Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
File: sRaNBioMLmFmqCYsTXKY123t0E8.mft (raw, json)
Hash identifier: CNrJ6VQsTby/bM3tgdeCYW8dIuat/gzgeFFY76ymLXM=
Subject key identifier: F2:76:B8:FA:8D:39:25:46:9B:A8:EE:93:DB:E4:B2:3A:CA:BF:59:60
Authority key identifier: B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
Certificate issuer: /CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Certificate serial: 0199FB7CA6C3D0D5EFE3C8DB3E2715649285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: jYCp1px7d3_I6mefNTn8vuzWBOg.roa (hash: Pv+cwNn5v2uyPM9DJOrn9OfaFC2aCdBmSBHPyx9HtlM=)
2: rAkcIeR16JbVpYeePcru3Xd_9Fo.roa (hash: 5QKOAoJ3RyBbcQy0L3k19T9nHrTzNr6BOoQXHbBl8Lc=)
3: s25eqAa9Ba2subgM6OQ8ydOvSIs.roa (hash: 2d5Cwu5/K3ZqTMpiVXzf7ig4e2nE3AarjZ+2JLhcJaM=)
4: sRaNBioMLmFmqCYsTXKY123t0E8.crl (hash: zFWiZmeXTnp1BkpC4aBcbBulP8/jmqPMGnMtgWh56e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a6:c3:d0:d5:ef:e3:c8:db:3e:27:15:64:92:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1168d062a0c2e6166a8262c4d7298d76dedd04f
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=f276b8fa8d3925469ba8ee93dbe4b23acabf5960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:06:66:16:a7:8e:04:86:ba:3c:e3:b4:2d:
af:3c:66:3e:30:3b:c8:f0:15:d9:44:83:a7:d1:cc:
f9:e7:c5:16:09:20:a7:80:ac:17:30:e3:b6:9e:ae:
ad:eb:2a:a3:64:4d:a0:83:10:0d:b7:04:ac:b0:95:
ab:b3:c2:50:98:69:4f:54:38:b9:72:c2:a0:c7:c1:
55:dc:6b:69:2e:b8:5c:56:13:eb:dd:a8:88:0a:c3:
87:d3:74:e5:0e:78:cc:79:17:3b:3c:30:7d:04:f3:
b3:cf:a2:ee:47:03:8a:45:25:3f:c5:2d:d7:9b:81:
42:1f:8f:32:6a:26:13:70:21:1f:31:90:61:f7:ff:
ab:81:c5:66:d6:b2:31:bc:13:f0:4e:0c:ab:28:08:
f9:cd:f5:54:35:c0:40:ea:e8:2e:70:02:c3:36:c5:
27:2f:13:58:8a:0d:3a:67:03:4d:09:b2:d4:7f:bc:
ef:39:d2:f9:60:f5:2f:bb:1e:10:9a:92:73:62:45:
bc:ec:14:96:6c:33:5c:c3:05:df:13:d4:f2:40:e8:
27:bf:9f:a9:d4:72:84:0b:89:9d:9a:05:b2:4d:fa:
09:bb:d3:55:88:9f:e0:93:8f:5f:44:e7:78:86:79:
9e:69:91:1c:4c:3c:fa:b0:2a:23:1f:7c:ba:91:a1:
17:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:76:B8:FA:8D:39:25:46:9B:A8:EE:93:DB:E4:B2:3A:CA:BF:59:60
X509v3 Authority Key Identifier:
keyid:B1:16:8D:06:2A:0C:2E:61:66:A8:26:2C:4D:72:98:D7:6D:ED:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRaNBioMLmFmqCYsTXKY123t0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/674abb-221a-4454-acfc-965a34180136/1/sRaNBioMLmFmqCYsTXKY123t0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:37:cc:ef:a2:d9:68:6b:10:e8:8a:c1:1c:e2:e5:5c:45:e3:
