Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: ohYG+btuuy56rQbI5a+FZZa+b5sr9yY+ZdcC1Il1yq0=
Subject key identifier: 84:3B:9C:9A:67:F2:3C:47:D4:AA:C3:F3:2A:95:9F:7C:2C:3F:9C:49
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 0199FC8F5558E4FCC9A599AC384BAD7A4312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: NmTrTEpVQtjS3KJGo6bSvWBYEnDE6g2GpRpguBoxCVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:55:58:e4:fc:c9:a5:99:ac:38:4b:ad:7a:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=843b9c9a67f23c47d4aac3f32a959f7c2c3f9c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:da:58:01:f4:9e:a0:f5:c9:81:c0:99:27:
2c:b5:5f:eb:c8:24:87:ee:a1:19:48:e1:ea:a0:92:
09:11:5e:45:a6:9b:94:d3:3d:2c:f4:37:9c:a3:30:
45:c0:f5:66:bf:46:0c:cf:03:0e:80:3c:df:97:70:
43:c6:5a:9d:05:20:38:fe:67:4e:d1:95:c5:4f:28:
0f:26:1a:ba:9c:d2:e2:6d:d9:27:5a:a7:ea:33:f4:
00:62:ab:25:a4:07:1e:92:c1:de:7e:70:07:c3:d1:
b1:b7:1b:f2:a2:26:cb:0d:ee:63:90:e3:14:c0:60:
ce:fd:cd:34:34:30:56:59:67:df:09:68:96:f9:17:
a5:77:0e:ac:b2:bf:ca:e5:f4:72:d6:e2:93:38:ac:
80:9b:01:17:8e:a3:c8:2e:b2:50:da:8d:83:fc:d7:
8a:c3:8e:84:36:c3:7f:c2:27:c6:c3:d1:6c:16:5f:
45:d2:f1:51:a6:74:38:9b:04:fe:7a:27:d5:2c:2d:
37:93:07:3d:c6:a7:6b:8c:bd:55:fd:38:99:ff:06:
cf:0c:1d:4d:2d:35:dc:bf:98:f7:20:c0:83:f4:b3:
a5:76:be:4c:74:f9:c4:b2:a9:89:4c:35:d6:d5:9e:
02:77:10:f7:9a:6d:9a:48:a0:f9:f1:4e:6c:16:f9:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:9C:9A:67:F2:3C:47:D4:AA:C3:F3:2A:95:9F:7C:2C:3F:9C:49
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5d:a8:4d:dd:63:8a:0a:1f:41:00:d4:77:6d:7e:f2:a5:1d:
ee:70:4e:b3:5c:22:c2:98:e0:1a:86:bb:1a:4a:00:50:df:18:
8a:a2:73:65:03:46:49:3c:35:c5:a9:c7:ca:7c:1a:4c:87:5b:
a8:87:b0:13:dd:c1:c8:7d:fd:98:3e:33:c4:a0:b5:af:de:98:
cb:ce:de:53:3b:95:9e:4b:93:07:0d:fe:02:3e:2e:12:3b:9b:
79:c8:14:fe:b6:34:db:78:07:58:a7:bb:9b:07:1f:d5:b0:92:
4e:86:41:9c:68:51:2a:d0:d3:ba:0a:32:63:c6:a0:f3:b7:06:
58:d4:c7:0a:45:6d:e7:d4:15:3e:10:d7:7d:5f:4b:a2:6c:6d:
15:40:34:f5:4a:c9:38:43:06:17:57:90:5a:1c:f9:c0:44:1d:
40:f4:06:65:4f:d7:8c:d7:f1:54:93:3b:1c:d0:aa:40:01:b5:
9f:f2:f4:e2:b0:40:de:f4:0b:0f:71:57:67:77:47:80:7c:b8:
a9:b8:b2:64:55:ed:4a:74:17:60:44:66:17:1a:fe:58:ce:66:
fe:1e:cb:f0:74:ca:cd:71:69:17:ab:d0:78:e4:c8:a2:93:53:
c9:a4:d2:a5:1f:78:4f:1c:52:17:89:67:a3:d6:0c:0f:c3:7f:
cd:7c:6c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:30 2025 by rpki-client