
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File: 0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier: ikMoSipJ1ZF+usdzJ8062QLW0Fcl/8QGszQFEXaVqQY=
Subject key identifier: 1E:C2:23:6D:05:DC:D8:72:05:59:73:6C:C9:38:60:C4:EE:F3:F4:1C
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer: /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial: 019A299E19F26E080FF75D79FAA3EE094F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 07:00:18 +0000
Manifest this update: Tue 28 Oct 2025 07:00:18 +0000
Manifest next update: Wed 29 Oct 2025 07:00:18 +0000
Files and hashes: 1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: 16Wl4un1Sf9uwThMtZNaWFzIA1sT5AL/ND+k5BXnZgY=)
2: 8XGnOFo1FHSecbZbo8eEhjcVsfE.roa (hash: andmj5YDiGTGVfrRQg/eep/3FAAkG8C2BqXOT6WzLpo=)
3: qRGjLQntvBAqN_Xt7aIS90yUBHc.roa (hash: 2bXJCM8WwuebfGJQ/9C7eiLENqlhXscF/6cLG5KAEvE=)
4: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (hash: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:9e:19:f2:6e:08:0f:f7:5d:79:fa:a3:ee:09:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Validity
Not Before: Oct 28 07:00:18 2025 GMT
Not After : Oct 29 07:00:18 2025 GMT
Subject: CN=1ec2236d05dcd8720559736cc93860c4eef3f41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:d3:00:3a:25:ec:e0:46:82:36:5b:be:1c:
d3:85:6a:7d:bb:c3:c6:8d:f0:14:cf:1b:22:a1:f1:
4b:88:9f:20:ca:a5:d5:e3:2e:9b:e1:df:4d:c3:d4:
13:85:8c:dc:0c:e4:27:92:63:2d:0f:ea:f3:39:5e:
42:f7:59:a1:40:2b:30:28:68:67:4c:2d:28:4a:23:
9e:54:95:c3:0d:d6:af:3d:4d:7c:8b:5a:88:70:c7:
cf:51:f0:64:6c:80:6b:89:8b:11:e3:24:d1:4a:19:
90:75:77:16:f0:bb:7f:7e:c4:b1:af:e5:57:24:c3:
43:4d:67:a9:fe:e9:f8:51:f8:b2:3e:10:12:59:02:
b8:3d:47:13:ed:4a:b6:67:c9:f0:3b:12:7c:dc:0f:
a3:c9:55:d8:c8:ee:c1:1b:60:dc:ad:cd:7f:fc:27:
dc:7f:89:a1:07:13:f3:38:29:48:f2:9a:29:00:b5:
68:3d:92:fe:4c:aa:fc:3f:be:37:67:4e:50:3e:07:
25:af:c5:f7:ea:54:31:a2:fb:5a:1f:d3:f9:bc:30:
53:90:31:41:f2:ec:78:51:2d:d3:18:a4:3f:9c:8c:
25:72:95:2e:77:e3:55:66:f8:f8:93:36:2b:ea:0f:
bc:8b:3e:f3:85:17:1a:92:9e:3a:53:fa:84:c0:53:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:23:6D:05:DC:D8:72:05:59:73:6C:C9:38:60:C4:EE:F3:F4:1C
X509v3 Authority Key Identifier:
keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:5f:2c:35:28:c3:93:7b:1a:6b:dc:f4:da:cc:0d:0e:76:
9a:77:8e:5c:39:62:89:70:22:35:98:72:27:8f:9a:46:6e:b4:
e3:7a:95:75:de:e4:bc:64:27:f9:c5:b1:6b:36:22:93:7e:76:
90:b9:85:43:d1:2d:92:ca:d8:d5:82:ce:7f:0e:c4:b4:0d:b4:
31:36:7c:bf:6e:2d:5c:d5:1b:c9:e5:f4:d0:7d:41:86:5a:31:
41:53:b9:69:0e:cc:e1:b5:c1:29:ef:e2:d7:ef:b7:06:ab:6f:
4d:f6:03:2d:d0:66:af:a9:58:06:d7:bb:ee:50:34:0b:24:7d:
1d:e4:1d:c5:a0:00:32:4a:79:84:76:b3:25:07:b3:01:27:e6:
33:8c:07:03:f4:0c:7b:b3:b7:f8:c5:25:08:a1:46:7c:56:44:
85:b0:eb:66:3d:ee:58:c0:da:0b:f9:c7:93:8a:0c:31:99:20:
4f:30:4c:5f:f6:0f:25:bb:a6:bd:db:da:bd:16:bb:76:04:64:
1b:2a:46:e1:7b:78:b6:f3:f8:50:2a:bd:1f:94:1d:02:f3:d3:
ea:94:14:a7:ed:9e:cf:18:e3:30:30:8d:a1:cb:b1:89:a9:2b:
dd:63:94:ab:19:9e:2c:f6:cd:df:bf:e2:7e:fa:3e:16:c2:a5:
f4:af:0a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:42:03 2025 by rpki-client