Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: 62Shq+pzHLEK46Uzcnz3FqwHuxql5q2whanJuqobPTE=
Subject key identifier: 3C:94:2A:77:AF:40:AE:9F:ED:32:1C:D1:C8:ED:2C:60:46:53:54:BB
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0199FC8F48F12D7E1D4DC5B8FE177F1630E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: IbFonZqz8X/fcj2b94sCnZYEriX3QONe+8+gMxGXpQc=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: YgI-v6xyCyvCdaFE_0gi8JebnCU.roa (hash: 8nUg6t7h+Myv8fLu/m3fBl/zsOujrUMcs0usjBSVmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:f1:2d:7e:1d:4d:c5:b8:fe:17:7f:16:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=3c942a77af40ae9fed321cd1c8ed2c60465354bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:d9:c7:28:27:72:8b:b4:05:fd:a4:7a:55:
54:fb:16:fa:27:58:df:6b:c8:46:8d:e6:b8:35:ad:
69:bb:a7:9a:bf:d8:ff:e4:61:27:38:d3:d5:e3:33:
1f:2f:b6:52:09:04:79:d4:d2:fa:8e:7b:4b:02:51:
07:f4:7c:c2:82:45:ad:04:4f:4c:28:c5:50:05:a3:
67:1c:a2:ae:a2:d4:ef:aa:4e:c7:df:87:67:8b:55:
7c:88:b9:f1:00:0f:67:c7:76:18:ef:40:69:60:a7:
dd:19:aa:d0:ec:e8:b6:6e:b7:25:d2:47:5d:41:ce:
0d:e1:24:c5:40:6d:3a:5c:ec:f1:5f:2d:60:a5:d2:
a8:4c:8b:32:b4:33:f1:59:2d:71:d4:09:5e:3d:48:
26:3c:a9:40:6d:fa:d9:c4:3f:e3:f0:d1:a1:e1:92:
0a:80:5f:a6:bc:19:6e:7c:41:43:b7:0a:19:8a:0b:
d6:07:e9:01:70:5e:aa:28:61:e1:7c:19:a6:d0:3a:
10:0d:92:f1:3f:45:25:a4:de:e9:0c:5d:79:17:5c:
03:60:ac:c7:0e:e2:70:86:9c:51:2f:30:d7:47:7f:
af:92:f1:6a:cd:b0:45:71:12:71:f1:be:d6:0d:3b:
9b:20:ef:2c:46:c3:eb:a9:df:4a:2d:86:f0:bc:00:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:94:2A:77:AF:40:AE:9F:ED:32:1C:D1:C8:ED:2C:60:46:53:54:BB
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:3a:1f:a4:a1:51:bf:32:55:35:ed:03:bb:64:b5:0c:c6:
e9:a1:0e:db:cc:4f:f5:22:05:0a:97:f0:a9:bb:2b:9f:c0:5e:
f9:36:8d:cd:df:c2:bc:32:b8:18:9c:ff:f5:3e:aa:59:1f:89:
81:d7:82:d3:ab:e1:36:37:a8:eb:a3:ce:73:01:ab:a6:a5:db:
4b:6d:b9:b1:a9:37:a0:d3:78:e5:8f:5f:57:f0:a7:28:3a:fc:
76:0a:40:9f:18:fd:c6:62:e1:3d:1a:27:59:cc:2b:aa:0d:01:
64:28:aa:93:eb:67:cc:a1:e4:e6:9d:99:4f:b2:7d:33:15:b6:
bd:32:4c:40:34:2d:46:41:9d:48:11:06:0a:40:0e:df:c3:81:
87:d6:98:11:55:f2:42:f1:02:cc:66:b1:18:47:b1:6c:e7:36:
5f:59:bd:ad:eb:b5:23:3c:4a:37:ec:70:29:dd:6f:e7:70:86:
91:d1:4a:10:5e:86:ae:13:87:60:0c:c8:af:53:05:ed:46:3e:
ad:8e:d8:3a:e6:9d:89:c4:95:df:89:08:9e:40:c1:4e:51:e0:
e3:1d:72:20:43:1a:b4:e4:05:9a:07:4c:8f:57:11:7f:bf:de:
0c:0f:f1:ae:a2:de:09:6f:5f:87:33:89:6a:db:e4:e3:01:39:
61:cf:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:35 2025 by rpki-client