Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File: s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier: xuH1oMlnc0++ELI23/iXKmPVcN7o+nY2GA8v3LisG2o=
Subject key identifier: 51:7A:5D:C1:3F:59:6B:8C:79:53:D4:5B:46:A7:9E:B7:67:73:64:EC
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer: /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial: 0199FD3445B0781B477BD0B7719366584BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: 0tQcefpfubMAiDK8yBCYIdHUFe8.roa (hash: MGbilktJn2FXD9Deb4HrkutAMaDvrial7VVm5dZ7Uxo=)
2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: qHfS1Zd3kiURZ2AwDPKL0uQsIHIZyqrAD8CclPdZ3HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:45:b0:78:1b:47:7b:d0:b7:71:93:66:58:4b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=517a5dc13f596b8c7953d45b46a79eb7677364ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:fa:e9:47:91:d5:af:ec:72:9e:5c:86:58:
e9:02:67:22:1f:54:b8:73:b1:07:57:b9:a2:89:ab:
e1:a7:08:d4:fc:fb:d3:88:83:26:bc:c1:63:b1:9f:
e9:dc:5c:6c:4f:d1:9b:a3:4c:50:f5:36:9e:29:56:
e4:04:c4:9f:df:b1:12:08:43:3e:81:e3:12:c2:52:
16:b4:f7:fb:e2:8c:fd:e8:fc:81:aa:ec:81:d9:92:
1c:b4:0d:22:28:b1:fb:65:c6:f1:89:45:ab:c4:c1:
0f:73:75:ce:e4:ca:4f:88:7c:08:79:8d:9e:07:3b:
65:4f:68:9f:4c:d1:19:de:aa:43:dc:54:32:a1:1a:
c8:8f:34:49:41:07:19:d2:58:a5:fb:a5:15:60:76:
2a:fc:67:c7:bd:fa:d6:76:f1:5a:c2:f2:39:51:f1:
c8:59:05:df:23:2f:3e:c6:cb:83:96:44:a8:e3:bc:
d1:09:0f:c5:e8:b5:dd:7f:4f:72:5b:33:03:33:63:
75:45:3d:20:49:e1:22:fc:ac:20:de:69:6e:c7:eb:
0c:5f:3f:cd:47:a2:a0:fd:59:67:6b:12:89:8e:0c:
94:a9:ad:1f:d7:b6:19:2f:af:94:55:8f:6a:b5:94:
de:ac:63:76:ca:ec:8e:83:9a:34:b5:67:97:4b:3d:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7A:5D:C1:3F:59:6B:8C:79:53:D4:5B:46:A7:9E:B7:67:73:64:EC
X509v3 Authority Key Identifier:
keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:be:9d:28:1e:4b:df:5c:5f:a5:28:61:fb:3d:4a:36:f6:
3f:e4:50:f6:52:ee:bf:7e:25:ed:62:b7:c1:5a:70:e9:a1:2d:
47:f0:b3:e3:ee:1f:f8:75:aa:3d:df:ac:c4:a4:fd:61:48:b4:
d9:8c:0b:c1:70:21:89:02:d0:ae:0d:2f:80:25:10:95:71:a0:
57:c6:95:3d:b8:3c:b7:23:ef:d0:8a:22:f3:83:23:4f:97:1a:
79:d8:c8:f4:a8:44:b7:b5:89:f6:5d:3c:77:15:17:35:af:ff:
c1:00:3d:3e:c3:66:3a:29:8e:56:48:a1:d5:56:f4:f4:9a:60:
39:5a:d6:f2:fe:50:5f:77:03:5e:64:7a:1c:cd:bf:2f:ae:b7:
35:18:bb:0d:8a:8c:78:bd:b9:05:a5:cc:fa:c0:c7:76:48:7e:
ff:95:95:d8:a9:be:77:2a:a0:af:dc:d9:d1:b3:0c:c2:73:59:
41:44:1d:07:27:af:92:cb:03:6a:2f:78:f4:c9:3b:75:15:88:
39:e0:76:0b:53:23:7f:08:f3:1c:b2:a5:c4:a7:7f:e5:c8:ee:
50:2f:bf:3a:41:82:a6:b3:9d:04:a5:a0:45:5c:08:81:eb:80:
a6:e5:e9:34:74:75:d2:3a:1b:2c:78:2d:18:e5:be:6c:ae:80:
3a:13:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:57 2025 by rpki-client