Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: yFsQG64Vvjoqq1WoUyR7PUgtcizW6NvWEaxr5X4PUI4=
Subject key identifier: 3C:45:4D:5B:E4:71:1B:7E:32:7F:49:C3:2B:6D:2C:79:B6:1C:B2:7D
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 0199FCFDB53DEA240B23CFD301924A7C3BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:49 +0000
Manifest this update: Sun 19 Oct 2025 15:01:49 +0000
Manifest next update: Mon 20 Oct 2025 15:01:49 +0000
Files and hashes: 1: VNzG3ccHyaf-Ofv5con_nysGgHU.roa (hash: 2VzIYqdKT2jmdmX+vgJ//7c0c5nGJoT0dOFUmm0WlfQ=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: CatH+6lRIwIrDAlQq+sRpTC/HPcVZRDK8pGR/wxF0Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b5:3d:ea:24:0b:23:cf:d3:01:92:4a:7c:3b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Oct 19 15:01:49 2025 GMT
Not After : Oct 20 15:01:49 2025 GMT
Subject: CN=3c454d5be4711b7e327f49c32b6d2c79b61cb27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:97:28:db:e5:04:f4:6f:5c:7c:e5:ae:b0:b2:
84:c0:b6:1b:73:ff:50:db:85:71:28:c3:da:95:dc:
f4:26:5d:7f:20:a8:73:4c:ae:b7:99:cf:2c:f2:c8:
ee:d6:84:a7:c5:cb:2d:a0:da:41:88:8e:50:2b:97:
fb:f0:f4:61:0e:90:97:75:fb:e7:db:c0:a3:7e:1c:
1d:6e:90:38:ab:6f:c3:16:31:2e:1a:be:92:df:cc:
0b:fc:06:9a:13:b3:84:a4:d2:fe:06:59:cb:1b:4e:
21:13:1e:27:e9:1b:22:1b:b3:41:bc:c7:ed:e3:4a:
b6:4f:d2:e8:8e:a6:0c:a0:bc:fd:11:9a:51:75:1a:
76:01:9c:e8:72:7a:e5:4c:cc:fd:0e:6a:bb:b4:51:
8e:d5:a4:e3:3f:c0:2a:2a:03:e7:c3:e6:63:62:ac:
d7:5b:28:dd:71:11:43:ff:bb:cc:95:65:4d:5f:47:
71:71:58:69:7c:eb:5f:cb:63:9a:10:b9:d2:27:41:
f4:c9:4a:82:8f:49:dd:f9:94:55:70:ef:0e:ca:6d:
f5:d0:a5:26:83:f1:27:77:c6:99:ce:fc:4e:71:9a:
a8:ed:e0:f0:32:7d:7a:9d:c9:b5:b7:86:d3:61:dc:
33:eb:1f:b2:cf:a8:f3:93:ce:8b:f3:d3:a8:fe:97:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:4D:5B:E4:71:1B:7E:32:7F:49:C3:2B:6D:2C:79:B6:1C:B2:7D
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:58:1e:6a:a9:34:2f:d3:1e:47:63:1b:32:78:85:30:8f:6f:
5c:3c:ed:98:c0:f3:30:a4:89:05:8c:dc:c4:37:d1:ce:e8:6b:
be:d2:52:93:7e:63:9d:8c:10:38:f1:b3:99:91:db:91:84:6e:
7e:83:30:c5:90:6b:27:ee:fc:ec:d0:f6:3d:54:67:eb:e9:f5:
3c:10:a7:90:f9:cd:88:fc:62:f5:b0:6e:ee:ca:bc:2b:06:cc:
4f:a1:81:66:4c:04:9d:f2:a2:68:10:31:0b:07:64:8f:b9:08:
69:b2:38:31:74:31:e0:66:98:a4:63:cf:34:2f:78:c2:32:ee:
e8:1f:a1:15:46:92:2d:a3:2b:5f:72:1f:eb:d1:5a:76:e0:28:
c6:20:d8:cd:65:1b:32:f8:9d:f8:7a:67:ea:46:d8:fc:dd:ff:
70:b2:aa:57:53:5b:26:a7:3d:e7:97:95:f5:32:6b:7a:c4:63:
73:7f:e8:d2:c1:fa:31:9b:9c:96:ee:51:16:32:5d:fb:9e:4d:
5c:b7:29:7b:2f:d3:5f:70:86:a8:a7:19:ad:a0:8d:e7:40:63:
9c:17:93:1a:9b:fe:a9:83:81:72:98:92:ae:e2:d7:70:0d:60:
49:e5:20:50:8f:a7:c7:68:a1:53:af:32:36:45:e6:9b:2c:e1:
bb:fe:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:06 2025 by rpki-client