Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: +dIJWlqY/sKKWqnEjy1a7kXujlXGIEU2fKgUpT0830c=
Subject key identifier: B1:12:79:A3:4D:8C:54:00:C2:95:64:C2:16:26:D8:1E:66:B4:93:A0
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 019A02599230335DD5465673E793F65DBE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 16EE
Signing time: Mon 20 Oct 2025 16:00:15 +0000
Manifest this update: Mon 20 Oct 2025 16:00:15 +0000
Manifest next update: Tue 21 Oct 2025 16:00:15 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: grkBKJzMJIEYgVBUpDeyQKFU8k0tviFsynLslpOUn7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:92:30:33:5d:d5:46:56:73:e7:93:f6:5d:be:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Oct 20 16:00:15 2025 GMT
Not After : Oct 21 16:00:15 2025 GMT
Subject: CN=b11279a34d8c5400c29564c21626d81e66b493a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:42:9b:4b:ab:89:c9:c4:c7:76:7f:15:d4:
f4:b9:e6:8f:01:a8:9e:b0:2b:44:e1:36:95:4d:55:
6a:6b:51:25:3f:16:c4:74:ce:93:6d:3d:68:b5:29:
88:ab:c0:9b:9f:e6:57:08:0a:d7:85:db:2a:56:20:
96:66:0e:02:a0:1f:68:d6:ec:3e:7e:cd:d4:bf:63:
26:92:a8:04:67:ab:19:2c:96:de:97:11:f7:8d:d1:
b1:17:a3:1b:b0:8a:7b:d5:5e:ad:e6:59:e3:a2:75:
2e:01:36:30:e6:e2:da:c4:84:7c:69:25:fd:ed:66:
e6:0e:4c:b7:db:a5:3e:f0:15:43:c2:2d:10:4c:c5:
07:c2:52:3e:16:cb:1e:d2:63:da:7e:2d:e7:a7:3e:
c7:46:4d:73:a4:89:59:3b:8d:5e:3e:d3:31:01:34:
5a:25:ec:c7:73:d4:38:e6:d7:d7:a0:4d:71:65:bb:
c1:eb:9b:55:b2:13:12:ff:a6:70:19:3b:3e:10:c3:
0e:7f:65:6e:e9:81:dd:97:97:87:1c:39:86:49:99:
f8:60:cb:4b:ff:9e:37:d0:fd:69:9c:31:c4:8e:72:
ef:fa:00:1e:62:b4:72:03:fc:f7:d1:ad:d6:0f:db:
b5:74:e3:1e:eb:5a:33:71:67:89:39:9f:35:0d:17:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:79:A3:4D:8C:54:00:C2:95:64:C2:16:26:D8:1E:66:B4:93:A0
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:19:20:5e:bb:bb:67:bb:31:a0:b5:f9:4e:44:b5:5a:fe:e5:
6f:3e:31:61:6e:da:6d:9a:22:e7:0d:7a:f9:27:e0:85:24:1e:
61:22:fc:11:53:78:92:6d:a1:a6:d2:87:7e:fc:1c:fa:23:22:
5c:bd:6b:e1:6e:e3:a0:46:24:63:00:82:2d:5d:c6:93:48:a9:
46:10:f1:4e:c5:15:b0:28:bc:83:d0:62:ce:5a:a5:9a:5b:af:
0f:f6:0f:cd:0d:58:70:b0:d2:3d:9f:be:99:65:57:d9:d0:89:
95:d8:c7:6c:34:6c:85:34:d7:fb:ad:3f:c5:1e:0d:45:d2:5c:
ee:83:9d:4f:55:1f:13:b9:25:ff:2b:92:64:5c:63:d7:00:b0:
82:be:ad:ae:50:2b:fb:84:ef:65:8b:fe:48:31:fd:e5:bd:6f:
60:79:6e:22:c4:1a:83:0c:44:fc:f5:51:ae:fb:34:62:c8:63:
cf:be:6e:46:89:ea:3e:ea:bf:a0:3e:00:5b:bc:a6:aa:ea:1f:
4d:8f:8b:9e:43:49:6e:5e:ab:2d:3f:d6:5c:5f:98:08:5c:85:
54:1b:ed:68:7c:68:9b:74:1d:b8:51:49:92:30:7c:1b:6c:d9:
6c:bc:94:dc:63:8d:97:67:f5:8c:00:96:98:6d:8b:e2:89:37:
f0:77:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:56 2025 by rpki-client