Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: lf78judbnbsruaSq46Xf7Lkf8+K/kFOrG9MMCI1jGVk=
Subject key identifier: 64:D9:A9:FF:76:0F:C4:DC:8A:74:09:5F:08:4E:62:D9:E7:94:DC:FF
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 0199FC21969A4296C214FED6A6F9D8F90F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: 6TplHSnZPoAf8t52DBre40dSByIP3aFiD+UvOyn0noI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:96:9a:42:96:c2:14:fe:d6:a6:f9:d8:f9:0f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=64d9a9ff760fc4dc8a74095f084e62d9e794dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:05:56:a9:9b:7c:6b:83:43:b3:74:72:1c:
b3:f3:de:15:d3:38:dc:76:8b:71:37:84:d3:58:b7:
ff:6e:d7:f8:64:fb:a0:27:80:09:80:f1:1b:3d:55:
5c:17:bf:c8:3e:b9:f8:64:c8:59:09:9c:a8:f8:7e:
75:09:2b:23:46:6a:46:79:37:5d:07:f8:d8:0c:35:
56:8a:9f:20:5c:ea:33:de:fd:7b:4c:a8:07:9a:38:
77:67:9a:1e:16:c8:f8:33:b4:dc:93:c7:5d:69:e0:
05:cc:a5:df:9f:a3:51:5e:63:2b:62:1e:1e:9c:a7:
48:be:aa:ca:11:32:fe:87:4a:b9:a0:79:d5:c7:d4:
e2:a6:b9:91:33:5d:9a:72:c3:a1:8e:40:4a:d2:b3:
05:cd:11:6a:60:ab:05:64:eb:29:ff:da:b8:e5:de:
12:4c:dc:fd:f8:ac:ba:2d:6a:76:7e:aa:8f:d6:96:
b3:dc:ca:02:6b:65:e2:83:bc:41:c8:c2:e2:bb:b1:
80:4d:73:26:d0:4e:18:05:e7:7e:1c:f1:f3:9a:2b:
e4:62:ed:f5:8e:e5:cf:37:63:87:5a:42:c0:df:97:
72:51:74:cd:80:2c:29:81:d5:56:fa:ff:de:67:dc:
5b:f7:e5:06:12:15:c5:71:e9:9f:93:5c:f3:99:f3:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D9:A9:FF:76:0F:C4:DC:8A:74:09:5F:08:4E:62:D9:E7:94:DC:FF
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:2f:51:81:d0:1a:c3:13:b2:5b:8e:42:63:0f:dc:f4:fd:
19:d8:0c:ab:17:c3:5b:67:85:73:90:87:9f:70:9a:fe:30:51:
85:90:81:3b:76:fe:e8:09:e1:cc:e8:37:80:17:a8:b4:4e:86:
b6:f8:71:7e:b9:4d:08:4b:73:c7:dc:1a:aa:57:3e:f0:d9:92:
2a:a7:3f:be:b0:47:fd:1f:6b:b4:58:c5:df:ce:f0:5e:f0:92:
ea:82:cf:a2:f9:4e:52:d1:15:06:5d:c4:60:ca:7a:c5:c3:ca:
48:4a:67:0e:2f:e7:8f:b9:68:42:86:a6:34:c5:fd:f5:ca:ee:
c2:40:8b:50:2e:36:0b:71:87:c3:36:13:44:cd:aa:b2:a3:4f:
0a:39:c4:ca:12:17:f5:c8:20:00:7e:03:c3:28:24:d1:59:aa:
c6:67:3f:a9:4c:90:56:84:3e:76:aa:aa:19:b9:e3:a6:b7:16:
13:48:a4:e9:16:a3:29:69:8a:73:1c:f3:00:0a:4a:a7:4c:d1:
af:a6:95:43:f1:24:79:9f:1c:1a:35:5d:3a:fa:11:2e:c3:2a:
04:a5:5c:05:52:17:bc:c1:48:2b:26:a7:e9:80:1c:bb:90:36:
2c:75:6e:7a:33:5e:49:3e:71:a7:48:46:c1:bb:b1:45:c2:b2:
1d:5b:6c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:21 2025 by rpki-client