Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: jB7Vn/PpBK2zKDc8t0T+xeNHNXB6/jzW7LTxl6XETjw=
Subject key identifier: 22:97:D5:1D:AB:1D:70:2B:00:E5:FC:94:89:6B:28:B8:C6:9F:C1:BE
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 0199FC5883F6953678A589241BDD93E1AB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: JVUY+StM0dUcd8IYK+z+dRUaBoRjmdwigG/IAjp8tj4=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:f6:95:36:78:a5:89:24:1b:dd:93:e1:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=2297d51dab1d702b00e5fc94896b28b8c69fc1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2f:2f:b1:df:76:20:23:81:7d:e2:d2:43:c4:
24:a4:63:5b:09:76:c9:fe:ac:79:4f:81:db:9c:4a:
e2:ec:16:58:ae:4f:cb:b3:b2:73:e1:bf:98:54:4f:
d5:d3:73:0c:9c:90:99:24:24:21:7a:89:d5:20:8f:
b2:07:29:f3:d4:44:e0:ad:33:e7:e6:7f:61:1d:d4:
fa:3c:14:45:61:24:c4:95:08:86:76:c6:4f:47:a7:
1d:7a:d6:03:65:4d:2b:3e:07:8a:b5:79:d0:2d:94:
de:f1:d1:64:50:de:b2:9a:7c:08:da:75:81:bd:22:
9b:d3:6e:59:b0:02:9d:2a:fd:81:f2:a4:9b:96:b7:
1f:15:40:7e:69:00:a7:e0:38:9c:e1:80:f6:41:1a:
31:a2:cf:22:be:d2:0d:17:d8:03:08:8d:d2:d8:fa:
33:1b:55:99:04:bc:74:7c:34:de:77:e2:a0:3a:c9:
b4:c9:3f:e6:a2:8e:29:bb:6b:74:0e:32:10:fc:4c:
04:7a:71:62:8d:41:4e:03:36:1f:d6:0d:44:01:f8:
fb:80:46:db:64:7c:2a:33:bc:b6:af:57:be:7d:d3:
76:d9:6d:79:6a:09:1b:68:68:cc:9d:a0:98:ef:1a:
58:35:c6:0d:be:e8:03:86:52:3e:d5:f8:b3:2a:1b:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:97:D5:1D:AB:1D:70:2B:00:E5:FC:94:89:6B:28:B8:C6:9F:C1:BE
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:35:be:5c:43:81:47:64:52:cb:02:a1:40:c9:84:8c:cb:eb:
3e:66:36:a0:fc:2f:7d:f2:de:e9:3b:33:32:bc:c6:be:da:1f:
07:7f:09:12:3c:d8:7e:84:2b:12:75:99:ab:c8:f6:7e:61:8a:
c0:64:27:90:ea:68:8f:47:0a:98:cf:d2:ee:97:b9:46:34:29:
35:3a:cf:39:d6:a7:e9:e6:44:d0:97:61:88:de:3d:82:e7:72:
e4:9d:38:2c:05:de:be:b5:c5:51:fd:83:26:d8:ca:08:1f:a2:
39:47:e6:de:a4:a1:c6:18:19:36:44:c2:99:8d:3c:fc:30:90:
66:80:ee:8a:ee:ef:f7:2f:fd:b2:b9:8c:40:6d:dc:9a:f2:0a:
61:34:f2:27:e2:6e:83:2b:f1:b8:8a:ef:8d:12:e3:65:05:7b:
81:33:2c:08:d4:ea:e0:0a:5b:cd:11:24:a5:64:60:71:fd:cd:
d8:58:6c:d1:b1:41:ff:ce:56:ca:13:dc:00:29:04:53:64:12:
5a:5b:27:7a:6d:a3:f5:6e:b0:4c:42:c4:56:52:de:ea:4b:61:
5a:ca:db:fa:9d:04:14:23:0e:f2:53:48:f6:e5:48:51:ba:5f:
82:d3:89:a1:8d:3f:a2:7d:54:e6:39:f4:b3:1a:46:fa:e5:3d:
97:72:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:15 2025 by rpki-client