Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier: EwaTqhyVl3ziJ3FChModL1G6o7jfyOk3KXBNQDc/zHE=
Subject key identifier: D9:6A:D2:72:0B:4A:AF:51:2D:3B:C5:17:05:3E:9F:A1:54:5E:5D:08
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 019A0AEEE5518A597C6B81C2A5F0B19366D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number: 16EB
Signing time: Wed 22 Oct 2025 08:00:19 +0000
Manifest this update: Wed 22 Oct 2025 08:00:19 +0000
Manifest next update: Thu 23 Oct 2025 08:00:19 +0000
Files and hashes: 1: Mdhc0HErAhKi4LnGQpbnvACoaqA.roa (hash: +lWO/9SWCJf5PkUWv0wqllxzcN5TlPPfmkgBPh2/u3g=)
2: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: hq4XU+s7InprJDgwmQ7z/2GG2iz2hY8Edd4SrK3kr6s=)
3: VUyZ_zKhYSMF7CpPOWFsSapK1tk.roa (hash: fLzRsJYT3JBvdVXuFhvXEM3hZiRHVYIv+xDZIaxAjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ee:e5:51:8a:59:7c:6b:81:c2:a5:f0:b1:93:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Oct 22 08:00:19 2025 GMT
Not After : Oct 23 08:00:19 2025 GMT
Subject: CN=d96ad2720b4aaf512d3bc517053e9fa1545e5d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:25:23:53:6b:4d:67:3d:44:c8:35:86:e3:
fb:5c:13:35:a8:f1:29:bd:7a:b5:74:01:d7:01:2c:
87:9c:8e:1c:ef:a2:f6:7c:25:46:80:f8:69:81:89:
e0:30:d5:16:70:c3:59:8f:e6:92:60:14:6a:a9:7a:
5a:5f:a9:10:59:50:51:11:a7:ed:ad:5a:b8:a2:1c:
70:c0:5f:a9:e0:ee:f5:7a:25:d5:43:8f:fe:87:31:
1b:9c:48:c2:fc:03:dc:c2:79:80:04:6c:64:74:a1:
7d:fd:96:d2:9c:0b:19:2b:cf:4d:22:9d:2c:da:30:
37:f8:a1:db:eb:fb:dc:8c:5b:22:fd:6a:6f:0b:f4:
18:58:41:85:99:59:c3:ed:dd:ee:c9:6f:1f:87:70:
8e:86:69:6e:48:98:08:b4:28:b3:c8:14:e9:03:c4:
11:3b:24:c8:9a:c2:c6:fd:f7:c3:8f:83:27:75:b2:
ff:27:29:ad:47:30:82:1d:e2:06:9c:79:c2:5a:7c:
61:59:4e:4f:c7:49:01:ae:c8:2d:95:91:f6:dc:30:
3a:6e:3b:d2:48:2a:d8:22:47:75:8a:09:6d:f4:91:
e5:d8:50:20:cd:12:75:16:19:8d:ab:91:2f:f3:21:
74:32:0a:aa:5b:b8:66:04:da:c9:81:cd:c7:2b:80:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6A:D2:72:0B:4A:AF:51:2D:3B:C5:17:05:3E:9F:A1:54:5E:5D:08
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:46:dc:04:d8:13:97:e5:87:01:5a:87:f8:c3:95:79:48:
f5:4e:b9:06:24:80:5c:5e:b3:4c:27:6d:46:dc:ab:4c:a7:40:
f1:12:c1:74:a0:e6:41:d4:53:34:cf:c0:3a:c7:4f:3e:2a:1e:
62:48:e2:9a:e0:dd:a6:38:5d:42:5f:04:04:ac:71:bd:bc:db:
2b:ac:d8:11:82:54:4e:a6:11:a5:f3:aa:81:0f:ad:ef:5a:d9:
27:c7:5c:cd:3e:42:1e:32:72:f4:4a:a5:e7:10:34:7b:6f:61:
ba:aa:2d:07:fa:d2:97:0c:5f:fd:18:56:3e:fd:77:e3:40:82:
fb:bd:9a:a1:de:ce:ef:ee:b9:ae:dd:8d:0a:74:70:6c:c5:19:
af:89:88:68:96:75:ba:eb:a1:1c:73:d8:60:da:b1:87:10:7d:
95:e0:09:65:79:65:11:83:bd:a8:d2:14:9e:36:53:d4:be:aa:
c6:a1:49:df:c1:3c:43:cf:b3:46:79:8f:ff:b4:10:05:4f:50:
9e:22:e9:51:76:3c:26:72:6a:96:fe:24:cd:3e:d8:25:ba:8f:
2e:42:35:ec:61:d3:b3:3f:32:55:7c:e5:15:92:69:5e:3d:77:
e2:8b:71:a4:5e:fb:b1:ce:a9:a7:ea:dd:9d:5b:0b:15:af:c0:
85:16:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 14:31:29 2025 by rpki-client