Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
File: S4x70MRIa6Bzzi3lO6B01w5Ftec.mft (raw, json)
Hash identifier: pJYjmncP7M3yep9GKT1X5hudqLKg+R77M2PgdqcgVAo=
Subject key identifier: 00:B5:89:81:A6:07:E8:E4:7E:E4:DD:4A:48:08:99:77:4F:37:98:86
Authority key identifier: 4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
Certificate issuer: /CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Certificate serial: 0199FC58A9FB6FE43DBF6B78A87A6C68FB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: 3JM1DqiUyjfx5MdpsDwZLHS0SmA.roa (hash: q6Ea605SgtRXxY5NI/ZcpQt4PK8j0Kx+z2u5Y/QaL0k=)
2: S4x70MRIa6Bzzi3lO6B01w5Ftec.crl (hash: ZMqL4Hj175WuvdK6kFRYkuNuPWkTnCrsyfXR21VHNZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a9:fb:6f:e4:3d:bf:6b:78:a8:7a:6c:68:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8c7bd0c4486ba073ce2de53ba074d70e45b5e7
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=00b58981a607e8e47ee4dd4a480899774f379886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:51:18:79:f6:58:7a:0b:74:c9:bc:3c:e8:
06:3d:ad:52:a0:0c:72:11:d4:28:32:c2:ae:71:e4:
99:81:d0:7e:14:79:2e:87:a9:96:84:bb:c2:26:40:
23:ab:81:7c:bc:98:b1:38:e3:a8:15:7e:0a:2e:6c:
0d:25:a9:36:96:0a:19:1c:c0:e5:0a:6a:fb:0e:4e:
02:2b:d6:74:b9:2c:86:47:c2:1b:11:cb:a9:bf:a9:
26:22:65:93:4c:3c:89:b0:3a:ab:86:31:66:0e:27:
e6:21:5d:46:0f:5b:16:43:df:9f:6a:71:71:42:36:
bc:a5:e6:60:ac:19:a3:5e:f6:3a:12:c2:3b:0b:dc:
ae:3e:8d:f6:ce:aa:ba:fa:bd:dd:aa:c2:f8:f7:b9:
61:85:a3:df:55:f4:72:ae:e1:48:15:ee:b6:0b:57:
64:52:ad:c0:6e:0e:c2:9c:62:f1:82:59:36:f2:66:
1d:ed:a2:47:bf:88:05:9d:f5:40:2f:ae:74:3f:d6:
30:e4:3e:d5:d4:1e:e4:66:0b:40:2e:df:55:df:35:
4a:b9:c5:23:9c:d7:d4:82:7b:95:72:6f:33:c8:67:
d1:3d:43:b9:f1:d1:bb:ca:a1:8c:92:e8:2d:3e:b2:
ed:9f:69:38:54:fe:20:c6:39:00:cf:0f:54:81:16:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B5:89:81:A6:07:E8:E4:7E:E4:DD:4A:48:08:99:77:4F:37:98:86
X509v3 Authority Key Identifier:
keyid:4B:8C:7B:D0:C4:48:6B:A0:73:CE:2D:E5:3B:A0:74:D7:0E:45:B5:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4x70MRIa6Bzzi3lO6B01w5Ftec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b58ab-f707-4ab6-9ae8-0240e74476a7/1/S4x70MRIa6Bzzi3lO6B01w5Ftec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1d:41:f6:bb:7f:e2:35:8e:d6:eb:3e:19:21:7b:48:53:99:
ac:35:f9:67:9a:90:8d:59:47:ac:84:47:f4:dc:4b:74:93:a8:
cd:d2:3a:31:c6:2d:02:63:73:2b:82:7a:72:aa:bf:0e:74:1d:
16:25:76:96:e7:7b:9f:ad:fe:91:a4:26:ae:d8:ac:b2:84:39:
f2:b5:4d:b1:61:fc:09:2a:55:e3:31:20:6e:74:d3:91:27:6b:
7f:27:72:5f:2f:9b:9b:00:5e:09:04:63:15:1b:59:e6:34:fa:
fe:02:a4:fd:4f:98:ee:b7:ad:94:ae:dc:f1:e6:23:65:ae:02:
b2:2e:19:26:9a:9a:ee:56:3f:26:ed:73:77:9c:09:eb:56:28:
14:20:6c:bb:88:2c:63:01:85:e4:73:7c:75:ca:d6:b7:a4:a9:
da:d3:d2:93:ab:7b:45:ce:2a:af:6f:0f:43:b1:1c:f1:8d:e0:
06:c0:d3:3f:ed:c3:43:48:78:af:18:d2:85:5f:86:8c:39:14:
c7:fd:6f:70:e1:ca:0a:32:ec:77:2a:12:5c:29:db:a2:28:1b:
e9:65:e3:64:ca:5e:9a:12:b2:9a:c0:52:cf:63:81:30:ed:db:
42:6d:c2:82:3b:2c:19:6e:d3:17:82:58:97:0a:3d:3a:23:22:
f9:ac:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:14 2025 by rpki-client