Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: BTh2BzYm5DCwjTwNBIDsJudpgcQeBwELVhVmbWvzeRQ=
Subject key identifier: 24:55:FA:C9:91:57:40:40:3A:4A:EB:10:F2:78:2B:71:9B:6B:17:E8
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 019A1EAD611C16BE131BA9E7A57D908B92EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 04:01:10 +0000
Manifest this update: Sun 26 Oct 2025 04:01:10 +0000
Manifest next update: Mon 27 Oct 2025 04:01:10 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: QtLOV2b56Usx3zPo1JH9ZNERorFeGARgQem4HCP57sA=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:61:1c:16:be:13:1b:a9:e7:a5:7d:90:8b:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Oct 26 04:01:10 2025 GMT
Not After : Oct 27 04:01:10 2025 GMT
Subject: CN=2455fac9915740403a4aeb10f2782b719b6b17e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:65:b5:fe:1e:d6:84:34:6d:26:c5:52:92:16:
b6:56:2d:e9:8a:fe:b9:33:ad:52:6d:0f:42:ec:98:
23:f3:3a:49:fe:ed:77:ab:49:3a:27:ca:9a:41:4d:
7d:b9:d0:8d:b2:a5:7c:ea:8f:bd:f9:97:dc:d1:a3:
b8:cd:f6:3e:31:50:f9:f9:4c:70:74:40:f0:b1:b9:
9d:f4:03:f6:c3:e5:59:6b:8a:b3:68:fb:a0:d0:eb:
65:e3:74:cd:b2:f9:49:b8:09:02:d5:8c:1f:c4:a5:
9f:1c:c3:50:fb:89:3d:92:cf:51:dd:26:50:40:c0:
74:b2:88:27:36:dc:ae:a0:cb:53:18:36:c2:8b:f2:
a1:f7:6a:7a:c1:f3:f9:5e:14:e6:42:cb:e4:38:e3:
df:58:fd:69:12:8f:25:03:9a:1a:5b:f7:76:5e:60:
0e:7d:c9:73:7d:7d:58:00:9d:43:ce:b2:90:9e:93:
8e:61:0a:05:7b:94:d0:4b:8f:e3:e6:b6:cb:3f:0c:
b3:f7:7e:68:ff:98:d7:3e:1e:82:7f:a0:46:6a:81:
c2:81:7f:2c:03:be:a7:3f:39:c4:7a:48:e6:4b:c7:
86:00:30:c1:d7:67:bd:54:cb:34:c0:94:b4:62:41:
f9:90:36:4e:ea:f2:4b:de:d9:00:d0:0e:71:eb:f0:
5f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:55:FA:C9:91:57:40:40:3A:4A:EB:10:F2:78:2B:71:9B:6B:17:E8
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:35:d7:84:46:b1:02:63:a4:d5:64:50:b1:ee:08:94:74:86:
ce:f3:8a:f9:2d:f1:aa:1f:e0:cf:2e:88:0d:60:d3:2e:3b:02:
b2:52:49:6a:d4:f8:94:96:df:26:fa:87:41:bd:84:09:06:dd:
ad:c2:0f:cb:d4:60:ee:85:50:c5:22:da:0a:3f:52:45:ec:57:
45:00:ef:f8:08:63:a3:bc:50:6d:33:95:8e:6f:d0:3c:2e:c4:
92:6d:fc:5b:b0:4c:1a:8b:21:aa:d8:73:b2:6e:10:7c:e4:a7:
16:47:7f:5b:48:81:ba:c6:79:f9:4a:68:f6:12:3a:7d:ab:04:
23:71:b0:98:3b:50:76:08:7d:84:83:40:32:76:0e:40:fb:9e:
6b:05:d7:1c:c1:52:a5:60:56:7a:d1:b7:0c:97:1e:c8:ad:66:
01:17:a0:8f:fa:5f:df:5a:65:bc:f9:07:68:4c:94:28:66:f0:
2c:7b:60:ce:c9:68:e4:7f:40:bf:3a:b7:3b:93:a5:fa:9d:7a:
5f:1f:b6:11:43:dd:c3:65:d0:ff:57:5d:5e:8c:c6:97:0b:93:
1b:45:90:f2:e2:d5:9a:a6:f4:75:10:19:dd:0f:a3:f7:60:c2:
b7:70:e5:3b:b4:31:63:b6:85:b8:41:38:e0:89:27:4f:a8:c2:
42:8b:a0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:10:42 2025 by rpki-client