Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: YBaWkoMhLMQbu0Vl1ZXqGEXPQENA03Krvw06wnp2qeI=
Subject key identifier: ED:5C:3D:32:1E:04:52:06:6F:E3:A1:DF:AD:24:2F:3C:87:52:D8:57
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0199E9E4992FF5183123DC1E0683D00A8088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 16D6
Signing time: Wed 15 Oct 2025 22:01:36 +0000
Manifest this update: Wed 15 Oct 2025 22:01:36 +0000
Manifest next update: Thu 16 Oct 2025 22:01:36 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: f2/WgFMRo70J+lg3nXgOH2PHgjBcCYNmjTfdkzQesns=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 20:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e9:e4:99:2f:f5:18:31:23:dc:1e:06:83:d0:0a:80:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Oct 15 22:01:36 2025 GMT
Not After : Oct 16 22:01:36 2025 GMT
Subject: CN=ed5c3d321e0452066fe3a1dfad242f3c8752d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8b:ab:88:09:b0:50:33:1c:c5:e2:57:90:a9:
27:b2:dd:15:80:5d:cc:d3:c6:91:fd:70:9d:46:8e:
22:df:2c:6d:1c:2b:a4:36:93:31:cf:9a:da:4e:75:
29:c6:50:e0:11:43:57:db:ef:45:1d:4e:55:3c:f0:
88:c7:15:94:f7:2a:ad:ee:2d:88:02:3d:59:6a:07:
8c:21:be:3d:7f:79:84:dd:7d:7c:15:d9:8a:cc:a3:
42:5f:2f:27:be:43:91:10:47:8a:0e:43:e8:89:5c:
36:f5:f9:02:a3:86:51:8a:3f:4c:2d:f6:1a:36:cb:
36:2f:e5:71:cd:f2:80:98:c9:39:33:42:b2:dc:80:
59:f1:a0:1e:36:f5:3c:ce:b2:e5:fa:bb:3a:fc:c3:
40:0a:b8:c4:e3:65:76:51:a7:c1:89:0f:93:f9:c5:
2d:ba:6f:37:c5:48:a4:97:a4:5f:25:c4:55:14:ba:
d3:df:90:10:1d:9f:76:fd:67:28:6d:57:7c:53:79:
41:c1:5c:c9:ea:3f:af:98:4e:ba:6a:e9:b3:b7:39:
52:1e:5e:4c:ed:da:32:94:ff:bf:d1:2e:13:60:e7:
0e:5a:7d:da:a2:32:f3:d2:e9:a3:c7:e3:95:2c:3b:
9d:25:08:6f:ed:d6:8e:ff:e8:9d:b1:5b:78:e9:c9:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:5C:3D:32:1E:04:52:06:6F:E3:A1:DF:AD:24:2F:3C:87:52:D8:57
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:e7:e9:93:c1:47:29:ce:42:b6:60:c2:22:21:52:86:6b:
78:1e:c0:0d:9c:4f:1b:92:23:47:f8:9f:b9:5e:d0:61:b1:21:
61:77:5c:e3:46:b5:e3:bb:cf:f4:27:c6:27:f5:15:b7:69:0d:
4c:b0:a4:b3:4e:e4:12:eb:2d:8d:9e:3f:f1:d0:9d:5b:ce:5d:
11:82:15:c8:25:fe:b4:25:d0:75:19:44:94:66:63:f2:54:ed:
9f:33:e9:23:43:e4:23:07:b8:43:54:1b:3c:81:c4:0c:4e:82:
3d:7e:3a:08:90:1e:11:ca:21:79:62:0e:e3:d5:0d:e7:7e:e0:
c9:16:10:fe:77:3c:e8:01:81:2e:21:3b:ec:5f:6c:b3:fb:e8:
f7:57:5a:e2:d9:d7:12:31:11:fd:a6:e1:44:72:26:c9:f2:c1:
e5:4d:6c:c8:a6:d0:58:f8:ab:d4:e3:48:aa:2b:03:d2:ba:4d:
b3:2c:1a:dd:cb:4e:6f:4f:36:67:10:c7:4f:c9:99:9c:bc:1e:
0b:7c:aa:0f:98:95:06:39:dc:49:52:fd:52:f9:ca:be:a3:f4:
59:0f:44:e6:2d:f9:3f:80:81:d4:44:fe:8d:f9:15:1b:cf:fe:
ce:7b:54:d3:7e:29:c5:5f:3a:ac:e7:a7:97:a2:aa:ef:37:c4:
e7:5c:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 04:59:16 2025 by rpki-client