Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: NW80fvy+vuKwKNsxJ7UkhmOeylFzBxv9H4i48Zrd7/0=
Subject key identifier: 22:6F:F3:B8:1A:C4:41:2A:34:A6:A3:86:2B:EC:4C:55:AD:AD:8B:3B
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 0199FBEACD6CA5CBD49CF9F979F79D4105BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:33 +0000
Manifest this update: Sun 19 Oct 2025 10:01:33 +0000
Manifest next update: Mon 20 Oct 2025 10:01:33 +0000
Files and hashes: 1: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: hGnNVONmrPZMu1BmSscVrP18kTbUTv3+CLRajdo51Nw=)
2: hyaj4NlGFcmb8YwdQipnGWLkuvI.roa (hash: SKjD8sW68Pq2JQ38fUsoQi7UbT3rU+TDmMqbwOOA0i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:cd:6c:a5:cb:d4:9c:f9:f9:79:f7:9d:41:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Oct 19 10:01:33 2025 GMT
Not After : Oct 20 10:01:33 2025 GMT
Subject: CN=226ff3b81ac4412a34a6a3862bec4c55adad8b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:36:64:59:7f:22:98:06:9e:89:57:1a:bd:
23:1d:86:08:cb:c3:91:f1:45:62:f1:c5:0b:50:23:
d0:31:ed:6b:1e:41:de:7f:b0:68:ef:cd:1d:3d:b0:
22:0f:3b:cd:cd:1e:c4:c5:a2:26:9d:f9:12:ad:20:
6a:46:bc:0f:36:33:0e:fa:75:c6:26:d2:2e:42:7c:
d2:59:78:e6:cf:19:49:f4:43:17:b7:13:8b:fd:57:
ee:de:a7:39:e4:d5:c7:fd:5d:c7:50:ad:52:9f:e5:
62:45:3f:5c:c8:c6:ba:4e:3d:b8:58:90:b9:69:40:
dc:71:5e:98:a0:be:2f:ea:9e:52:f4:41:69:1f:ff:
00:8b:10:fc:38:ef:71:a9:ee:8c:b0:00:e5:2a:67:
9e:3e:8c:bb:b9:3e:15:c9:f2:6b:02:2c:f4:c6:c4:
06:55:95:56:a9:58:b1:21:fa:e1:6c:4c:fd:15:14:
7b:e3:7f:d7:3d:4f:cc:03:73:fd:74:83:e4:7b:e9:
26:25:75:5f:c4:b5:8c:76:73:40:7a:2c:80:08:c5:
10:3a:26:0f:76:11:69:58:94:8e:8a:02:54:85:88:
07:15:29:16:48:10:b2:9e:d2:56:4a:36:b3:82:77:
63:18:13:cb:9b:49:b0:a8:d1:c3:d5:2b:31:24:97:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:F3:B8:1A:C4:41:2A:34:A6:A3:86:2B:EC:4C:55:AD:AD:8B:3B
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:96:12:65:57:cf:6e:b4:09:75:14:66:61:45:4c:b0:47:b5:
98:07:4a:e9:52:7e:a3:f9:cf:09:78:61:91:9f:1e:33:28:9a:
c9:64:71:ff:07:fc:f8:fc:ab:f8:43:41:9f:d9:9e:a1:72:03:
d5:44:9b:d0:b7:89:e0:0a:ef:1c:8a:35:b5:ae:c4:01:ba:6c:
46:f5:b0:fe:b1:65:fa:4e:d0:29:95:ef:49:ef:90:98:9c:b4:
4a:c4:a0:25:70:58:14:72:d5:5f:fd:52:c7:c7:10:d6:ee:3a:
35:e3:f5:af:07:f4:95:bf:78:ab:ab:a7:70:f7:e4:4c:ed:0a:
ab:db:80:ef:57:7d:95:ca:22:5b:25:d3:ac:cb:06:0f:fb:96:
b2:31:03:c7:06:f1:ec:98:1c:47:6b:c9:3b:73:a1:b3:0c:8c:
29:5f:16:5e:9b:76:00:5a:67:c1:9b:46:15:9f:1e:53:80:ba:
b7:6c:25:7b:bb:b7:e1:5a:43:42:8a:06:ca:55:f2:79:c1:cc:
52:7f:e4:13:16:7d:e9:9a:30:45:75:1b:b6:c9:f4:10:a9:b5:
e6:ef:7d:5a:8a:a1:e4:6a:75:41:0b:49:25:34:74:94:bf:3e:
ca:b2:e1:62:5b:e2:29:7a:9f:e9:f7:50:9d:ec:f2:ed:db:f3:
c6:6e:7c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client