Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: O/PfLtljR8Z+WI4x3lsnCInxyTe17A+kit+DqT8HGGc=
Subject key identifier: C9:9C:9D:7B:7C:78:97:B6:E9:A0:4A:32:DA:8A:DE:FA:AD:E5:26:45
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019A1805812B9A5A984D55D3212499B9B4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 16F1
Signing time: Fri 24 Oct 2025 21:00:05 +0000
Manifest this update: Fri 24 Oct 2025 21:00:05 +0000
Manifest next update: Sat 25 Oct 2025 21:00:05 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: c7XTR7g+B+sDygQBVhteDvIkpzi9toS8l4hjp3tI0LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 21:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:05:81:2b:9a:5a:98:4d:55:d3:21:24:99:b9:b4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Oct 24 21:00:05 2025 GMT
Not After : Oct 25 21:00:05 2025 GMT
Subject: CN=c99c9d7b7c7897b6e9a04a32da8adefaade52645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:ca:e1:a3:cd:10:37:53:aa:41:e0:40:f7:
3a:97:94:44:0a:0e:61:1d:28:9e:05:94:b3:86:b0:
de:26:84:42:31:97:6d:81:d4:f7:9b:15:83:06:e0:
5f:25:bf:8d:25:cf:c2:96:05:c5:9d:69:3d:48:1d:
85:e6:d5:3f:1a:ca:ce:84:52:6c:41:73:c2:7e:57:
66:52:95:16:e0:50:86:5b:67:b5:a4:b8:e5:a4:f9:
b4:7e:83:24:25:dc:98:28:15:62:38:4b:48:ed:7b:
44:d7:77:30:fa:00:a7:99:24:2a:51:40:e6:49:d2:
82:fd:e1:5c:3d:0e:1c:44:29:e8:b4:f6:dc:c8:76:
f8:88:19:16:15:cb:6b:e0:60:81:f7:44:89:7a:25:
8d:1f:b1:40:55:ed:ee:00:40:ce:cd:3d:36:4b:0b:
46:72:8b:34:f8:cd:54:8e:c1:58:e9:3d:2e:65:a2:
0a:6c:b8:a6:90:a8:1d:18:e4:ea:d5:af:61:96:a1:
35:eb:1b:10:2b:c1:c8:c8:65:e3:3a:5b:2e:93:bb:
34:54:80:7d:ad:c5:eb:45:de:ec:70:f2:fa:49:63:
a1:30:5f:2b:4c:fb:d0:86:aa:5f:bd:c3:ae:66:2c:
52:01:35:33:49:e5:68:40:47:b4:5f:d7:76:3e:9f:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9C:9D:7B:7C:78:97:B6:E9:A0:4A:32:DA:8A:DE:FA:AD:E5:26:45
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:e7:b6:7e:da:a8:17:1d:7f:e7:4a:b7:52:2a:13:4b:99:2d:
b4:c9:8b:d1:46:a8:f5:95:a6:f9:e5:12:a5:c3:5b:91:b9:b6:
43:d2:74:1c:f7:72:e6:36:91:12:2f:a7:cd:54:95:8c:2d:5d:
bb:25:41:12:f8:97:9c:ef:e1:40:7d:e6:ee:01:47:dc:8f:a1:
77:6f:8a:71:39:22:c2:49:c9:6e:24:3e:bb:b9:6b:fb:ff:b7:
55:c7:ad:73:71:ce:43:aa:5f:be:c0:b5:70:d1:67:d5:72:12:
47:a1:56:a9:6a:d2:cc:cb:e6:b8:4e:05:9d:a6:7d:fc:e8:94:
83:1b:74:1d:d4:65:a5:97:67:1a:a9:52:6e:9d:3e:bb:3a:34:
f6:80:a1:a7:4e:ad:58:08:b7:03:f3:d1:c4:66:2e:e3:38:92:
4b:2f:fe:0e:eb:0d:b5:60:ac:12:86:d3:cc:6c:9a:a9:6b:85:
69:35:b6:0a:2d:4e:a7:4e:ec:18:b3:83:6b:aa:ac:fa:bc:75:
fd:c5:fd:ed:32:13:02:c7:e9:67:36:60:4a:b8:18:f9:a3:08:
50:c6:28:4c:7c:e9:42:31:2f:49:b1:88:1a:61:aa:5f:df:4d:
1e:d1:2f:2d:20:9a:a6:d1:eb:c6:74:2f:cb:09:db:e4:77:5f:
1c:7a:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:14:39 2025 by rpki-client