Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File: t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier: Nm8g23RSlUh6QsExJxXt1sWmYi/2JwKuCQ5F9Q1kYN0=
Subject key identifier: BB:F5:8B:8C:1D:2B:31:24:36:B1:62:16:37:B5:F9:DE:7A:B9:43:A5
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 0199FFC88C58176B83BC646F5EF06A2EA8D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number: 16B5
Signing time: Mon 20 Oct 2025 04:02:37 +0000
Manifest this update: Mon 20 Oct 2025 04:02:37 +0000
Manifest next update: Tue 21 Oct 2025 04:02:37 +0000
Files and hashes: 1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: kQ9UifOIdT7D7N97nN05e6EsU+nZcIAnH63o5UzFPTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:8c:58:17:6b:83:bc:64:6f:5e:f0:6a:2e:a8:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Oct 20 04:02:37 2025 GMT
Not After : Oct 21 04:02:37 2025 GMT
Subject: CN=bbf58b8c1d2b312436b1621637b5f9de7ab943a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:ae:74:d1:ea:e3:59:bd:bb:30:89:34:0a:
dd:7c:b7:d5:09:62:65:05:33:86:b5:70:84:60:83:
7b:f1:90:40:48:1d:d0:96:6a:f5:80:b0:20:37:d3:
87:9b:31:1d:46:a2:23:db:78:59:69:aa:80:62:74:
d6:b1:60:8d:7e:e2:d0:19:ca:92:b5:d7:ae:d4:53:
ad:15:0a:8e:0b:0b:44:5c:08:fd:99:08:35:6d:e6:
e3:64:3c:db:57:20:15:17:be:a9:84:83:fb:62:c1:
bd:90:52:8f:52:76:d0:2c:90:3b:de:e9:aa:99:ee:
4a:ab:cd:10:e0:9e:6c:7e:f1:32:13:06:88:23:cc:
1a:f1:4c:5a:42:08:eb:f0:00:2d:71:6b:50:d3:5e:
d2:f2:77:5d:4b:0f:aa:27:d0:c9:36:4b:cd:98:c9:
05:dd:88:5a:0e:e0:5e:63:39:16:49:24:d7:f2:e4:
87:0a:a9:81:f8:6f:18:fa:0b:6f:69:e9:c1:33:30:
f9:72:af:36:75:49:27:88:43:89:b6:54:23:b2:07:
75:1f:2d:27:28:c8:6a:8d:b4:97:e2:a1:3c:29:1e:
a6:f2:69:87:ea:08:05:bd:37:d9:5a:91:57:e3:ff:
ff:29:23:f4:c3:64:f6:c0:bf:b9:bb:7f:91:4d:32:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:8B:8C:1D:2B:31:24:36:B1:62:16:37:B5:F9:DE:7A:B9:43:A5
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:bd:b5:cc:b2:9c:dd:01:a1:d1:cc:7f:88:0b:dd:ef:ad:d0:
71:bb:f7:05:f5:14:4a:54:29:37:f5:bf:e9:1f:57:c1:80:38:
48:38:3b:60:83:f5:16:40:43:61:f7:f1:1b:7a:c1:62:66:e9:
42:1f:75:49:f3:10:07:67:05:57:66:a4:ad:ab:c4:97:3f:d4:
97:dd:e5:97:33:ac:33:d5:70:2a:85:76:21:fb:98:30:56:ad:
39:9d:17:76:1a:38:69:2c:51:89:91:0c:30:15:d5:d0:b8:c8:
55:74:95:31:89:d0:1e:33:fc:3b:5c:b3:3e:c9:65:a2:d3:c0:
58:09:69:91:d8:d1:86:a7:63:ee:8c:eb:b0:7f:51:51:71:2b:
71:17:68:59:c9:3b:c7:6d:9c:4e:0a:4e:70:a9:f1:42:