Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File: sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier: c7pXva8Afm9n0OPs4fGxs+FOYRrrbTSY2hHqZJkri9A=
Subject key identifier: 99:20:61:AB:BE:66:7B:8C:F8:F4:E3:9C:5E:A1:80:8C:3F:0D:B6:AB
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer: /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial: 0199FCFD5ED6F28A4ABEE6BF07BFB77E1611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: 2T5PZV0ykQrCqtWQsuyltR-_EP0.roa (hash: adHBBG4DTLEXzzbMMTMmfqzyorTjLSxY7EK7i8wkAJ4=)
2: fOGaYfmCbgoyUIfYq0nj6dp3ggs.roa (hash: k+pBFiGRIlpDeHFyJ2TjGWDmfTvqV2e7W4zXwUECFg0=)
3: hu6cElB5t5xLfzkwp-1E2pD6XpI.roa (hash: kdn6w5+MgRdzoZY9M3/FnbfXPKK9TjtWqwutVLtON4g=)
4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: kzua+GCZtB0j/s/gD8hTSC5LsyqZpxjV+6J8nc3uqSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5e:d6:f2:8a:4a:be:e6:bf:07:bf:b7:7e:16:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=992061abbe667b8cf8f4e39c5ea1808c3f0db6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:09:2d:95:04:f0:f6:eb:ad:86:1a:1a:33:
e3:d5:af:07:76:43:3e:91:5f:fc:2f:0c:15:ce:28:
57:a5:b6:e8:62:df:fb:65:fd:13:7a:c9:9c:33:d5:
09:56:f3:8a:a3:2b:92:31:c2:d7:a9:65:03:10:bd:
41:c0:43:0a:dd:cb:ba:b8:a4:4b:6b:c8:ff:27:5c:
d8:5f:0a:03:43:80:52:74:bb:1f:e4:e2:20:86:b2:
53:7e:75:ff:ad:be:5b:a4:2e:39:2f:67:e7:72:05:
28:35:e5:ca:1f:28:59:a5:68:91:91:5c:84:b1:a8:
f0:64:9d:f2:3d:2c:0d:04:11:c8:d2:12:87:88:85:
15:6c:9a:a8:6e:d1:dc:e5:78:36:c2:7e:5d:1c:1e:
c4:6e:1b:47:05:cc:77:ba:b2:cb:6b:4d:54:b4:b4:
ff:61:2a:85:7c:d5:20:8d:12:05:bb:d0:40:66:d8:
18:77:e8:25:ce:eb:77:bb:79:cc:04:c1:67:1c:75:
2c:9c:e2:9c:b8:5b:1f:7b:23:d8:de:c8:f5:c5:02:
fb:91:63:6d:65:f5:c1:4e:cd:c7:39:e0:2f:6c:9d:
dd:98:37:2d:e2:d5:2e:64:cd:b2:fa:27:4e:63:ec:
2e:bb:1e:d2:e8:b1:ad:15:4a:b9:04:ce:aa:26:d4:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:61:AB:BE:66:7B:8C:F8:F4:E3:9C:5E:A1:80:8C:3F:0D:B6:AB
X509v3 Authority Key Identifier:
keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:7c:3b:0e:09:d4:c6:42:5a:d9:4f:36:56:d9:99:d0:eb:
69:f5:60:5e:ea:b2:d0:ee:03:38:d8:49:b7:f5:fe:6a:a3:cb:
22:1a:78:7a:4d:c6:b3:1c:86:9e:97:a2:48:26:77:c2:8e:dc:
1b:29:0d:43:d8:59:44:2e:03:e0:3f:18:6a:a1:26:f3:72:da:
86:44:6d:97:9f:32:40:b8:61:63:c9:3d:b5:df:78:5c:4a:7f:
01:98:41:dd:8b:41:e9:78:b7:2b:c9:a3:28:a0:d0:00:75:a5:
db:95:a2:a9:90:28:81:36:6d:81:fd:73:33:7e:a6:34:0c:e7:
d1:33:a2:0c:6c:6d:33:45:88:b7:0b:29:91:d8:f4:84:19:c2:
17:54:7d:94:0b:9f:62:7f:bc:52:21:dc:1f:51:a8:16:36:42:
ef:2b:2e:8c:da:7c:a7:ad:c7:2e:b7:2c:05:d4:c4:ff:01:4e:
47:24:9a:ea:cb:2d:f6:47:84:52:72:c0:10:9c:75:45:f9:4a:
b8:c5:c5:db:02:75:a3:8d:98:cb:c2:7f:97:64:a6:d1:d5:b8:
e1:75:59:ba:a6:3c:b1:5e:18:3b:64:06:51:4b:a3:18:35:87:
26:fe:37:ec:95:ad:64:28:17:db:8f:26:bb:72:48:dd:01:58:
3f:f0:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:53 2025 by rpki-client