Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: F7m8e2PYAQI/3x7nKd46+Ltw7dyElueIYJG4kvozrCw=
Subject key identifier: D4:3B:45:71:40:B3:1D:78:D4:C2:CB:21:5A:4D:BE:02:12:23:E0:FD
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 0199FCC637B7303A283437AB3819EDEAD3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: iZ/jzGiHSvaSdzinA/OLGvmFjckd6FJIb9YauFk69oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:37:b7:30:3a:28:34:37:ab:38:19:ed:ea:d3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=d43b457140b31d78d4c2cb215a4dbe021223e0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:02:b5:be:4b:b8:dc:36:40:55:34:44:13:
6c:b0:38:8a:9d:27:a3:a3:b1:7e:45:a7:03:1f:19:
77:5c:94:2f:4b:59:47:f5:b7:0c:fe:be:e4:18:79:
36:00:81:9d:9b:e1:fd:d1:c6:64:8e:41:a2:9e:c5:
65:50:5f:22:35:69:3c:bd:56:d1:3d:49:29:e4:5e:
51:d0:b6:e8:16:d5:40:2f:02:54:0f:32:32:11:dc:
ce:a4:68:1e:5c:ce:67:0c:19:28:84:7e:c7:df:fb:
15:d4:29:1f:6c:1b:6e:7d:b0:60:f2:d4:2c:5d:7a:
ec:66:28:00:8a:ef:6b:43:a8:6f:7d:5d:72:36:10:
4e:9d:16:a6:e5:44:e5:e0:26:80:05:fe:87:73:ca:
55:65:2b:62:f4:af:4e:95:4a:48:2e:c1:52:6f:59:
a2:41:92:15:58:78:18:0a:9c:a3:2e:58:10:e4:b6:
11:c6:00:33:58:a3:6e:df:a1:96:c0:d7:06:d1:5b:
37:23:da:86:af:58:75:e8:be:a0:d2:38:7b:de:47:
26:d4:b2:e1:39:cd:cb:3d:38:5b:f5:b0:f3:4b:54:
1d:0b:35:55:eb:b7:80:e0:13:b5:fd:7b:75:17:00:
0e:cc:46:c3:39:9e:c4:a5:7f:b2:86:9f:34:7e:ce:
14:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3B:45:71:40:B3:1D:78:D4:C2:CB:21:5A:4D:BE:02:12:23:E0:FD
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b1:96:ba:0c:44:73:55:cf:5a:c5:93:2c:ca:46:f1:b8:4d:
3a:a4:67:c6:a4:61:8e:3f:f7:37:ac:8b:dc:ef:bf:d5:ba:ba:
d1:ac:46:b1:8d:d3:7c:dc:18:9f:21:49:81:a3:2e:71:f3:97:
d8:14:06:75:40:30:92:5f:b0:24:0a:ba:72:6d:bb:70:89:b4:
56:26:51:ba:1b:92:3e:f8:70:da:15:a0:7a:32:61:19:a2:df:
80:4a:ba:9d:ac:ad:99:f4:bd:86:58:b0:e0:8e:af:0a:34:8f:
ac:4a:74:db:73:66:17:77:c4:94:dd:21:12:ad:e5:e5:68:fe:
ab:03:7c:4d:6b:8c:43:84:75:0c:0b:87:09:f5:10:80:a9:92:
ca:89:5b:5d:13:0f:6d:88:34:7f:e5:b8:c3:02:99:f3:c7:7c:
8e:56:c7:e3:5b:47:83:98:70:c1:d6:06:aa:2f:9c:1e:63:58:
cd:70:0a:47:a6:0e:ef:22:1a:c3:c7:10:1c:f9:1b:90:d4:43:
14:a3:64:ea:e3:39:4a:e9:1b:72:30:31:69:3d:55:c6:f5:75:
16:5f:9a:cb:ec:52:49:c8:2c:e2:08:28:9a:40:23:69:22:f4:
aa:3b:b2:4e:1d:2e:df:85:8b:ef:c9:85:81:d9:fa:dc:2d:b4:
17:e2:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:56 2025 by rpki-client