Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: Rk/E3kdGUbIAcpWaG8ACsD6/FMGJEPr9OIMnHkFJqhA=
Subject key identifier: C2:42:96:D1:07:78:57:80:8E:C0:A6:65:0E:3B:5E:55:1E:02:32:91
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 0199FDD9D805E601A94F15E73943A9B5511F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: feuIBTfbUpbz63pzmFxZE8QjuVnJyneXA39oN4AAWeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d8:05:e6:01:a9:4f:15:e7:39:43:a9:b5:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=c24296d1077857808ec0a6650e3b5e551e023291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:5c:2b:80:de:f0:bd:d9:ae:70:4a:d6:9a:
f1:3f:0c:a7:46:a1:e7:7d:ae:30:09:3c:57:ee:5c:
52:3e:42:6c:ca:9a:3b:5b:32:8c:60:29:18:d5:fb:
9e:30:e2:e9:89:a6:eb:04:58:d4:98:7d:81:18:0a:
53:f6:a0:c1:eb:c9:7a:9e:4b:ec:00:40:9c:aa:87:
0f:05:17:95:1d:0a:69:6d:b1:19:a3:be:13:e0:97:
46:9f:96:0e:85:f6:f1:6f:de:48:8c:4a:f6:53:11:
cf:ec:f2:7c:3d:f8:f1:06:5b:8b:a1:0a:bc:0c:93:
c4:d3:c9:e1:8c:c1:49:55:dc:e6:52:f2:81:e5:2a:
d7:e4:76:e3:8f:70:79:d5:cc:88:38:3b:49:ea:08:
77:6d:7e:3e:e9:62:4c:d0:8d:b6:7e:e5:15:5b:79:
22:d3:47:c7:cd:78:a9:cb:00:5e:c9:c7:fc:42:20:
b3:c5:51:cd:da:2f:b0:32:52:ca:14:93:07:e7:9a:
e6:bf:9e:6b:d7:63:6f:af:93:b6:d3:a1:f0:f2:f5:
3d:71:75:fb:e1:c6:18:9d:09:e1:2f:76:47:cf:07:
92:70:bf:e3:84:3a:07:37:a1:b1:a5:85:80:b5:89:
65:48:b1:51:d8:eb:25:2b:09:7d:2e:38:13:d5:0e:
87:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:42:96:D1:07:78:57:80:8E:C0:A6:65:0E:3B:5E:55:1E:02:32:91
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:62:2f:22:9e:b9:bc:64:52:10:56:13:d6:f5:e2:b1:f0:fc:
9e:80:ec:1a:c3:6d:10:7c:13:6e:22:f5:9a:a1:f0:ab:49:a2:
70:b3:25:87:f6:60:ac:ae:b0:a1:56:81:96:0a:01:30:9f:b9:
da:de:9c:ce:9f:37:29:cb:60:90:fb:fc:f4:2a:d6:5b:59:55:
c3:9d:52:2d:c8:9f:14:3e:46:26:1d:a3:a6:3c:79:a0:8c:74:
a1:2f:8c:10:35:90:7f:d7:c9:87:a8:1d:9a:ae:eb:29:c0:5b:
e0:e0:82:2b:73:a9:77:b0:ab:4c:52:c7:b6:a2:d8:81:e6:ed:
47:ce:ef:e1:92:b9:0c:94:cb:46:a8:41:97:5b:e4:b0:1c:2a:
19:7b:2f:a9:2b:40:50:a6:ef:22:14:36:ac:6c:31:e6:b8:d1:
49:ba:8e:8c:47:d0:61:75:a0:9b:e8:73:f8:8a:5a:96:7c:17:
86:e0:8a:4a:ab:81:47:b5:46:b5:ee:ae:13:2d:0f:b5:b2:de:
9f:d2:28:eb:4e:d1:dc:e6:aa:4c:29:71:09:68:40:34:91:69:
19:5c:39:ef:ce:05:6f:d9:29:f3:a4:db:b9:34:bd:13:ec:ae:
83:76:41:9a:67:27:3b:c8:3e:3a:20:96:a9:0d:b3:01:16:37:
14:a3:58:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:01 2025 by rpki-client