Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File: 36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier: QNR5nYBCUfReI5xW8UaQ5c0+LiIoCW55nG1LAwnD9pI=
Subject key identifier: 1D:8A:02:5F:30:DE:55:A2:C8:B1:C0:D6:9E:72:55:CD:B8:81:92:1B
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer: /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial: 0199FD34675206A047758248B2DF9A854372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: Q4ytQ2TMqtwB7F/ufLmKAORnHeAC/DTiLl6ryT4vxgE=)
2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)
3: Gt23A32LNafHLHsemLl1kayh63c.roa (hash: 0agfcNSK+86f7lJTamSexAv7ynwwXj+0r7ubyCpwQQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:67:52:06:a0:47:75:82:48:b2:df:9a:85:43:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=1d8a025f30de55a2c8b1c0d69e7255cdb881921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:29:d2:03:3e:8e:56:16:93:d0:6f:9a:b3:
ec:0b:d0:df:5d:97:68:4d:f9:ad:ec:c2:00:47:14:
af:eb:e4:72:7b:1d:df:f9:8c:e5:ed:d4:75:66:ad:
d1:0a:5b:70:a7:55:49:56:0e:f1:6e:e1:05:b8:a4:
57:e3:73:52:05:62:da:23:83:f0:2c:63:9f:4c:eb:
da:38:10:a4:04:52:8d:e1:89:7c:e3:2b:b9:1b:58:
da:bd:e4:5b:bc:e0:08:49:ab:26:b7:ce:70:51:bb:
d1:aa:c5:75:06:a9:2f:c8:e2:48:6e:d7:1a:34:9c:
d0:ae:2f:d9:26:81:34:4f:d2:40:ea:e3:6b:fa:e8:
18:e7:f9:ea:2f:2a:a9:0b:ca:cb:c4:8a:f8:05:d5:
0e:98:e3:5b:30:3b:be:bd:98:1d:e3:40:7e:42:67:
d6:7d:5f:8a:fe:55:be:d5:91:29:1d:2f:c7:ef:21:
2a:9b:dd:3f:0f:e4:13:ee:02:1e:e1:8c:a3:3e:28:
5e:87:32:ed:b7:f3:31:af:6e:8a:a5:25:b3:7e:a9:
b0:55:f7:66:07:97:13:76:2a:38:76:89:a5:c0:bd:
ab:3d:8d:b7:bc:df:cd:4f:12:c1:74:22:d9:19:d6:
b7:e9:09:aa:23:bd:59:71:b8:07:05:ba:a6:b0:a3:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:02:5F:30:DE:55:A2:C8:B1:C0:D6:9E:72:55:CD:B8:81:92:1B
X509v3 Authority Key Identifier:
keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6f:0a:42:08:9e:b4:da:1e:bf:6a:d9:fa:fe:69:66:f1:05:
26:68:ff:1e:6b:6d:2d:08:a7:cd:ac:72:b8:91:78:7e:2a:a8:
43:34:a2:13:e5:81:bb:b4:e3:bd:80:c8:1e:f9:c2:43:69:91:
ea:bd:b3:aa:4e:8c:02:0c:96:9c:ef:dd:bd:eb:03:5b:f5:42:
6a:b6:f5:85:2a:58:7e:dc:85:e4:fd:da:7e:93:fb:2d:c7:4b:
a1:b2:c3:53:0b:70:73:ad:40:4b:69:95:b3:f7:e6:7c:af:e2:
90:a7:a0:18:aa:a8:84:d3:41:4c:6d:48:de:27:f8:66:b7:a0:
d8:62:28:d4:6b:fc:57:cd:eb:01:12:83:17:3c:9e:77:a3:44:
30:76:51:9b:d8:67:8d:24:fc:09:7f:7b:32:86:3b:ef:66:f8:
04:ce:ef:7a:2a:e3:1f:d7:a2:b9:a2:a4:22:c0:f1:9c:2a:5a:
24:a6:50:c9:82:ae:5a:30:c7:b3:86:81:5c:7e:8f:29:19:bb:
f3:f5:42:57:bd:47:02:10:68:3d:2e:54:4f:82:0b:70:7b:22:
d6:74:6f:69:5f:59:2e:7a:e1:9e:cd:51:70:43:ce:70:25:68:
d1:21:d1:a0:70:18:88:ce:96:df:cf:de:41:d5:85:a8:8c:a4:
bb:eb:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:29 2025 by rpki-client