Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: ngBrgcDv2432xIyA3ZWzTRQcvGAtP3FHahS8Mj2Y2sg=
Subject key identifier: AF:31:43:16:F0:8C:CC:60:CE:2A:DF:A2:A1:36:1C:A6:7B:89:96:41
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019A1A61BA05F37DE141525B9223E6AEA55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 16F3
Signing time: Sat 25 Oct 2025 08:00:03 +0000
Manifest this update: Sat 25 Oct 2025 08:00:03 +0000
Manifest next update: Sun 26 Oct 2025 08:00:03 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: ZkZdVWkL6KaZ0c3pIqlg4JeD0cqjU7QiI5xZ9ISGs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:ba:05:f3:7d:e1:41:52:5b:92:23:e6:ae:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Oct 25 08:00:03 2025 GMT
Not After : Oct 26 08:00:03 2025 GMT
Subject: CN=af314316f08ccc60ce2adfa2a1361ca67b899641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a5:15:94:1f:27:6b:c8:4c:d2:dc:29:55:9b:
05:c8:1f:37:d6:ac:e8:c1:7b:16:61:6d:5a:07:59:
bb:66:54:09:4c:3e:d7:e3:50:79:c4:5a:10:a2:88:
f3:ba:2a:b9:ad:b1:72:58:26:a5:2c:17:40:d2:b2:
36:1d:40:a9:ab:8c:c8:89:89:37:7d:d2:e8:0a:e3:
ae:68:e1:43:7e:9d:e7:a7:18:cd:68:f2:9a:1b:30:
75:d6:ce:a2:b3:98:7a:52:f6:38:3f:29:27:d0:aa:
6b:12:18:4e:78:c1:cd:02:40:54:af:35:f5:bf:1a:
d3:6c:c3:46:57:61:18:e8:c6:9c:0c:a7:fb:8a:a5:
db:a8:be:f1:bb:8f:b2:dc:44:76:53:ad:76:73:6b:
cc:1f:e3:0d:0c:e2:81:9f:12:0b:2d:b2:94:60:30:
2e:61:28:2c:1c:bc:60:fd:76:da:ae:b1:fe:aa:84:
99:57:dd:15:ef:36:6e:25:b4:19:7c:fe:9e:4a:99:
53:66:61:1a:01:69:98:a2:7c:02:bd:e7:ff:86:c1:
5f:ff:8a:93:19:d6:b6:da:4f:64:93:bb:45:61:c3:
11:37:f7:c1:ac:a6:4f:e8:83:f9:56:77:4a:93:44:
c1:b3:a3:33:ad:ac:f7:5a:97:8b:37:4b:a1:31:93:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:43:16:F0:8C:CC:60:CE:2A:DF:A2:A1:36:1C:A6:7B:89:96:41
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:31:64:dc:e6:cf:0f:b7:de:9d:8e:ee:9b:37:29:77:e3:61:
d6:26:f5:0d:82:e2:67:3c:07:05:18:f3:f5:b2:dc:2d:52:db:
0f:35:4b:90:d2:c9:87:76:3f:dc:30:3d:85:85:28:ed:5d:90:
ab:b0:38:1d:ef:40:9f:09:89:c8:cd:0f:bd:2b:91:21:85:80:
ec:27:e7:73:44:bd:24:6d:a1:5f:d9:be:44:29:1f:6d:ac:ba:
4e:1e:83:3a:35:a8:fe:f1:0d:0e:7e:e5:a8:2e:7c:81:a4:67:
36:2c:88:96:dd:b2:eb:60:7d:46:5d:65:96:c0:4a:d0:60:87:
cf:67:b7:a1:bb:a1:dd:09:47:f0:1d:94:aa:7e:13:83:5a:cf:
96:ae:bb:98:fd:73:a5:ad:76:64:7d:88:91:53:01:46:db:bd:
56:da:15:81:d7:b9:28:0a:13:36:e3:72:34:4f:98:34:e2:8c:
f2:b1:6c:5f:0d:b4:35:f9:6f:cc:53:c6:6c:3c:4b:cb:1d:93:
ec:6f:e8:67:46:a4:b2:36:e1:b2:09:bf:67:21:96:be:65:d9:
66:3e:a5:09:8b:bc:4e:33:8b:7d:44:dc:fe:b5:97:2e:48:22:
fa:8a:3b:15:01:9e:c3:30:56:19:0d:47:78:b4:e1:41:f2:7a:
95:bb:bb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:41:43 2025 by rpki-client