Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: cHtTO60+mDpIKoDN2IFGNaV8xHem+G38lqGRrMdTsGc=
Subject key identifier: 38:76:D6:C6:BE:30:4B:2E:BE:04:9A:23:50:56:AD:DD:DC:D2:39:11
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 0199FAA11793E520CF7C8178A15E17E6CFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 04:01:25 +0000
Manifest this update: Sun 19 Oct 2025 04:01:25 +0000
Manifest next update: Mon 20 Oct 2025 04:01:25 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: iPPpDUtAdAxnugxeD37+d5WEzQOp5mC1EXSJBtQQxno=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:17:93:e5:20:cf:7c:81:78:a1:5e:17:e6:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Oct 19 04:01:25 2025 GMT
Not After : Oct 20 04:01:25 2025 GMT
Subject: CN=3876d6c6be304b2ebe049a235056addddcd23911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:8a:74:1e:c9:1c:e2:09:65:89:ed:24:1f:
8d:5f:ac:03:a0:66:c0:30:1e:a3:7f:a7:9d:3a:84:
51:23:a6:67:0e:aa:11:07:60:ea:6a:d0:2f:a4:6d:
a0:6a:cd:48:eb:58:1d:6f:73:1f:8b:9c:55:65:c5:
08:6f:6b:78:ad:a9:0f:39:98:22:3f:d6:d2:0b:7a:
c1:cd:0e:ff:2c:14:a5:73:e7:f7:a1:d7:c9:5e:0d:
3b:4b:27:42:da:b0:92:60:c9:c9:80:d9:12:aa:05:
3e:bc:88:b9:d9:ad:e4:93:90:e1:58:cb:4a:2c:e6:
3c:4e:25:c9:91:f8:70:05:a8:cd:f9:08:db:c0:e8:
02:78:f9:ac:89:94:63:35:ad:c2:36:84:94:76:a5:
75:cb:a3:ea:78:99:5e:05:81:db:59:f8:8c:9b:7c:
2b:d6:01:57:f8:c6:1a:b4:47:6e:29:b8:8e:85:5e:
c2:2d:72:ba:e6:35:65:e6:2a:a9:4a:87:6a:94:af:
0e:09:3d:20:3d:a3:96:d2:13:8c:6b:d1:95:74:ad:
c6:7b:4a:98:9e:01:17:93:2a:ba:7e:98:66:21:39:
5f:a1:78:d1:0d:77:a6:f0:ec:cf:5f:fd:02:4c:53:
f0:46:be:00:7b:7c:b4:a7:a2:49:ea:f3:1d:7a:fc:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:D6:C6:BE:30:4B:2E:BE:04:9A:23:50:56:AD:DD:DC:D2:39:11
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:89:6b:a3:ee:ea:94:a0:5f:02:c1:2b:1e:9e:f2:8d:36:16:
c0:2b:bf:d1:ba:58:8d:af:2e:a3:1b:9b:3d:67:4d:86:7b:66:
c4:0c:34:bf:19:c7:ca:52:cc:20:01:d0:ea:93:28:43:a2:a7:
29:fc:44:57:de:6c:6a:85:8d:51:0a:80:fb:0f:1f:9b:64:aa:
aa:83:36:9a:61:96:27:4b:79:cd:36:c6:4d:14:e6:a0:08:d9:
c6:d7:b8:e5:50:e7:cd:c2:29:ed:e5:36:9d:eb:29:66:d5:71:
28:fa:83:cc:f6:60:e4:89:32:cf:51:90:18:2a:87:aa:1f:cd:
0b:21:f7:7c:ed:06:4d:82:7f:e8:16:a3:3b:e0:a1:e3:06:4f:
27:01:6c:11:5c:f1:34:04:bc:1a:ac:65:24:7b:6e:88:0a:a9:
d7:1e:fa:71:de:48:3f:05:eb:57:bc:b4:68:3c:08:87:5c:79:
26:03:aa:5e:49:12:c2:6d:b4:fe:81:c9:0e:49:42:91:4a:26:
7c:e4:63:bd:99:54:77:cb:32:26:ff:49:cc:f1:76:cd:a8:47:
9d:55:85:54:1d:54:cc:3f:18:d1:f5:ef:f2:83:c7:a7:35:ed:
5e:79:53:7d:9f:8c:f4:2a:2f:2d:81:90:bc:2e:fb:0c:ca:57:
f3:5a:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:57 2025 by rpki-client