Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: psMu2Pyd1a+e/JD+s7PkOenYrksRMxQJYWZRNjUdtZc=
Subject key identifier: DB:02:A4:56:C0:69:E4:F7:C9:56:16:C2:AA:91:41:2B:25:6A:FB:89
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 0199FB45DB2D149121891F0C0BD37B3094DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: xkf9pybrzG/QuGB1eOz7Zb47ZTOidlLBhUx18ZmSR3g=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:db:2d:14:91:21:89:1f:0c:0b:d3:7b:30:94:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=db02a456c069e4f7c95616c2aa91412b256afb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:54:ec:8f:7d:ad:bd:19:99:6f:4e:bd:b5:
40:22:12:5a:48:03:85:55:2d:fe:b6:1f:b8:7f:78:
76:78:06:bc:86:d0:ef:c8:5b:86:c1:0c:7c:ca:56:
bc:2c:82:e7:48:96:7e:94:d6:39:48:15:56:10:16:
aa:05:dc:3f:1e:fa:e6:43:9d:0f:b4:2f:2d:ba:4c:
90:cb:4c:c4:76:51:bc:aa:05:c0:3d:9b:65:a7:8c:
b8:d8:91:bc:af:50:0a:32:f7:20:68:96:b7:c2:30:
63:dd:9c:ba:2b:a7:ab:c4:64:9c:87:09:43:f0:44:
93:4e:67:a6:da:00:dd:5e:03:62:ce:32:ec:c2:59:
bd:ed:f2:9c:aa:88:5d:f0:6e:c0:31:a0:9a:e7:27:
ca:65:13:6b:a2:fa:5d:78:56:c7:5f:0b:e5:fa:9b:
21:14:a1:21:9a:28:ef:17:37:c6:32:67:16:8e:15:
da:57:98:41:55:03:9d:5e:b8:30:c5:8c:31:41:bc:
23:d6:fd:95:c9:31:be:b3:67:0f:5a:4e:6c:3b:16:
5c:37:df:0a:03:b8:df:98:7f:cf:40:ea:42:fe:9f:
93:00:55:4a:f9:14:2e:ab:fd:11:5b:fa:40:d9:6b:
54:e9:71:d0:4a:f0:19:17:80:9a:9c:60:1f:74:91:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:02:A4:56:C0:69:E4:F7:C9:56:16:C2:AA:91:41:2B:25:6A:FB:89
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5c:55:2a:8c:77:73:7a:ac:02:df:f8:57:e2:78:f9:33:c0:
f0:2f:0f:4d:4d:a1:da:2e:7e:b5:68:0b:76:06:0d:b3:5c:a4:
25:fd:15:30:35:27:01:34:21:56:59:9b:a9:b0:a7:ff:58:c8:
e9:62:ce:cf:e1:df:ac:a8:68:7f:25:84:f0:ee:f5:a9:f7:6d:
be:16:3d:77:2c:e3:8b:c8:86:96:6c:c6:89:77:6e:e2:a3:f7:
ca:84:cd:d1:68:08:25:a3:36:81:5c:4d:52:64:7c:d5:12:e4:
ff:11:42:26:01:ad:9c:2f:40:8b:e3:69:23:0b:07:32:ec:76:
19:87:8a:4a:b2:e0:92:75:e7:f8:6a:40:58:8a:52:77:4e:67:
e6:85:9e:eb:e7:66:76:5a:dc:99:c6:66:46:bb:b7:7f:c5:aa:
e7:97:69:40:f5:38:a9:0f:9a:b0:e9:92:2c:98:87:0f:0c:97:
e6:54:57:3f:71:97:0a:c9:66:e3:28:72:29:d5:21:8c:6b:32:
80:13:b8:18:30:07:21:79:52:0a:ec:94:2c:73:d5:fb:c0:a5:
c6:23:51:d8:fd:3b:ed:2f:24:ea:7e:9e:d2:bd:c9:0c:07:c3:
b8:9a:ea:91:3d:2b:95:72:7f:7a:b7:5a:68:71:be:60:55:ce:
d3:62:83:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:33 2025 by rpki-client