Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: OL7mT7locyLp1gZ0EXzY87GJ3xM6W3vM6XKb3+e+hjU=
Subject key identifier: 36:EF:E7:A1:59:B8:E1:76:5E:CD:36:80:05:BB:18:0A:CF:84:15:E6
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 0199FD3404AE7EDAA5F15E5C6B03098A0E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 16:01:08 +0000
Manifest this update: Sun 19 Oct 2025 16:01:08 +0000
Manifest next update: Mon 20 Oct 2025 16:01:08 +0000
Files and hashes: 1: 383xruHS9gjuKR0YjGqV2ugUrGs.roa (hash: yHlfc6+ACf2WRV0TaB1YAv4EeJOrblQempkg7RUI1mU=)
2: ZNc2R38IFzIz7kBedhBa4EVwaEk.roa (hash: EpA69Eq6Q+KV+gO/Q6uVQrzX/PppOsS4DI+GMDk1VRA=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: 3irp9zzhK6WBj0qjT06sjE+m06L73VLm4Zr+rqUH1G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:04:ae:7e:da:a5:f1:5e:5c:6b:03:09:8a:0e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Oct 19 16:01:08 2025 GMT
Not After : Oct 20 16:01:08 2025 GMT
Subject: CN=36efe7a159b8e1765ecd368005bb180acf8415e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:de:d2:6b:ba:cd:f4:90:9c:18:cc:ce:d9:
28:b7:ff:a7:0e:b2:eb:ba:16:54:2e:4f:6a:a7:c2:
92:1a:23:eb:bc:ca:04:46:ba:2d:b3:7f:70:cd:17:
09:86:1f:b6:5b:44:61:d3:8c:40:84:59:62:ca:e2:
60:f6:45:04:af:a6:03:13:3c:fe:7e:53:a7:7f:8c:
8a:2f:62:54:d4:65:a9:60:54:23:71:f8:ee:f0:fd:
fa:22:98:83:cb:84:65:8a:bc:81:f4:fb:fc:ef:d7:
34:69:13:7b:64:6c:cc:2e:a0:c1:27:27:c6:35:4f:
2d:6e:7a:ae:ef:cd:03:91:7a:30:19:9b:4b:59:6e:
5b:16:52:45:4d:e3:c6:6f:ff:47:2c:87:a8:e3:7d:
b7:cc:2e:ee:48:7e:b8:3d:c8:ce:59:18:34:9f:d8:
fe:70:c8:93:be:9c:8b:5f:ac:af:3b:e8:3c:67:66:
4b:b6:d8:f7:f3:9c:7f:4b:f5:02:98:17:09:c9:aa:
bb:41:79:ce:74:63:5f:c1:ca:82:23:d0:69:8c:f8:
8f:71:a7:7d:ca:26:5a:0e:46:86:3a:82:e7:7b:d9:
b8:30:2d:eb:9a:4a:26:93:d4:00:f2:fe:46:00:a0:
ed:7a:45:0c:a9:31:48:c9:c3:37:06:c0:18:bd:2b:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EF:E7:A1:59:B8:E1:76:5E:CD:36:80:05:BB:18:0A:CF:84:15:E6
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fe:43:06:c7:22:07:88:97:fb:80:9a:e4:f2:b5:4c:b7:20:
42:af:8a:5e:2e:13:c5:82:b9:4f:c4:09:05:53:33:6a:6e:66:
fe:65:ed:38:2d:73:3a:ee:e3:6a:19:ec:77:ba:88:12:97:c8:
3c:12:32:d7:fe:e7:46:69:33:80:35:ae:be:ac:56:c5:c1:03:
47:21:52:8a:4f:8d:b4:f1:61:dd:6d:e6:f8:7b:f3:77:5b:62:
ed:4f:f9:6f:91:c5:6c:3f:3e:07:f1:d7:32:80:68:ec:ec:a0:
35:76:26:26:34:78:f4:e5:be:9c:8d:77:68:3b:a1:a9:31:4f:
e2:af:ae:67:ac:0b:1c:74:bb:07:53:ab:5c:bf:47:f7:7b:d5:
81:cc:2e:8c:8b:6d:28:be:8b:6a:69:ee:6b:90:54:65:35:be:
84:03:7e:2e:7b:e6:d0:dd:c6:2f:10:b0:35:6b:7a:73:73:94:
82:05:3b:7e:e5:b7:c9:80:b4:bd:47:41:d6:0a:b0:a5:c6:e0:
55:3c:52:bf:90:7a:ed:bd:a3:13:3e:af:81:d1:f8:0a:13:cc:
3b:96:28:27:b4:eb:31:2d:6a:32:98:ac:05:ef:fe:00:e5:ad:
14:8f:7b:b6:64:78:13:44:dc:d5:33:58:35:f7:72:20:f3:4f:
8f:0a:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:01 2025 by rpki-client