Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
File: rSzwPkTaKLcxnqe3tbEQubjLenA.mft (raw, json)
Hash identifier: BXqKtxwytk7Y+ESdE0yj8nKDzrjoy2uwHqr/pE2rkwI=
Subject key identifier: AE:17:9D:AD:AD:17:00:A8:7D:15:34:81:D1:46:E5:23:E3:51:A2:5F
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0199FB7CAA369C05B0BCDEBCF00F9D19D513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: XH6XsDF8vVMB4yLkTc4gmvEkmhY.roa (hash: BZ//lXT/BiGxDhs4SPUIq0AZAxNe5OpvjPNDUL8DbFg=)
2: rSzwPkTaKLcxnqe3tbEQubjLenA.crl (hash: KRxgBonCAik55qYBiwwHqZoiHVrPl3eAojLhv+xd/KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:aa:36:9c:05:b0:bc:de:bc:f0:0f:9d:19:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=ae179dadad1700a87d153481d146e523e351a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:5d:02:2b:f4:cf:00:5d:af:3c:61:36:30:
3d:36:a2:7a:8e:db:66:28:e3:59:8d:fd:5a:f2:c1:
20:7d:30:3a:a8:4b:d3:50:23:e7:2c:b3:b9:6e:c4:
b8:49:af:5c:45:7a:da:6a:f3:ef:ff:f6:77:0e:ad:
45:d2:86:06:b7:ba:cc:95:fc:dc:18:d9:eb:ac:e9:
6f:99:e7:e4:d6:5d:4d:e0:03:22:b0:03:fa:ba:80:
6a:97:4a:82:fd:42:31:36:41:ab:54:cd:cd:1a:21:
3a:32:ae:7d:2c:b7:ea:a8:17:94:ec:c1:83:f0:f5:
25:0a:e4:0a:e2:f3:9d:62:f3:2f:f3:26:2e:45:e4:
71:2b:c7:40:d0:0f:82:6b:d3:64:91:ac:cd:89:4d:
13:11:78:09:cb:7d:aa:fa:db:51:da:61:9b:c2:79:
5a:1c:6a:8c:3b:56:63:c1:50:9f:c3:5e:d4:8d:c9:
55:57:29:3b:62:94:1b:09:ec:79:62:4d:32:0a:e9:
23:0c:65:ca:e3:dc:c3:c8:4a:39:36:32:89:13:9e:
c4:84:18:be:8b:f9:bc:4e:7c:d9:65:bc:86:2c:43:
74:33:3f:5d:6b:c9:0f:80:1c:b4:8c:da:5b:f5:8c:
d1:d1:cf:7e:d8:8e:2b:e2:71:19:d4:0c:38:c9:2e:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:17:9D:AD:AD:17:00:A8:7D:15:34:81:D1:46:E5:23:E3:51:A2:5F
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d6:9a:7c:47:f1:74:b2:9d:6f:d6:3c:8c:c7:82:cf:ab:d9:
61:a0:7f:e2:87:d6:03:bf:57:41:e3:18:43:a9:d0:a6:d7:d1:
47:d0:f3:5e:2a:7f:c1:3e:c1:db:2c:33:1c:ad:35:80:b7:95:
d1:3a:c5:b3:34:7c:54:82:89:3a:4b:5f:6f:3b:57:ad:82:d0:
52:f7:88:b0:a1:a7:a5:13:0a:1c:60:96:45:21:df:9e:3c:2b:
b9:18:25:0f:7b:40:70:11:1a:36:cc:70:65:4e:30:20:99:2a:
d2:de:5f:e5:08:c1:3b:3f:f0:6c:08:26:6f:ad:c1:e1:11:42:
7e:ca:87:d3:6c:92:87:b6:8f:f5:b1:fa:03:a3:61:39:f6:f1:
3e:22:0a:89:cf:43:a3:82:0d:ad:3a:76:c5:4b:43:9d:d9:30:
2a:25:65:6d:d6:42:cf:8f:d3:51:86:30:10:57:70:e2:31:8b:
10:78:a9:34:26:fc:24:0f:3f:54:36:20:2c:82:c7:9a:3f:f6:
82:7a:be:bd:e8:9a:4d:c9:52:ad:89:6a:7a:f5:98:88:86:90:
c9:cf:76:0b:dd:34:a6:83:00:3f:f2:12:be:27:3b:ff:86:a8:
29:d0:02:42:ba:4b:db:6a:f1:40:96:85:de:0b:23:81:aa:3a:
ce:1a:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:08 2025 by rpki-client