Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: Quksfnjqswz4wQ84to6nYh0LqmI19QEAfdT7k8WGqaE=
Subject key identifier: D5:F9:60:34:55:E5:B0:EF:30:94:30:04:25:00:33:68:D8:C2:6C:62
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 0199FB7C8C9BF8C328D903B000010F1D6E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: IVWLNAUIsWDuNfRfR17vH-v5XfI.roa (hash: OmbLmtXQG4MyTcSNnTCa+QZsFqNmOgdwU2G3Jors4PA=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: ph/OA32Bg3Se+ks5ftrhtwEZwNQXVJiZ10Dr/giIbug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8c:9b:f8:c3:28:d9:03:b0:00:01:0f:1d:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=d5f9603455e5b0ef3094300425003368d8c26c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:f0:bf:5c:2c:5e:67:f6:7d:87:8d:1c:ea:
53:d2:bc:69:e4:d4:68:d0:ac:c3:c3:3b:6c:14:c4:
66:ca:25:06:4a:21:31:93:60:b9:5b:e2:0c:2b:4a:
0d:d9:c8:2f:07:d4:d4:ef:eb:ed:43:1a:bd:03:e1:
65:3e:60:ea:4b:3e:2c:bc:9b:e9:5d:04:6e:5f:a4:
ce:a9:70:2a:2e:d6:9c:41:0e:da:99:ec:fb:a8:d6:
ed:46:92:98:3e:f5:dc:0b:b9:f1:d4:45:9c:cd:6d:
18:59:fc:a2:c3:cd:b8:ff:c8:9c:3f:1d:a1:ef:ce:
91:d5:82:78:0f:ef:e8:e3:34:30:a8:26:5b:4a:63:
31:27:69:a1:e5:de:44:a9:d2:7d:87:e8:da:b4:f3:
08:7c:11:b6:da:f8:59:09:bc:e6:a8:d7:3e:62:97:
00:78:85:25:2f:4d:37:3d:5c:0a:17:1c:46:79:49:
4d:a6:f5:55:7d:f5:18:0f:aa:4e:96:24:0e:f0:21:
d1:a4:78:e0:24:bb:df:0e:73:37:a7:3e:cf:28:5e:
0f:16:bd:18:03:30:1a:55:c7:47:94:d0:ea:b6:d1:
c9:fd:4a:d1:00:76:51:d1:71:57:47:57:f7:e7:e4:
2f:59:75:e5:1a:57:33:33:c4:28:42:9a:87:3a:f2:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F9:60:34:55:E5:B0:EF:30:94:30:04:25:00:33:68:D8:C2:6C:62
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c0:52:73:ae:e6:fa:ff:cf:fa:9e:3b:75:4b:5f:03:b2:9e:
da:a0:2f:fa:dc:64:de:ec:91:ae:42:c0:82:1c:68:07:bc:d4:
54:8c:32:b1:db:1f:d7:26:0b:54:51:92:04:55:5f:4a:dd:eb:
32:c4:12:38:4d:87:7b:36:f9:19:15:3c:e2:15:2b:9e:6b:fd:
94:cf:49:dd:2a:75:fe:ee:2c:1a:5b:b1:13:49:68:e1:90:e9:
24:0d:3e:88:e6:bd:02:7f:22:a1:25:f9:d5:94:78:be:d4:21:
56:a3:9a:2f:1b:6f:13:0e:18:db:6a:02:a2:56:5c:03:1a:c2:
3c:d3:8f:fd:5e:c9:12:3e:e9:d0:db:2a:d2:8a:4a:e0:f9:b8:
4d:c6:ca:8c:e8:b3:c6:42:fd:ff:ed:85:84:78:4b:60:d0:fd:
69:e3:7a:d4:ca:b0:90:2a:30:e5:ee:4e:34:ae:15:09:46:14:
a6:6b:cb:fe:19:2f:91:84:39:cb:8f:ff:7a:47:90:da:24:c3:
44:17:79:7f:c3:1a:46:fd:8f:c0:95:cf:a3:ec:ff:b2:dc:31:
c4:86:81:2f:db:6c:71:27:25:16:1a:82:e5:11:45:e0:42:a8:
01:e0:6a:56:7c:6f:07:e7:30:e6:c3:9c:30:ba:a7:34:dd:ea:
9e:b6:1a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:09 2025 by rpki-client