Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: 52EVviyYKlIwr4jk2RPPOxjHAuzrd9rLPtX2mSt+7q4=
Subject key identifier: 50:D2:88:A2:D1:F9:0A:A2:B3:8B:2D:8A:2A:42:F9:6E:6E:7D:51:CB
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 019A1D99D2DB1830F7ED7849EB64B735BCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 23:00:11 +0000
Manifest this update: Sat 25 Oct 2025 23:00:11 +0000
Manifest next update: Sun 26 Oct 2025 23:00:11 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: o3PCM8qnBzNHQcDgzEx/2RRw7q4F77CPMZdgXhr54KQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:d2:db:18:30:f7:ed:78:49:eb:64:b7:35:bc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Oct 25 23:00:11 2025 GMT
Not After : Oct 26 23:00:11 2025 GMT
Subject: CN=50d288a2d1f90aa2b38b2d8a2a42f96e6e7d51cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:aa:4e:dd:14:3d:2f:9e:de:92:3f:9b:33:d9:
ec:3e:0f:66:07:92:9c:e2:1a:b0:4c:1d:0a:1d:cc:
cb:70:69:77:1a:25:55:dc:70:73:b6:ac:73:a1:d3:
b3:bc:88:f2:b6:f2:88:b8:43:e8:b1:4d:c6:43:ee:
2c:cd:58:05:e6:bf:8e:a1:f3:ea:78:a8:d9:02:40:
6e:35:34:45:63:a5:1f:5c:ab:2a:f5:14:a6:48:85:
86:bc:14:0d:c5:2a:52:1a:9d:b8:4e:7a:89:b5:02:
15:92:7f:ca:ca:1a:bd:f8:2f:a7:28:87:3b:36:5b:
17:10:75:bf:af:d5:5d:28:74:41:4d:0f:08:0c:69:
a0:7b:76:4f:1d:ef:18:9c:c7:e3:99:5d:fb:68:b3:
55:4b:18:ba:03:5d:06:db:a4:0d:e3:b9:05:77:41:
89:bc:37:b8:d7:2f:be:63:11:1c:70:07:0e:19:e2:
89:f3:5e:ba:a8:57:33:46:65:70:f6:99:fb:ca:5d:
0d:bc:49:46:81:9a:d4:88:55:f6:18:6a:80:01:e9:
cb:b7:d3:87:16:3b:65:eb:f0:84:cd:8c:a9:da:9b:
19:a1:e2:72:0a:fb:c2:6b:3f:92:f3:cd:30:5d:67:
f3:8e:e4:a8:f8:ac:f6:ab:9a:a1:7d:ef:e1:f2:88:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D2:88:A2:D1:F9:0A:A2:B3:8B:2D:8A:2A:42:F9:6E:6E:7D:51:CB
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:36:1d:ef:a3:21:58:8e:ce:69:f9:42:0e:6e:14:85:48:fc:
37:91:95:b0:2c:7e:8c:f6:98:b2:6a:b5:9c:b9:c2:de:02:75:
0a:de:5b:5c:42:e8:16:1a:97:7b:88:7e:66:df:c5:9f:9b:fb:
14:3e:0e:f4:ea:6c:9b:e0:f3:3b:2b:66:8d:8f:cd:3f:45:72:
fa:bc:a7:a1:13:80:90:3b:c7:de:e9:d7:6a:5c:4c:93:4a:3a:
a6:12:50:6a:b2:d7:32:bf:1d:61:78:53:74:31:79:f6:0f:90:
cd:5e:43:17:b7:ab:30:ef:19:35:fb:26:cd:31:da:d7:8b:42:
5e:9c:a9:44:27:cc:8c:ba:aa:f6:c3:df:c9:55:70:4d:27:c2:
3a:3e:30:48:ec:71:e8:d4:52:90:d6:17:6b:a2:25:6c:70:28:
88:a4:16:77:37:73:ad:d3:35:ee:4e:4e:b8:20:2f:b1:b7:c0:
32:1b:21:fd:14:e6:32:7f:2d:08:79:c8:63:c0:af:a8:ac:85:
0c:a0:65:2a:ce:56:2b:21:c2:14:91:83:b0:8e:93:43:65:42:
fe:48:3e:b0:f0:58:37:5d:e2:7d:b2:21:10:5e:44:26:1a:69:
74:81:ce:c0:11:41:e0:cc:d9:a1:14:df:fc:5f:e2:a0:35:82:
4c:37:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:19:06 2025 by rpki-client