Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File: 01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier: N0VFH5BxuudxdTWAuyC50fgkXOxBovbt+UEGVm5szQw=
Subject key identifier: D6:49:B1:DC:D7:D9:A9:03:AB:FB:1B:98:65:FD:26:68:D6:45:E3:A5
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer: /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial: 019A29D4FAEE9CBAC6D7EACB8EF4CF00D0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 08:00:14 +0000
Manifest this update: Tue 28 Oct 2025 08:00:14 +0000
Manifest next update: Wed 29 Oct 2025 08:00:14 +0000
Files and hashes: 1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: noHYOVI9VfzIkimquhFgCMfRjLusgXijeRbCZCpo8A4=)
2: 3wb1_tKdAp9U3t54r_yuAt_t74c.roa (hash: TRy2GucvGX452Ui0rXwDPLdQsvvya9qliAwd0VMiMQg=)
3: FRyMmxASxmy-8j0poAKeBfWYQOw.roa (hash: rggDbDyghfOZf84v31JsaN//o0OD54TdWq5+Du2lhgw=)
4: UP92FGd897Ta77gAjDusBRyzKw4.roa (hash: bi2tqHIDLMNNDJZuMzCDB/j/tTne6ixxxWYNy/lNRuw=)
5: _4mHAp6kpGlHe9veqUWZlR3bnno.roa (hash: AE1aWk5k7KrYjZa6mqR0Z0k8/+EX2mo7iBxCrqvE0fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:fa:ee:9c:ba:c6:d7:ea:cb:8e:f4:cf:00:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Validity
Not Before: Oct 28 08:00:14 2025 GMT
Not After : Oct 29 08:00:14 2025 GMT
Subject: CN=d649b1dcd7d9a903abfb1b9865fd2668d645e3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:65:b0:21:f4:df:02:64:04:46:00:83:fd:
5a:c4:ec:57:cd:6c:ba:ef:e6:df:d5:40:8f:ab:d6:
21:ba:97:3f:7d:82:11:78:40:bd:ce:60:0e:a7:17:
1c:99:4b:ac:37:93:b6:3e:45:86:ee:3c:8d:0a:ef:
d7:33:ac:c3:32:14:53:38:2b:5d:77:af:d5:70:93:
d1:23:4e:84:70:67:13:aa:de:b5:79:30:aa:aa:4c:
ed:20:91:ef:73:7a:55:6e:d8:a5:cb:d5:53:1b:3c:
97:99:74:cd:d8:1f:d9:27:a2:f1:96:1d:8c:37:76:
22:55:36:6f:57:32:11:9d:e7:e3:34:89:04:6c:24:
4a:85:f2:8e:20:e7:a0:cc:3b:c3:35:98:9f:ba:3b:
b2:9a:44:ef:a8:bb:4f:38:da:21:73:98:d7:a4:9b:
de:47:76:e4:04:35:00:ee:c5:18:11:63:fe:b3:ca:
b0:b6:af:05:e7:02:d4:5f:7f:d2:da:39:60:9b:5b:
fe:f4:26:49:81:35:51:80:cf:89:0e:32:d2:c0:b3:
18:5f:88:f2:f2:c9:0d:db:9e:65:a6:3d:40:12:0a:
e3:8e:7d:8d:6f:d0:9e:d5:90:e8:fc:3b:c2:1a:bc:
ba:6c:7a:0a:a6:c7:5f:5e:bf:c1:27:bd:a4:8b:4b:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:B1:DC:D7:D9:A9:03:AB:FB:1B:98:65:FD:26:68:D6:45:E3:A5
X509v3 Authority Key Identifier:
keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:7d:25:68:fa:f3:27:39:cf:2d:c8:56:e4:74:df:54:d2:
91:9a:4a:f7:cc:70:93:89:65:d7:ac:60:fd:e5:b9:b3:2e:44:
bd:42:18:d1:04:62:94:7b:6e:12:73:d9:53:7a:d7:e2:12:81:
23:92:e1:c5:f4:64:07:b6:f7:2e:3b:ca:95:c7:54:c7:4d:61:
7e:cc:ac:5e:5f:e3:37:ff:58:d1:92:ab:25:85:6a:cc:83:75:
00:e2:4c:e8:b5:04:47:8b:f1:d1:ee:9e:c7:60:ce:ba:07:4e:
b7:08:34:b5:80:dc:4d:72:c9:f5:d6:3c:5f:c7:eb:f7:c9:ec:
40:39:dc:bd:40:3f:6f:3d:83:4a:c2:76:4b:8d:ef:2b:72:98:
5e:30:0d:60:bb:da:46:cf:24:ed:40:9d:d1:d9:c5:6d:9f:28:
13:24:20:4e:16:f4:68:be:b2:ad:71:28:34:0b:36:0c:ab:23:
ee:b8:0f:8b:84:0b:93:fb:d3:9c:88:9c:ee:b6:10:fb:4b:87:
17:23:a5:b0:5e:cd:bc:0a:7a:e5:e7:8f:3d:6e:9f:e6:eb:70:
61:e5:7e:25:ff:8c:c3:1f:ff:40:ab:f4:41:f1:d9:4b:80:a4:
3c:77:ee:0a:82:14:44:41:16:c1:a6:f3:e1:5f:9d:e1:b7:f7:
31:a5:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:38:16 2025 by rpki-client