Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: M7aGnJb39dCQ2sCN44TSC/rtlj/60OvHjg0tv1nF4a0=
Subject key identifier: 91:77:53:BB:2A:47:1E:39:5E:AC:01:A7:75:8D:5F:85:C3:0E:3D:BA
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0199FFC83D30DC57822CE4C76ADDF2FC6C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:16 +0000
Manifest this update: Mon 20 Oct 2025 04:02:16 +0000
Manifest next update: Tue 21 Oct 2025 04:02:16 +0000
Files and hashes: 1: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: VCA9kpUQvyTiLRPJCHLlFt3aodIMraQ1bzQejxkuRWc=)
2: g_lThlnsJq9LpMngQCd0Ev-AJxQ.roa (hash: J/8qgOiiWUFaiNrcnTWTtH2kw8HeWHNYJWQaiboNZV0=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
4: qokcHE99iTrXl6i5ZKbVWDs737c.roa (hash: i4+UG/3lSUIbQWMfcvfYr7tTK0L7q3cwt000JnF1onE=)
5: tsEpNfREWif2pmmZMW8i8IMX_NA.roa (hash: Z317i+maC8qfR96UM+ggVrhs1/7gBs3PFnoiv0k12gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:3d:30:dc:57:82:2c:e4:c7:6a:dd:f2:fc:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Oct 20 04:02:16 2025 GMT
Not After : Oct 21 04:02:16 2025 GMT
Subject: CN=917753bb2a471e395eac01a7758d5f85c30e3dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:93:c4:ce:95:b9:74:82:40:07:7c:33:68:
32:cb:3e:0b:77:d0:bb:5b:5e:3b:28:64:2d:12:d6:
1d:43:97:75:06:25:8e:6c:a2:c1:cb:cc:71:94:9e:
f4:a8:a9:c5:16:d1:20:68:4b:56:9a:59:3e:cb:d9:
e5:31:c3:01:91:8f:71:70:21:6d:5f:1d:60:80:8c:
9e:3f:90:03:d9:8a:88:c6:d3:e1:86:fd:29:02:6e:
bf:89:04:b8:0d:a6:c9:e8:a2:60:0d:6a:a3:11:a5:
23:93:1d:76:60:a2:4a:9c:14:3d:a0:22:f0:2a:0b:
83:27:fb:04:f7:b3:3d:c0:fd:78:e2:31:95:64:3a:
3d:15:dc:33:36:e9:53:8c:bb:8e:8e:9a:c4:88:63:
d6:74:8e:53:60:51:59:8d:f1:58:69:3b:7c:1f:43:
96:99:52:41:82:f3:d5:6e:ab:18:a2:d6:b1:90:ae:
b6:a4:71:60:55:c3:4d:7d:b8:88:a4:b6:8e:3a:a9:
f8:f7:4b:04:77:48:df:70:49:5c:1a:f5:6c:3c:56:
fd:d1:cf:35:b4:cc:bf:4c:46:c7:48:6b:ce:1e:e3:
28:d3:09:9a:07:8e:ef:bf:9a:4e:7c:81:ce:ab:c4:
37:1c:38:ec:5e:d1:d8:23:89:f1:c6:1c:38:ad:d7:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:77:53:BB:2A:47:1E:39:5E:AC:01:A7:75:8D:5F:85:C3:0E:3D:BA
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9a:00:bd:b4:de:36:c8:b9:e1:a1:86:a7:b6:c9:84:ba:34:
26:9f:31:23:3b:40:2d:af:e7:7b:96:eb:95:33:81:04:e9:47:
23:2a:d1:9f:fd:7a:0d:65:42:94:39:57:5c:5b:4d:7c:8b:ce:
d9:53:d7:95:2b:f1:45:6e:a7:5d:66:c5:f1:fa:63:70:be:91:
59:ad:21:9c:bc:4b:ec:35:4b:46:68:ce:ba:a6:77:96:67:ba:
a7:bd:7b:a8:35:6e:0b:8a:ad:e6:fa:be:7b:10:aa:82:90:58:
99:3f:94:81:b2:25:fc:51:1b:62:50:f6:b4:61:2c:ff:28:a8:
6d:e9:82:19:5e:86:89:fe:7d:c4:b8:43:b1:1e:bc:e4:c2:75:
aa:24:89:26:fd:bb:a7:76:1f:e5:11:0c:34:25:9c:16:bf:53:
1c:b0:48:20:09:34:a1:13:b1:d8:75:4e:d3:2a:d8:13:8f:5e:
39:d4:04:7c:96:48:5b:f1:f1:8f:58:75:e2:4a:cc:a4:9e:62:
59:52:7a:a9:05:83:43:82:13:88:64:36:1a:35:1e:25:00:ee:
31:53:c9:2c:fe:8d:dd:d5:0c:79:92:0a:22:3e:c4:4b:1b:80:
84:35:68:1e:b8:79:59:80:7d:90:9d:f6:9a:ae:6b:5a:5f:71:
16:95:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:03 2025 by rpki-client