Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: PdUXSP7t34Sh6MXOGk2LKDZ9iXPKjUbJwgmyHHtcTLc=
Subject key identifier: 32:B2:4A:7C:9D:29:C3:E0:07:70:1D:4F:62:7A:02:7A:DF:7B:BF:FE
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 0199FD6B56BF10B2DDA82F44A4FA76AEC172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: 3v4XT_Zkb0JR6zbO2RFLVtIvqcM.roa (hash: aLhicbgV4nIT1UVqMuVw+q4GdC1H71gXhIrWh3frlJs=)
2: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: f9hjFhlEGdx/QBEv5OKmkeNYs+NU+qQ1I5Y1w9EqZLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:56:bf:10:b2:dd:a8:2f:44:a4:fa:76:ae:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=32b24a7c9d29c3e007701d4f627a027adf7bbffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:cd:1c:2e:74:84:54:14:92:bd:46:04:60:
d9:9a:6b:99:76:5b:bb:0d:5e:e7:c8:85:ab:e1:90:
4f:df:b9:92:9c:d6:21:fb:59:46:46:c9:b4:ac:27:
48:2e:15:71:6d:53:73:b2:ae:d1:fd:85:cb:e1:4b:
3f:db:33:2e:45:cc:48:1f:f5:ed:46:2b:fc:16:16:
7d:72:fb:ff:03:5e:1b:70:28:c7:74:8b:c8:44:04:
ab:b8:9e:f2:d2:86:82:22:af:c9:92:3d:2f:b9:f4:
9a:64:61:c8:93:d9:37:5a:bb:65:75:24:5a:91:05:
d7:41:27:8f:59:58:6e:c0:91:55:f0:c6:39:8f:12:
72:a4:3c:41:68:61:25:a1:a1:64:5a:a2:c2:1f:39:
30:59:36:10:d8:8b:3d:18:75:fc:7f:8b:19:df:cf:
03:89:39:a0:f1:61:7d:dd:92:d4:87:ab:1f:b3:30:
96:cc:6c:95:0a:6d:85:d0:ee:91:0a:4d:f6:23:ad:
e7:4c:c7:f1:0c:f6:81:76:d9:8f:99:16:54:0d:98:
e3:2a:cb:17:1a:a2:f4:f1:18:ca:44:8d:6e:e9:0d:
fe:ee:3c:e3:20:80:ce:7f:0d:d7:aa:7f:bb:02:40:
94:6d:28:84:ab:5e:96:7f:cc:2f:26:57:0e:ab:8e:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:4A:7C:9D:29:C3:E0:07:70:1D:4F:62:7A:02:7A:DF:7B:BF:FE
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4f:58:ac:b7:60:80:4a:0e:bc:87:42:4c:62:81:f2:c2:71:
f4:2f:04:ff:68:af:01:24:21:81:dd:17:cf:61:57:fc:19:88:
f6:e1:c8:fb:a3:48:8d:45:0a:54:ea:d3:63:75:87:3b:81:2f:
b1:a5:f6:e4:28:03:8f:1f:cd:6c:46:e4:bd:73:81:2b:8c:db:
8b:b0:ef:ed:39:1b:bd:b9:4c:8f:b9:4a:ad:c5:24:f5:79:e7:
07:d3:d3:21:27:1a:44:a5:d4:81:09:62:52:96:56:aa:56:89:
01:d1:e6:23:3e:6c:fd:2b:be:cf:6b:7c:9f:1f:fb:5e:0f:f7:
7b:5e:8c:da:98:9c:a3:da:d0:f5:2b:a9:0c:87:82:ba:6a:3b:
c2:51:c8:4c:3e:9f:36:eb:21:81:e7:52:f9:73:02:ec:e0:7b:
a1:96:90:cf:e3:6c:90:8b:ca:e8:51:c1:f1:6e:05:81:f5:99:
0b:12:a1:c4:15:04:bd:67:b4:28:26:76:a6:ab:a1:55:6a:a1:
a1:98:27:02:d1:67:0b:3d:81:7b:a7:ac:cd:77:67:91:44:4a:
7a:02:85:e5:a4:e3:fd:24:da:e2:fc:37:77:3e:db:42:02:92:
b7:2c:3f:81:c5:b4:a3:6b:9c:76:82:7e:7d:27:35:a6:75:5d:
da:77:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:14 2025 by rpki-client