Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: 8/QXwpmL4UcO9M3nnrQaYoEBSEKdzIqpJx0bCsY66Y0=
Subject key identifier: BA:2F:2B:D2:A5:30:54:A5:2F:17:59:67:48:E8:7A:0F:46:88:62:23
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 0199FC8F7395624CA4584CAF96C05C5E78BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: NXCX6ORfjYVvxzYj7XW+M69I6y368tbzOpk34qHlapA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:73:95:62:4c:a4:58:4c:af:96:c0:5c:5e:78:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=ba2f2bd2a53054a52f17596748e87a0f46886223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:5d:22:55:c6:e3:24:4f:11:6d:25:b2:95:
dd:b4:d1:6d:65:17:09:df:84:e3:95:dd:b5:27:35:
f8:c9:be:12:93:79:39:af:14:8c:58:92:c5:34:a2:
8a:58:ee:e9:8d:4c:31:e5:ea:63:23:35:92:1f:de:
f9:4b:10:f5:05:18:e3:c7:f6:82:4b:2d:1e:22:75:
02:17:83:2f:3a:88:f0:e4:c6:ec:3a:f7:76:0a:ed:
a0:52:ce:51:67:a1:89:ee:14:05:4b:c9:52:0d:91:
10:04:f7:34:7a:a1:6b:15:54:1d:ff:94:24:c8:de:
92:b0:da:a0:df:54:ee:b8:81:88:c2:8c:9a:e3:2b:
9c:f0:d7:dd:50:61:6b:95:72:31:1b:43:e1:a9:07:
29:f9:21:62:f6:92:35:99:5d:34:7d:2a:a6:1d:a7:
96:87:9d:5b:c9:e1:40:89:5d:27:a7:3c:4e:32:94:
54:52:cf:8a:df:73:a2:1f:f2:07:33:4a:98:8a:58:
e2:d0:59:56:af:68:cb:23:8f:84:74:fa:73:3e:47:
45:ba:bf:cb:df:96:e8:d5:90:25:78:91:75:d2:e8:
b3:c1:b0:c2:7d:59:00:05:16:8a:4a:21:16:bb:b2:
a3:37:92:11:e9:6c:59:70:61:51:0c:84:24:df:21:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:2B:D2:A5:30:54:A5:2F:17:59:67:48:E8:7A:0F:46:88:62:23
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:e3:db:a5:aa:79:66:3b:20:f0:38:4c:41:80:ab:63:99:
c7:55:52:3c:a2:f7:6b:0c:a4:a5:fc:cd:ae:29:fb:c2:aa:d2:
71:e7:e0:37:17:90:a5:85:6e:c7:32:75:e1:59:e4:de:27:c4:
d4:c4:81:54:16:5c:7d:c8:90:22:a5:28:e5:04:fc:49:bf:67:
b9:4d:e0:7c:2e:b5:1f:f6:9b:69:40:b0:f3:2a:0c:e0:7a:38:
d5:32:ce:87:58:38:8b:ba:a8:be:49:a3:9e:6d:6e:9b:a4:54:
ba:e3:da:38:fb:0c:34:46:2b:b9:c1:cd:20:6d:f7:6e:23:99:
3f:cf:cc:ca:b6:c0:e2:91:c4:af:d1:8a:4e:15:0c:36:bf:85:
63:2d:8f:84:66:d8:51:87:1d:75:ba:69:e6:13:74:eb:17:b5:
91:11:45:e0:3f:76:bc:a4:87:cf:57:d2:2b:2e:3b:d9:2c:8a:
61:25:60:82:9d:bb:59:4a:fa:f3:cc:d4:a6:5a:9f:17:10:1e:
53:61:f0:5a:a7:87:1d:d9:ec:e6:6a:33:1f:e9:dd:5e:a1:46:
5a:15:5f:dd:8c:ae:cf:5d:8d:2b:08:2a:79:89:8d:2a:d3:7c:
f2:25:cb:2d:70:3e:70:d2:25:dc:3c:5d:77:42:99:e7:5e:ec:
2e:dc:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:14 2025 by rpki-client