Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: hPOMvnljSsvITYe4I1UNVSMc22PzbEzyTt1FoKgF0uM=
Subject key identifier: F6:B0:DA:EC:66:1C:01:CD:7D:94:BD:70:EC:E9:BE:B2:25:AA:5B:C0
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 0199FC21BB52959760DD600C98B8E8C4CDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: 3OuVlDkpZ3UjmzsNRXjC6XFPSopzhwistl96jis/Kok=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bb:52:95:97:60:dd:60:0c:98:b8:e8:c4:cd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=f6b0daec661c01cd7d94bd70ece9beb225aa5bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:c5:77:19:47:c7:71:40:08:2b:76:48:91:
0b:58:85:ee:89:d2:ad:b5:62:67:b5:42:12:c7:f6:
a9:fd:3f:b1:74:44:a3:ed:0b:66:f6:4b:c7:a8:ba:
e8:53:ee:77:87:64:86:e3:6c:30:e2:53:7a:bc:bb:
ad:c3:5d:01:95:16:30:ac:5d:c5:32:ff:58:8c:2a:
25:c2:bd:52:03:c6:5c:c7:93:4b:88:e5:03:80:32:
a5:8d:7e:5f:4c:cb:c0:9a:ec:3e:09:87:2c:4c:19:
5d:45:55:20:22:5b:00:90:96:f3:40:99:a6:bb:cf:
f6:1f:91:46:ad:08:27:a7:82:bb:73:f3:17:45:e5:
06:3f:02:af:21:d7:cb:a3:0a:1f:ce:38:52:8b:48:
07:8f:92:93:78:3d:99:d0:e9:db:a8:73:e4:61:e5:
ac:a1:ef:c9:f7:be:7a:e1:4e:de:8c:89:c6:ee:9a:
05:da:f8:06:21:fa:d9:60:8d:d9:5e:e2:61:b3:cc:
a1:c7:79:cf:05:d5:a2:5d:89:e0:bc:e4:d4:d4:93:
44:9c:ac:f7:bc:00:2b:9a:5e:e7:16:63:dd:5c:16:
45:8d:f5:1e:2e:bc:32:f1:e3:5b:b7:6f:fa:d2:7d:
cb:45:d8:ee:37:30:13:3a:86:18:9f:21:eb:82:6a:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B0:DA:EC:66:1C:01:CD:7D:94:BD:70:EC:E9:BE:B2:25:AA:5B:C0
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5e:5a:45:06:1e:e8:95:85:a2:69:ac:a0:14:db:bf:23:d6:
5d:5d:26:93:ac:05:fe:48:57:d8:37:b3:ac:6b:bc:bd:51:94:
c3:b0:21:b0:ea:f8:0d:99:70:63:77:da:f8:0c:d5:1b:27:92:
48:1b:f7:8c:79:60:b0:d7:db:8d:cc:a5:a8:9b:31:4a:7c:d3:
be:09:14:da:66:18:28:50:01:df:71:57:c5:e5:2c:e8:e5:74:
8b:e7:d7:51:61:9b:27:cc:81:9b:cb:e3:94:68:56:c6:33:a8:
18:32:39:ae:3f:2f:a7:24:8c:2b:77:df:8e:eb:09:92:e9:6e:
67:8c:1b:5f:12:9b:70:19:e8:d8:35:88:0f:53:8f:77:55:e3:
f9:ad:5f:d1:e3:22:ac:cc:9c:cf:65:70:13:ae:72:3e:b0:ac:
df:7e:63:6b:26:9a:ec:ad:9a:7c:37:87:fe:3a:65:25:78:68:
62:68:7c:ea:aa:3b:ff:1c:34:95:84:46:07:fc:a5:7f:84:52:
ec:5c:36:2d:c9:1a:fc:7b:c4:64:c2:1b:ca:7c:2a:ee:35:ff:
97:48:50:df:79:7b:c9:e9:83:3d:ec:25:af:1e:80:30:77:59:
80:b8:c0:b5:18:05:f2:10:bd:8d:d3:a2:4b:8d:21:e3:6d:98:
47:09:eb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:22 2025 by rpki-client