Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: tx1vQJQ/kVvY0kUTIjWoFbwrqpkIRLYR+NF7xNWZBO8=
Subject key identifier: 5B:DB:7B:79:6A:28:75:0E:CF:BC:D9:EE:36:43:A2:8B:92:25:6F:33
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 019A2854FB831597A8FEC92CE503660FA9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 01:00:49 +0000
Manifest this update: Tue 28 Oct 2025 01:00:49 +0000
Manifest next update: Wed 29 Oct 2025 01:00:49 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: PY9c/Te3LMHqfua4jR38RjmHrd9I+aAWtPy6KdXMlMc=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:fb:83:15:97:a8:fe:c9:2c:e5:03:66:0f:a9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Oct 28 01:00:49 2025 GMT
Not After : Oct 29 01:00:49 2025 GMT
Subject: CN=5bdb7b796a28750ecfbcd9ee3643a28b92256f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a9:7c:19:37:85:62:e6:04:99:0e:58:44:8f:
0a:da:a0:16:08:6d:9f:4a:56:57:ab:a1:df:ff:c0:
03:a9:34:ca:75:c0:33:48:85:6f:53:5c:fd:b7:ec:
df:2a:5f:6f:24:f7:66:88:95:80:a8:9a:71:28:c8:
03:67:9c:a0:50:2d:cf:6b:88:f7:c7:31:e6:87:86:
35:1e:37:5c:70:36:7a:03:a1:57:86:d4:be:94:77:
2b:19:3d:8a:13:77:26:ff:da:07:77:81:d8:43:a8:
d0:48:db:04:88:1e:5c:11:59:e7:65:72:b3:f6:71:
ad:c5:e6:62:30:e8:2e:dd:10:e1:5e:b1:98:2b:37:
a1:9e:07:05:f2:23:f1:ca:76:6c:f5:92:27:81:33:
42:e7:82:02:6f:48:76:9f:45:b8:13:e8:59:a1:d3:
b4:7e:c7:2a:b2:c3:b6:88:bd:be:54:b4:da:28:60:
3f:a2:d3:cf:25:41:e3:04:6e:af:12:5d:f5:6c:1c:
da:30:79:05:f2:59:ba:56:7b:f8:b0:95:66:da:44:
f7:03:71:b6:80:40:4d:fa:97:d3:0e:50:38:75:92:
46:cb:d5:66:59:ab:b9:79:d2:54:fa:96:f7:cf:e7:
06:ca:39:3e:45:d8:8b:53:eb:af:1b:82:e3:90:ba:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:7B:79:6A:28:75:0E:CF:BC:D9:EE:36:43:A2:8B:92:25:6F:33
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:62:4a:0e:3e:20:c7:28:1e:46:f1:64:39:a1:29:3e:59:60:
81:49:ec:cf:26:42:b2:f6:4e:c5:af:c7:76:ef:8a:ab:8d:04:
81:b3:5f:39:c8:7a:a4:08:d4:6a:92:72:86:d9:18:50:a6:83:
ae:22:6d:24:ab:dc:0e:f2:60:a5:f5:2d:c6:65:bc:e0:fa:40:
65:15:67:a5:7a:ee:87:26:ea:4e:01:85:66:17:f7:57:06:a8:
12:0b:ca:26:c9:d1:7a:90:91:a5:22:9b:a3:ff:dc:c7:f2:0b:
7a:1a:cc:e0:4a:db:04:89:4a:bc:22:dd:1b:e8:1e:50:99:ae:
86:59:e6:08:49:dc:da:ae:e6:7a:e4:58:5c:b0:e1:c5:de:3b:
59:66:54:bc:c5:a1:4a:f5:bd:5d:69:d5:17:09:d7:35:4a:83:
59:20:97:f2:38:8c:a0:15:54:0d:90:0a:ce:85:e7:c3:aa:62:
6c:e9:85:3b:48:a8:2f:30:6f:c7:8a:ca:99:84:cc:40:1a:3a:
d2:e0:89:b8:27:38:97:23:de:ea:25:f2:05:55:b4:f1:14:1a:
05:70:1e:d2:b3:9c:58:9c:09:51:16:3f:f9:38:18:d4:52:4a:
04:9b:70:8f:a0:2d:56:ee:99:d0:7d:b2:ab:3d:bf:9a:84:53:
39:bf:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:35:16 2025 by rpki-client