:8C:A2:B8:2E:CC:BE:7A:69:D4:BE:5A:BD
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 0199FBEC08B9DF91C37681A9A7A761FD7DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: f689XX2+aKruhlVD8gedEjMjXiop5WnIRvh928eN9pg=)
2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=)
3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=)
4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:08:b9:df:91:c3:76:81:a9:a7:a7:61:fd:7d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=e132e8b204fa9de88ca2b82eccbe7a69d4be5abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:fc:bb:bb:b0:7f:df:bf:93:8e:e3:e6:60:
54:cd:f9:52:b9:96:06:e3:a8:b7:48:71:8a:78:03:
81:c0:65:56:0a:d2:7a:a0:3d:cb:33:a3:32:6c:41:
9d:45:8e:b1:e7:b3:6e:d2:27:1f:4b:ba:72:f9:ac:
b3:f9:0b:37:b1:6c:99:3b:8d:01:b1:21:a0:24:18:
b5:92:7b:7c:b3:34:bd:59:3b:04:00:a8:d2:00:24:
ce:f7:55:ff:2b:50:91:a3:b1:a4:40:3e:52:04:d4:
53:f7:cc:f1:b8:63:3f:87:24:0b:34:b8:19:f4:cc:
67:2d:e6:ab:5d:8a:28:ea:04:f4:68:20:ad:99:aa:
10:4b:51:86:7f:37:10:cf:6d:f8:ec:6d:e1:78:db:
35:86:8c:63:cc:7e:52:8e:b0:d7:e8:3c:c3:5d:50:
4c:a4:a1:bd:8e:59:4c:d4:25:68:a4:1b:cb:8c:b9:
dd:95:57:06:d1:97:e4:d6:97:ae:5a:2b:64:d6:bd:
97:6d:0b:a5:60:82:80:41:14:e9:5f:2b:0e:7b:8d:
54:fe:f9:17:e7:35:ca:8b:d9:89:7a:c9:1f:2f:f6:
41:14:66:10:c4:a5:1b:79:91:90:25:49:6f:e6:50:
dd:12:06:59:de:4a:90:da:b0:77:9c:fb:eb:15:0d:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:32:E8:B2:04:FA:9D:E8:8C:A2:B8:2E:CC:BE:7A:69:D4:BE:5A:BD
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:53:d3:f1:d3:4e:08:ce:50:3f:64:6e:c0:2b:ef:c2:d4:2d:
2d:42:26:aa:05:17:3c:a4:d0:90:55:d1:3d:fd:b2:2e:54:71:
8b:48:04:37:72:29:8e:19:a4:86:a3:7b:44:95:6b:2c:4d:0e:
a2:9b:4b:b2:05:5f:9d:4f:71:2a:c7:4a:1c:0e:dc:56:a3:22:
2f:38:c9:66:2e:6d:e4:7b:e7:66:bf:f8:60:9a:0d:ca:a4:95:
cd:97:3c:82:8d:6c:e0:49:20:bf:ba:c3:5d:61:e9:ab:a9:e0:
05:4f:9a:ee:fa:7d:f1:50:93:2f:42:9c:63:68:f0:a4:31:80:
52:08:64:27:27:56:a7:45:63:58:ac:9f:22:e5:cc:a6:3a:f5:
6a:7d:0e:95:93:e5:b2:fd:18:70:4f:7a:02:ab:5e:2a:68:fa:
2a:89:d5:3b:32:89:03:65:c3:c2:2c:64:43:30:86:9a:db:4b:
bd:4b:78:19:60:1f:f5:b3:70:71:21:f5:d8:39:d4:e7:29:77:
63:eb:12:29:ee:7e:6d:c2:a8:d8:50:b2:10:ce:38:e8:e8:a0:
e6:20:24:c5:7a:69:d5:0e:59:f0:2d:1c:7f:fa:0e:ae:79:1f:
5b:0f:dc:7d:6d:4e:e1:9e:4d:5f:78:b6:c9:4c:48:2e:4c:26:
e4:1b:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:49 2025 by rpki-client