Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier: IRxzffCKPUoIGq1LewjsG2FeHSBsMo4Fu/5fUs0ZTUc=
Subject key identifier: A6:1B:E9:7E:E3:80:AB:B3:64:C4:9A:D7:1C:6C:2A:0E:89:2E:1C:CE
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer: /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial: 0199FD34855C3A0ED66DFC28B8F0AEB7032C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: HdvygVOruYbTXwlr1NLClydlYqo.roa (hash: sMi8mYGDSncYX0REgUe1LpnyiMZD3xdRzWB6T1gaSas=)
2: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: CkahVX11fCyGnVxm2SZPPVOra2zpTD5ZlBQZsMY/u7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:85:5c:3a:0e:d6:6d:fc:28:b8:f0:ae:b7:03:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=a61be97ee380abb364c49ad71c6c2a0e892e1cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bd:97:6b:70:14:24:d5:70:e0:00:cf:83:13:
b3:70:af:10:0a:f2:f6:93:49:f5:d1:ab:ef:6c:3c:
28:98:3a:27:6a:22:62:95:02:75:3f:26:92:80:30:
c0:d7:da:e7:6a:39:f4:52:7a:6c:b3:1c:9b:12:b1:
4e:27:6d:e6:57:1e:71:72:67:a8:b1:b8:43:7f:21:
34:9f:78:d8:3c:50:31:ba:8e:89:45:1c:bc:c7:17:
a4:c8:87:b3:aa:11:23:72:31:f5:2d:2f:10:dd:bc:
55:01:ba:42:08:b6:f3:16:55:fe:e5:87:d1:eb:c9:
c3:0d:a1:11:e1:cc:7d:90:78:98:49:92:9f:13:51:
b4:7f:d0:93:0d:48:d6:5e:2c:f8:e0:56:ee:ea:e5:
92:4e:15:8a:71:12:e3:9f:1b:40:3c:e5:60:65:45:
9b:0d:48:38:3e:d7:c4:4c:fd:cb:ee:b5:5f:2e:7b:
92:3c:57:f3:12:c9:2a:07:97:20:ac:d8:29:8d:f7:
2b:9a:24:0e:34:6a:c7:26:07:e7:30:85:a0:da:e9:
70:e7:7f:74:9b:bd:16:67:c7:4b:b1:43:81:da:5b:
4c:e8:2e:a3:c4:9e:ec:f5:3d:c1:b0:32:d8:42:c8:
db:aa:95:5e:26:09:3e:51:26:05:d4:1f:92:0b:14:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1B:E9:7E:E3:80:AB:B3:64:C4:9A:D7:1C:6C:2A:0E:89:2E:1C:CE
X509v3 Authority Key Identifier:
keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:50:de:f1:76:66:fb:87:28:df:c8:cc:a6:38:94:e5:a1:c3:
b2:1c:57:30:4e:2c:aa:34:ec:db:c7:3d:cd:57:eb:01:05:cd:
6e:6d:7e:62:47:81:d3:f3:b3:84:6d:8e:84:5c:b2:5e:87:58:
87:d9:54:d4:f8:fb:ae:a1:b6:ff:5c:9a:32:72:8f:bd:31:ed:
45:33:85:56:46:f3:5b:8a:6d:96:2a:78:dc:28:82:ab:f3:05:
bd:1a:bf:1a:29:45:86:bc:80:ff:16:91:83:77:d3:0e:20:01:
89:ea:0e:a1:9e:35:06:e7:89:0d:00:06:05:67:27:95:57:06:
c7:09:42:44:76:b4:b6:4f:54:da:93:97:f1:69:34:84:3a:3b:
47:30:57:41:cc:89:06:aa:74:ce:0c:68:ed:36:3a:a2:d1:86:
f6:0a:24:ac:16:51:6c:1f:2e:78:9d:b3:ee:5b:4c:c1:8c:8c:
55:68:36:40:13:1a:5c:22:97:ce:46:fa:99:f2:3b:72:12:e6:
73:4b:7c:25:b1:ff:7c:32:22:04:4d:3b:c3:e1:5e:73:26:0c:
80:ab:1e:e0:eb:48:4a:76:bd:8e:12:70:bd:bf:79:9e:3b:d4:
5e:b0:3f:8e:d3:e3:0e:12:4f:3e:07:1d:7c:1b:70:36:81:34:
df:48:59:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:34 2025 by rpki-client