Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: C5FB7RGpf7QxPcj/DkcrXv4VTJsB5ZSXYoR2U0dC0kc=
Subject key identifier: 6A:FC:F3:48:2D:C7:3F:20:F6:18:25:6C:DF:33:7A:36:64:0A:BE:87
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0199FDD9B3838A9294550490DA5C0AED69CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: yAB3ToF/zmK3yhAGNTBjvNpUctz4C6FCu4F640+h7t8=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b3:83:8a:92:94:55:04:90:da:5c:0a:ed:69:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=6afcf3482dc73f20f618256cdf337a36640abe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:77:73:16:16:f3:7b:c4:26:34:75:01:df:
8c:ab:43:fa:a3:f4:07:51:69:c4:3f:7e:9d:94:05:
76:d4:2f:06:59:2c:9a:d7:ea:22:8a:9c:04:2f:26:
8e:cf:9a:ca:43:f0:49:15:fd:5a:99:dd:1a:c2:10:
af:e7:97:ee:a1:ce:a1:ae:46:60:b5:8d:91:0a:43:
5d:19:99:d8:56:f7:6a:bf:0b:68:f9:3b:0c:45:39:
07:3f:e4:48:7c:60:04:6c:e1:46:79:22:20:81:72:
e0:99:2c:3a:bf:a9:56:ba:f5:2c:25:48:ad:89:38:
80:9c:db:a6:74:22:8a:4e:89:75:34:56:49:12:84:
e9:45:f1:53:12:16:9e:1b:69:e9:43:8d:71:71:59:
ec:32:7d:6a:67:ce:d9:4c:e6:49:e0:a5:0f:0a:7b:
1e:fe:6a:7b:a9:a4:a3:e9:f9:bb:f5:0f:0f:6c:eb:
ce:b9:b2:9f:22:df:27:4e:12:bc:57:34:28:6b:c4:
cf:b5:00:52:a2:cd:47:38:17:b0:49:71:b4:8b:65:
c6:76:b5:4f:95:98:58:5d:78:cb:a6:c2:62:47:5a:
da:e5:3a:e0:38:bc:92:93:aa:0c:e8:4e:c1:c8:b9:
21:de:9b:7d:82:e4:27:17:5c:04:87:7c:24:88:e3:
ae:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:F3:48:2D:C7:3F:20:F6:18:25:6C:DF:33:7A:36:64:0A:BE:87
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ee:a1:2d:4c:70:f1:49:88:da:e2:d4:f6:0c:a6:3f:84:4e:
c9:a7:f5:af:2c:ae:d1:e9:4f:98:45:00:b8:aa:d2:52:42:37:
d5:fe:ca:6f:0a:62:56:cc:3f:4f:03:81:80:34:45:12:90:0c:
38:13:17:88:d0:cd:85:a9:2f:2b:61:5d:40:19:01:94:ac:b1:
a3:17:5e:cd:b2:e1:3e:73:21:ac:e1:9a:de:e7:3e:e2:50:bf:
aa:b0:0d:67:f5:f6:8d:ed:79:ab:63:20:dc:b8:ec:78:fb:27:
0e:8f:e3:8d:d2:90:eb:49:02:f2:b9:09:ee:8a:4a:e2:7d:bf:
aa:ad:f8:b2:ae:14:a5:9e:61:ef:f3:7d:bc:1a:fe:3d:38:3d:
f4:12:2f:1c:75:a6:4c:f1:0c:c2:12:f2:1d:03:9c:86:0f:4c:
a6:19:4b:d8:c4:21:92:44:aa:d1:2d:81:a6:08:06:48:e9:11:
af:4e:87:0f:14:7d:d3:48:74:ed:0c:98:df:19:a4:85:e9:17:
ff:00:b8:0f:ed:32:4d:a4:17:1a:be:d4:71:0c:eb:eb:5e:95:
7e:f0:4a:d3:fe:1c:e5:02:fe:3d:42:8d:a7:d0:d0:37:a8:1c:
9a:cf:89:7c:0b:a1:95:d7:76:0c:2d:ee:1d:84:6f:51:1c:d9:
5f:cc:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:21 2025 by rpki-client