Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: a6ejzPoQKT5E0LpHQHiMKROQWhYU4Mzwdn1sN5Rm/HM=
Subject key identifier: 28:1D:51:20:88:37:92:28:FA:46:20:E9:22:72:E2:5A:17:C2:FC:0D
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 0199FD33F153BDE53D131E3F7E49A5E67FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 10F3
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: BhwhwY7TqNuldhUz9k03Hzmgab6Sl0NErf3ixhVo8X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f1:53:bd:e5:3d:13:1e:3f:7e:49:a5:e6:7f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=281d512088379228fa4620e92272e25a17c2fc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6a:46:97:bf:c9:da:e6:4b:a5:f5:10:e3:d0:
7b:5a:18:39:47:56:b9:e3:12:60:10:8d:b8:5b:19:
8c:8f:62:23:0a:4b:b8:ff:1f:22:65:d3:db:7a:81:
93:5d:81:8a:8a:7f:e0:45:52:70:9f:9f:34:35:b6:
53:43:47:82:fa:90:fa:15:f5:13:bc:11:cc:35:ea:
6d:7f:86:ec:a9:4c:24:e0:0d:1e:59:f8:3d:b7:95:
22:2a:60:06:16:f7:6a:8c:52:6b:d0:08:68:70:f4:
b3:33:2d:61:92:fe:57:e3:54:05:0d:8b:a3:5f:e3:
91:12:dc:f5:f5:25:4b:18:65:d1:7d:50:df:40:2a:
81:c1:7d:d0:7b:cb:b0:4d:e2:94:a6:a5:6a:e3:9e:
18:23:f0:cf:d9:47:18:95:f7:f0:e6:50:bb:fb:3b:
f9:85:80:b9:b4:e4:04:4c:46:c6:45:c6:73:8d:a2:
03:58:45:72:89:05:d4:e6:c2:f3:33:f1:ee:fb:9f:
eb:17:3a:be:e1:cc:32:81:9b:2c:99:86:ff:b2:50:
8d:9a:cb:cc:89:a0:c4:69:20:7d:7c:73:bd:92:4c:
ee:ea:9e:99:87:20:25:d3:d1:29:dc:a0:04:51:b8:
a0:e4:93:2d:29:4e:52:21:33:b2:7e:a1:30:0d:1d:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:51:20:88:37:92:28:FA:46:20:E9:22:72:E2:5A:17:C2:FC:0D
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d8:b4:a5:d5:64:72:31:d5:e1:a7:cd:91:4c:1a:8f:e4:fc:
ca:1f:de:dc:e2:55:f3:8d:b4:98:73:45:c7:17:8d:68:38:4e:
ec:3a:d6:c9:f9:7f:06:fa:45:89:2d:77:29:36:15:26:0a:b7:
95:d7:5c:fd:de:7a:3e:0b:f4:42:4e:32:db:c0:05:2c:25:05:
c7:c8:2e:5a:49:19:a4:80:08:79:92:6c:68:7f:8f:5c:d9:4c:
50:97:11:33:48:b2:d5:23:c0:21:7e:22:21:43:b9:7f:18:88:
80:10:1f:61:dd:a7:6f:9a:67:dd:bb:6a:86:fe:24:29:66:dc:
22:96:f5:dc:df:ec:9a:1e:c8:e1:c7:08:9d:71:46:6b:4f:9b:
a4:a1:d7:e6:1f:86:cc:bc:ec:d9:2f:f4:71:6d:02:d5:91:1a:
18:d4:9c:73:3e:c1:15:5e:44:87:47:93:cb:ec:b9:5c:82:e4:
2f:51:23:85:1b:23:45:87:a9:5c:a3:77:00:0f:72:89:04:69:
42:20:59:9f:2a:1f:54:b2:1e:4d:96:f1:6e:8b:70:2f:c9:99:
64:fd:43:ae:51:54:df:b5:81:bd:e4:72:1c:a4:86:6b:fb:7d:
b8:01:3d:01:b1:b5:c7:1d:81:ce:95:bc:83:bc:0e:ea:c8:ce:
15:3f:a6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:56 2025 by rpki-client