Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier: 9YAchQex5/0lxKqpStC7L8nh7CoJZD2nyr+7aa/fO7o=
Subject key identifier: F3:CE:FE:21:1F:75:72:07:24:49:45:80:51:6A:E0:D0:5F:C3:14:96
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 019A0B5E2C4A1E6425522571315BA6757E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number: 16EA
Signing time: Wed 22 Oct 2025 10:01:52 +0000
Manifest this update: Wed 22 Oct 2025 10:01:52 +0000
Manifest next update: Thu 23 Oct 2025 10:01:52 +0000
Files and hashes: 1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: qFLmtEGFRuQWH89FQtXHENy4BASx5OF2K2K8HKY7ZGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:2c:4a:1e:64:25:52:25:71:31:5b:a6:75:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Oct 22 10:01:52 2025 GMT
Not After : Oct 23 10:01:52 2025 GMT
Subject: CN=f3cefe211f75720724494580516ae0d05fc31496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:c9:9f:18:9f:ab:a6:95:21:51:1d:56:0c:
6f:eb:b4:3d:06:d8:e8:be:40:d5:fe:2d:b9:f2:a6:
33:75:8f:64:d0:c2:b8:c7:ea:76:19:69:c8:0b:ef:
60:25:92:32:ae:cd:54:cb:e4:cd:e8:a1:26:b4:49:
ce:78:46:56:fd:53:a5:f9:9f:d5:37:88:7f:e6:24:
71:d6:61:e9:af:23:0f:40:77:11:6d:9e:cf:88:dc:
22:5d:59:2a:3b:c2:c6:6c:8f:4c:d0:79:27:2c:50:
fb:d9:8e:79:9f:ba:7f:b3:d2:9d:17:75:af:87:44:
37:33:47:35:77:d3:3c:26:b2:c3:13:f6:77:13:ac:
ec:0c:98:13:ba:13:1b:8d:c6:8b:5a:26:82:58:ff:
b5:f1:da:64:2f:b4:04:ab:51:32:f1:ea:6a:33:53:
81:32:7f:cb:20:c9:cd:ef:cf:6f:d8:b4:7f:3a:37:
e0:ba:cc:c4:4e:a7:b7:3f:b5:a0:e0:01:43:61:08:
9b:0c:70:a4:84:4e:c7:f4:f5:26:b1:ea:e1:9a:d9:
8d:77:ec:45:81:71:a0:ee:50:b8:64:98:1d:ec:2d:
b8:12:59:be:80:6c:c8:ec:fa:1a:d4:88:00:ad:82:
a2:91:50:e3:d5:f8:82:a5:e7:20:06:7b:0f:c5:e2:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CE:FE:21:1F:75:72:07:24:49:45:80:51:6A:E0:D0:5F:C3:14:96
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:d2:ba:de:06:7e:05:a8:a9:eb:6e:1b:53:9e:e6:21:ec:
3f:a7:1d:e4:57:73:79:f9:b1:ef:6b:92:1c:61:26:8c:42:d9:
8f:1e:29:9a:2a:39:e1:52:54:3b:12:32:46:a6:6f:bd:8e:dd:
a9:1b:69:17:e1:f5:47:08:2b:57:29:71:cd:53:5a:0c:e5:67:
3c:bd:ac:d5:97:43:0e:24:4b:6e:50:d5:aa:fa:69:85:99:23:
5d:c1:cb:1c:3e:8e:e4:31:2c:a9:6d:ca:f3:b4:f4:6c:67:66:
20:a6:36:24:6e:64:30:ed:85:a7:97:18:7d:48:48:68:2f:f3:
66:3f:3e:e0:d2:c6:1f:f0:65:82:fc:05:36:38:96:07:17:9a:
95:58:c1:43:98:2f:50:29:06:35:7d:20:92:60:d7:bd:de:ce:
e3:33:d7:c1:53:0d:0f:19:25:c2:ad:f7:b4:1e:a9:7f:d8:2d:
ab:ff:15:82:37:cb:8d:bd:da:f2:7c:d0:4c:5a:62:8b:60:b0:
7b:47:03:f2:f3:97:80:16:7c:62:17:72:04:4e:47:e3:6e:d6:
c0:7c:2e:23:e2:28:49:20:fa:a8:f5:a2:68:8f:67:e8:9e:77:
14:4f:a4:ec:ed:98:a2:72:b4:09:ef:e6:84:84:5e:7b:de:38:
c5:a7:6d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:08:27 2025 by rpki-client