Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
File: S84INADK9hbzUCAynI1288S4OaU.mft (raw, json)
Hash identifier: cK7iaYBhBvelH1SBA36b421n8nkb+sgrhIGx4RNzZFA=
Subject key identifier: BD:10:66:37:36:56:40:4A:A7:88:25:3C:61:27:D9:2D:C8:82:85:ED
Authority key identifier: 4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
Certificate issuer: /CN=4bce083400caf616f35020329c8d76f3c4b839a5
Certificate serial: 0199FC216B2D9E939861382A2D737C4013AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: S84INADK9hbzUCAynI1288S4OaU.crl (hash: RMByBo5Xr4jdZ6Ly3VrZYP9ekGRt3JAZgzQ2IJRP1/s=)
2: xu8AVZlYRkARGQOdM9wgzlgLlPk.roa (hash: z2f5UKfOO2uXvhmwbBAmMbbk0ctXWHQsq/ILki97gKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6b:2d:9e:93:98:61:38:2a:2d:73:7c:40:13:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bce083400caf616f35020329c8d76f3c4b839a5
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=bd1066373656404aa788253c6127d92dc88285ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:5d:f4:c6:a0:34:2e:f5:0b:1b:d4:7d:79:
14:68:aa:f5:89:02:e2:90:8e:b6:f9:a8:dc:33:cc:
bf:7f:d7:5e:cc:3f:a5:6c:a3:d4:68:71:30:b6:51:
3c:e6:39:79:23:a5:51:33:ad:7c:3f:59:e9:30:ad:
89:e8:71:48:ca:1a:36:7f:d5:b7:7e:4a:2d:92:29:
0e:13:2c:8b:c4:d7:70:34:87:4a:22:59:e8:b5:78:
02:14:44:6e:ac:d3:97:6d:b7:05:d3:e0:b9:2f:b5:
32:7a:1f:f9:9d:25:37:51:d1:05:8d:b8:1a:77:5f:
fa:a9:ba:af:ca:c2:0c:28:01:df:2a:b6:3a:8b:1c:
6b:6b:64:cb:02:37:f4:3f:35:61:d7:3d:c9:96:a5:
93:46:0c:c3:3a:79:a2:9f:30:d3:64:e8:ad:7c:ed:
86:39:c1:04:6a:93:2b:69:8d:2f:1c:7a:28:8c:c1:
6a:50:82:74:34:56:b9:d0:08:13:01:9b:11:f6:86:
e3:f1:11:86:21:cf:6d:3f:e1:cd:f2:8b:e3:2a:6d:
53:e4:7a:20:0e:ca:b6:14:ed:40:5b:82:30:22:53:
13:a7:d7:66:b9:b8:42:ad:39:30:a3:3a:5d:04:91:
8e:45:d1:f4:b7:da:7e:2a:c6:ad:01:c0:7a:20:f9:
9f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:66:37:36:56:40:4A:A7:88:25:3C:61:27:D9:2D:C8:82:85:ED
X509v3 Authority Key Identifier:
keyid:4B:CE:08:34:00:CA:F6:16:F3:50:20:32:9C:8D:76:F3:C4:B8:39:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S84INADK9hbzUCAynI1288S4OaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/77ff2a-dd6b-40ca-997c-80a7eba6f8e9/1/S84INADK9hbzUCAynI1288S4OaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:6b:aa:99:18:f7:31:b5:40:c7:09:96:ad:fd:5d:d5:88:
68:3c:86:61:a4:12:45:fa:21:6a:61:be:b8:a6:49:da:89:81:
6f:2f:64:e0:e6:24:7d:a5:78:5a:44:ed:55:19:8e:f7:8f:e0:
ca:63:0b:15:be:5a:61:0b:c4:41:3c:ce:91:ab:b6:d0:c7:48:
05:06:df:ef:d8:39:b8:0e:78:e9:0a:1b:36:8e:db:37:d1:0a:
65:76:5c:5a:e6:0c:ef:d7:28:52:d9:9d:99:24:57:94:b0:5e:
e0:8a:f5:a0:ad:91:84:a0:cb:b8:f0:b6:17:93:38:f0:fa:d7:
bf:ef:6d:c9:1f:06:fb:5e:95:b4:d3:3f:73:aa:ca:97:7e:04:
1c:05:6f:64:57:25:f6:56:14:00:81:97:c0:4d:ca:65:36:67:
39:61:80:aa:ea:7d:cf:ed:23:b2:10:50:0d:2a:f0:c8:9b:46:
04:a0:00:7d:f8:1b:bc:ce:f7:ce:88:60:41:a7:d5:3c:ac:71:
d7:86:b9:06:05:f0:fc:5e:ed:bc:58:93:5f:22:45:0b:74:77:
88:1e:c9:7f:e6:76:fb:23:74:dc:93:bc:d5:0c:a2:c3:c2:31:
a6:42:93:7e:cd:8d:99:ce:df:c5:12:74:54:c5:d8:41:bd:91:
f9:f3:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:41 2025 by rpki-client