Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: 8dYRFsSOf0eHELccPVdKhD3MB2vovSy6RjxIxHTTxFU=
Subject key identifier: 43:F5:0D:CB:86:4C:68:35:33:61:82:DC:F4:1F:11:6C:9F:67:00:FC
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 0199FC8F7E6337B3F353003675FCCD5C7609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: X9+MnZWPoJgJhf05sBrAz5WIrmQgh2gTV9e+SgPVPPA=)
2: UON5AT9SXUWq39L68I_y2_ZUikk.roa (hash: JwjZjFuzIaj/y6AQtmJH9bJqGEr4cg/qlCiSjx+pXxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7e:63:37:b3:f3:53:00:36:75:fc:cd:5c:76:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=43f50dcb864c6835336182dcf41f116c9f6700fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:83:8b:90:de:9b:31:f0:d0:e6:60:12:bf:
e5:d4:b6:95:46:e8:7f:80:00:e4:fa:17:9c:ff:a5:
3c:7e:6d:89:7c:e3:96:4c:aa:03:06:4c:4d:95:ce:
29:bb:a9:4c:96:ad:90:2e:9d:59:e6:74:5f:69:10:
86:4d:29:c8:73:3c:56:7c:f1:dd:32:f4:cf:ce:d0:
2e:a3:88:0a:c6:0c:d9:bb:d5:c3:d5:ce:3c:ce:8c:
02:44:e4:1e:47:cb:4f:62:33:e4:db:8c:c8:76:22:
8c:46:44:18:64:f8:46:88:52:cb:d8:55:89:4f:79:
e1:49:d7:e2:61:21:36:03:59:10:4e:54:47:ad:e1:
12:d6:f3:e9:a3:7b:b3:39:b3:58:68:d7:c0:e3:62:
2d:3d:d6:a1:ae:91:8c:fd:af:a7:b6:3e:26:99:86:
c9:0b:60:81:e0:3a:23:f9:a4:90:7a:2e:02:75:3c:
b1:f4:d8:e9:a9:48:fe:a6:10:09:63:b0:28:26:b4:
24:21:16:09:d6:b6:33:10:84:3b:c1:21:1a:50:9c:
d8:3b:f2:66:d5:e2:48:39:8e:63:2c:62:a0:08:1c:
3d:43:10:32:3b:27:d2:d4:4a:46:df:b9:f5:df:db:
aa:ca:5e:81:f7:4e:3a:47:91:1f:c7:6e:96:32:ba:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:0D:CB:86:4C:68:35:33:61:82:DC:F4:1F:11:6C:9F:67:00:FC
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1a:ce:73:5f:83:05:25:0c:42:c0:95:d1:bf:68:7d:fc:fb:
51:6c:21:e4:8c:4f:9e:6e:19:aa:63:ac:94:d5:1b:d9:32:e8:
5c:57:8f:77:3e:b3:a7:11:ba:d7:5c:bb:0a:54:ec:f5:40:66:
6d:56:be:43:4c:2f:54:bd:a1:82:52:ae:1f:83:17:2b:a7:26:
3d:29:f6:4d:b0:18:dc:00:6c:a6:55:8e:a1:17:95:6a:75:19:
c1:a9:db:fd:4c:e7:ae:34:7b:7c:0e:1d:d9:3e:37:0e:95:5e:
09:05:b6:ab:9a:f5:51:f2:66:95:3a:1d:3d:64:fe:f5:61:92:
a3:69:57:9a:c5:78:31:24:52:56:94:1b:b1:77:fc:90:6e:e0:
61:ac:24:d1:7d:ad:7d:57:a9:de:a6:18:3f:e0:fc:64:1e:7c:
d9:9f:ea:d6:e8:87:06:99:e2:fb:80:23:71:d5:f0:63:51:33:
03:ac:25:77:33:3c:b3:8e:e7:76:c9:97:e2:fb:9b:47:10:12:
07:d9:76:e4:b8:c9:2d:92:5c:b4:72:51:21:f9:1f:3a:29:f4:
a8:04:ec:a9:2c:d2:d0:fa:46:22:53:ed:0a:3d:1b:d9:ce:d8:
85:1b:a3:31:3f:10:5c:88:3e:d0:f9:fa:02:aa:85:e4:b3:43:
8e:10:3b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:02 2025 by rpki-client