Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: qHmEKww3haue/qCeE7I4XOoMRmYxGnMcm7ZnZp0O8X0=
Subject key identifier: 61:0A:1B:2C:16:07:00:E5:00:71:6A:44:2B:63:E4:EF:BF:59:0B:F6
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 0199FC588ABA7FDE4991EC7E896A8B16F87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:25 +0000
Manifest this update: Sun 19 Oct 2025 12:01:25 +0000
Manifest next update: Mon 20 Oct 2025 12:01:25 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: qQjbWa2klIsS+cwAJppbTyT3+J4D3cwsiEIVJCY8FAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:ba:7f:de:49:91:ec:7e:89:6a:8b:16:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Oct 19 12:01:25 2025 GMT
Not After : Oct 20 12:01:25 2025 GMT
Subject: CN=610a1b2c160700e500716a442b63e4efbf590bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:f6:63:20:8d:2f:9e:48:2f:7f:a6:be:ec:
6f:b3:44:c1:5e:06:06:01:6c:ef:cb:49:77:72:ee:
f0:75:79:a4:26:e9:c4:fd:b0:26:c6:e2:f5:a6:86:
33:53:7b:dc:f6:39:0f:e1:f4:b0:1a:95:c0:9c:81:
86:a1:18:46:dc:79:af:2c:69:ae:a0:7f:0d:85:25:
4d:a5:04:81:e6:73:1c:b6:35:35:bd:42:56:89:88:
45:5f:c6:cb:2b:11:0b:16:f2:31:c8:7e:0c:c1:b7:
80:79:b6:f7:79:95:95:88:1b:1f:9b:25:11:1b:26:
0e:65:8e:9c:a8:1d:00:c3:39:f7:5d:22:36:d3:30:
80:1e:b5:ee:d4:ca:56:9b:af:77:65:21:3e:cf:3f:
cd:a5:05:9a:ba:6e:a0:4b:5d:8b:78:ec:47:b5:13:
dd:42:56:81:c5:73:ee:01:55:b7:27:e8:1b:14:f1:
7c:25:fc:55:83:c3:17:a7:fb:9f:c8:27:d7:46:5a:
7c:4c:df:34:e8:6f:7f:80:4a:4d:e4:f5:53:5b:45:
c5:95:ea:40:9b:4a:2e:2e:76:76:d5:d3:dd:b7:03:
08:0a:dd:e9:15:5c:fb:e0:69:ae:52:26:86:69:a2:
c5:fe:35:a1:b2:04:a8:3b:2d:e4:1a:be:96:6f:9f:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:1B:2C:16:07:00:E5:00:71:6A:44:2B:63:E4:EF:BF:59:0B:F6
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f5:c2:ff:a8:86:f7:2c:74:a8:fc:be:ea:6b:4e:c0:56:48:
e0:fa:39:2b:08:d9:32:78:a3:89:d4:48:bf:5b:24:e8:e1:25:
3c:f2:83:43:4e:3a:cc:f4:f3:f6:74:f6:17:72:c8:9a:22:8a:
28:57:50:35:65:54:84:3b:e4:8a:11:75:f4:09:9b:1e:66:f7:
a5:38:4c:69:b3:99:dd:0b:de:2d:3d:8d:7e:4d:81:47:e7:1f:
32:20:d0:47:bb:81:07:25:a3:63:b8:52:64:a7:1f:3c:72:ce:
33:64:87:94:1e:5a:ca:23:41:b1:16:83:6d:2f:a8:83:f7:bc:
8d:3c:66:ad:d5:61:fb:97:18:5b:45:5a:7b:fd:b8:bc:08:1d:
fb:d3:01:fd:52:8a:d0:89:d7:5c:4f:88:52:d6:4e:b5:2b:12:
11:53:b2:24:9f:af:9b:16:18:3f:25:fe:e3:ab:9d:ab:6c:8d:
d1:c5:53:27:6c:c7:b6:ac:b8:c5:db:5b:1a:28:45:8a:4d:f5:
b6:d8:29:41:8f:19:8d:0c:7a:c9:6c:38:43:c8:b6:38:2d:69:
d1:e6:08:49:f0:00:04:9a:be:b6:82:dd:24:e4:7a:f3:73:70:
83:c0:77:62:af:db:a3:5c:ad:bf:7a:c2:fa:f1:cd:bd:a1:a6:
00:36:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:00 2025 by rpki-client