Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: ubrxDaeyEKUXPo+3JeoCbtmArQ45Uf+3Bsx/Lcm3ZHk=
Subject key identifier: 05:25:52:20:5F:9F:98:0C:B0:43:39:1B:17:9F:52:15:21:64:8C:30
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 0199FB45B18575604F89E3CF2EB10D181260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=)
2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: E3GKgtPfrFqy/IcfbX4t58NWr4xepg0KS/stnqDsnHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b1:85:75:60:4f:89:e3:cf:2e:b1:0d:18:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=052552205f9f980cb043391b179f521521648c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:42:30:b7:3d:be:d4:4a:42:3d:27:4f:1b:
8b:cf:10:a0:a1:98:b5:e7:3e:36:d3:6f:dc:f7:fa:
12:17:e2:d1:da:4c:5e:88:67:99:79:6c:f2:92:6b:
0f:66:9c:f7:06:27:ed:f5:d0:6d:3f:14:50:d9:a3:
8a:b5:aa:25:70:f3:f4:d0:2a:be:08:1d:c5:68:41:
03:44:55:26:fe:3f:74:54:f7:33:38:8d:04:b0:d8:
2c:65:6d:54:d3:98:2e:74:57:7a:6e:27:4d:26:f3:
96:0f:0f:36:f0:25:e8:46:b1:f8:be:42:0e:ba:af:
db:71:91:ed:44:52:93:be:bc:ec:85:96:23:de:84:
cf:b9:fe:eb:08:13:4f:6c:e1:95:e0:0a:b9:b9:77:
34:5b:27:fd:c7:63:f2:5a:b5:29:6a:e2:f5:0f:29:
ae:59:87:2b:e3:80:e4:ce:f7:1d:da:f5:75:42:78:
e3:e7:77:43:24:22:9e:cd:1e:f7:5b:49:9d:12:ee:
f7:ce:b0:8c:08:76:4d:e7:d9:bb:ec:d4:ba:04:bb:
fd:53:3b:0a:b6:ba:a5:fe:be:16:7c:33:19:c1:f6:
78:9b:50:e7:5a:5a:6c:73:bf:03:9e:70:09:a0:fb:
32:55:b3:a6:3d:8a:7f:b6:77:8d:bc:20:80:82:ea:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:52:20:5F:9F:98:0C:B0:43:39:1B:17:9F:52:15:21:64:8C:30
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:08:f0:26:12:2b:d4:cb:aa:2f:c5:c4:92:a6:86:41:e9:
c2:f1:28:24:d7:3c:a5:ad:7f:78:76:8d:f2:6c:f5:93:33:7b:
6d:b2:72:0d:9c:8c:e1:68:d5:dd:19:9c:15:e9:fa:97:2b:09:
39:2e:47:c8:76:94:c4:07:1d:23:28:ec:ca:23:a8:36:d3:8b:
16:c4:e0:1f:b3:5b:42:5d:64:ca:d2:13:e2:55:44:eb:05:15:
98:27:57:ab:9b:c5:c8:7e:7d:66:6b:ff:41:1f:fc:ad:8c:95:
88:b6:cc:f1:5b:83:65:08:74:77:7c:3b:43:4d:a9:7a:a9:2d:
08:cc:75:14:4a:99:50:06:0f:e2:68:0d:3b:cd:15:64:25:19:
8f:a8:02:0d:4b:43:04:e3:7a:62:9b:a2:13:23:51:19:37:0c:
ec:25:02:f1:10:ba:47:49:aa:39:2d:7f:dc:25:db:38:52:7a:
bc:d6:87:cf:ce:31:58:d7:01:11:0c:65:fc:fe:93:44:34:e3:
3a:d6:77:d4:42:27:4e:ce:86:ff:bd:5e:d9:e9:8e:b1:22:8a:
10:49:b9:bd:03:ba:21:cf:be:be:40:dd:dd:cb:fd:d1:35:2c:
b6:01:15:4c:de:fb:9d:ae:79:83:f8:c1:c8:7b:ce:34:b6:e7:
53:59:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client