14:dc:dd:4c:7f:c9:c3:8f:9a:3b:01:f3:e3:5c:80:68:d7:55:
26:52:5f:62:d1:2b:c7:82:a9:45:8d:c1:c8:ad:32:75:46:75:
e8:75:88:0c:c9:db:2f:d0:8f:71:76:fe:06:36:43:3e:86:f7:
16:d9:2c:fa:79:75:69:ca:6f:88:e2:99:3e:df:3a:6e:0f:01:
6a:83:5e:74:17:76:de:d6:14:60:66:aa:a3:46:3c:c6:01:30:
4a:74:b6:ab:0a:35:a4:6a:cb:33:bd:1c:34:bc:85:91:b8:8c:
86:1e:52:f9:b2:9a:69:2f:5e:a9:1e:87:92:a9:1c:b6:df:8d:
ff:32:f0:64:42:18:0d:07:93:d8:d0:ef:42:9b:0e:5f:d7:80:
9d:93:ab:82:a5:ba:fa:db:31:04:d6:07:d2:bc:e7:1e:fd:81:
bf:5c:96:bc:b4:3f:62:bb:82:6d:ce:a5:d7:18:f6:fb:50:1a:
36:b4:ef:b2:30:07:24:f8:8b:06:35:ab:4b:88:6f:2f:2b:f7:
2d:d6:30:98:09:0b:c0:3c:f8:cd:73:b6:fb:39:ec:19:3b:9a:
43:f3:bc:7f:ba:2d:20:78:1d:00:a0:e6:8c:61:40:c6:ad:7c:
da:f8:6e:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKbD0NXv48jbPicVZJKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMTY4ZDA2MmEwYzJlNjE2NmE4MjYyYzRkNzI5OGQ3NmRl
ZGQwNGYwHhcNMjUxMDE5MDgwMTE0WhcNMjUxMDIwMDgwMTE0WjAzMTEwLwYDVQQD
EyhmMjc2YjhmYThkMzkyNTQ2OWJhOGVlOTNkYmU0YjIzYWNhYmY1OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHEGZhanjgSGujzjtC2vPGY+MDvI
8BXZRIOn0cz558UWCSCngKwXMOO2nq6t6yqjZE2ggxANtwSssJWrs8JQmGlPVDi5
csKgx8FV3GtpLrhcVhPr3aiICsOH03TlDnjMeRc7PDB9BPOzz6LuRwOKRSU/xS3X
m4FCH48yaiYTcCEfMZBh9/+rgcVm1rIxvBPwTgyrKAj5zfVUNcBA6ugucALDNsUn
LxNYig06ZwNNCbLUf7zvOdL5YPUvux4QmpJzYkW87BSWbDNcwwXfE9TyQOgnv5+p
1HKEC4mdmgWyTfoJu9NViJ/gk49fROd4hnmeaZEcTDz6sCojH3y6kaEX3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ2uPqNOSVGm6juk9vksjrKv1lgMB8GA1UdIwQY
MBaAFLEWjQYqDC5hZqgmLE1ymNdt7dBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMt
OTY1YTM0MTgwMTM2LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82NzRhYmItMjIxYS00NDU0LWFjZmMtOTY1YTM0MTgwMTM2
LzEvc1JhTkJpb01MbUZtcUNZc1RYS1kxMjN0MEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTfM76LZ
aGsQ6IrBHOLlXEXjFNzdTH/Jw4+aOwHz41yAaNdVJlJfYtErx4KpRY3ByK0ydUZ1
6HWIDMnbL9CPcXb+BjZDPob3Ftks+nl1acpviOKZPt86bg8BaoNedBd23tYUYGaq
o0Y8xgEwSnS2qwo1pGrLM70cNLyFkbiMhh5S+bKaaS9eqR6Hkqkctt+N/zLwZEIY
DQeT2NDvQpsOX9eAnZOrgqW6+tsxBNYH0rznHv2Bv1yWvLQ/YruCbc6l1xj2+1Aa
NrTvsjAHJPiLBjWrS4hvLyv3LdYwmAkLwDz4zXO2+znsGTuaQ/O8f7otIHgdAKDm
jGFAxq182vhu7A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:16 2025 by rpki-client