Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: oOfcCqyi7Kgnp2y1ilIEk3kthrD+ObEsRhqxFyF3yA4=
Subject key identifier: 99:9D:A7:10:26:C1:4C:AA:17:12:81:76:24:09:4D:4A:B3:52:3C:78
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 019A1203E7E854733F99403FA07DA0BA4ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 16ED
Signing time: Thu 23 Oct 2025 17:00:37 +0000
Manifest this update: Thu 23 Oct 2025 17:00:37 +0000
Manifest next update: Fri 24 Oct 2025 17:00:37 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: 9VUIWZa8rzLVj81cUPSqBLZKmbHNI+G9Cq70Gc+PzSc=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:03:e7:e8:54:73:3f:99:40:3f:a0:7d:a0:ba:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Oct 23 17:00:37 2025 GMT
Not After : Oct 24 17:00:37 2025 GMT
Subject: CN=999da71026c14caa1712817624094d4ab3523c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:8d:1a:2d:56:38:2c:a8:ce:1f:34:f9:ba:
69:24:88:3d:25:37:3d:e2:25:cf:ca:e7:96:02:53:
4c:56:4b:b6:a8:05:56:c7:63:0c:73:7a:4a:9b:f8:
2d:56:41:7a:36:0a:4f:95:4e:f7:be:30:89:2a:6c:
6c:89:d4:9c:85:8b:d0:cf:72:79:d4:42:30:32:4b:
d9:8c:1f:da:c3:bc:48:91:e5:35:e2:f1:48:bf:56:
15:1e:8a:07:00:0c:4e:6b:f8:f8:34:da:46:fe:43:
70:e5:9b:18:0b:6b:18:e1:ef:81:c8:b0:84:bf:fa:
6f:59:fc:52:7c:38:a5:0c:6a:f1:55:f9:2a:f7:f4:
0e:18:84:d5:26:ee:20:4f:bd:b3:b1:ca:ef:1a:7f:
d9:ec:b6:16:dd:a7:cf:cf:f4:32:e7:1a:c9:a6:84:
e9:96:c3:d2:bb:5b:df:fd:a7:65:aa:f0:aa:6a:f0:
54:88:12:a9:22:e8:c4:4e:51:4e:cd:11:0e:a9:15:
96:c4:e0:8b:82:18:06:16:60:bd:49:d3:35:ea:83:
e0:e6:4a:7c:6f:3c:98:f2:be:b9:4e:5d:cd:68:70:
26:87:e5:ea:80:6b:cc:47:0c:05:16:64:68:41:f7:
0f:5f:5d:7e:47:b0:e9:d6:d9:31:4d:74:03:b6:05:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:A7:10:26:C1:4C:AA:17:12:81:76:24:09:4D:4A:B3:52:3C:78
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:09:93:f9:c5:38:4a:26:b2:04:7c:fc:78:e8:6d:f4:b9:
00:66:a7:14:09:65:c3:c8:92:eb:76:dd:72:d2:66:3a:8b:27:
9e:0b:ed:2b:2b:eb:db:94:9f:ec:d1:cb:26:52:83:45:d0:20:
c2:f0:b2:fb:7e:1d:1c:1a:99:83:48:32:36:eb:31:34:0b:b6:
53:f2:c6:42:b7:57:90:6f:d8:e3:14:39:15:58:fe:26:30:c8:
ea:fe:f8:87:e2:c5:96:a5:9b:93:bc:c3:6e:63:90:61:bf:23:
f2:fd:6c:71:7d:ac:7e:66:10:2e:7c:6b:00:bf:35:c4:fb:f1:
99:e3:9d:36:34:fb:31:16:b0:a5:b5:4f:22:17:a2:cc:b9:86:
b8:59:3e:22:73:36:da:58:f2:51:d3:28:5a:47:f5:8f:bd:bd:
f6:8c:44:4f:14:e4:cd:a8:cd:9b:88:c1:0d:d5:bd:b2:1c:9c:
93:44:66:72:29:59:80:f1:f5:bd:37:49:ae:66:8b:cd:e9:17:
17:16:e3:78:e1:e4:22:01:50:8f:74:dd:81:a9:e7:15:c0:a2:
c2:69:f3:5a:bd:ea:c1:9c:ea:f3:4d:c2:db:e7:a4:c1:44:ba:
74:1c:3b:47:5e:bc:5b:56:32:2a:6e:20:7e:96:d4:67:57:e4:
49:74:01:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 02:37:19 2025 by rpki-client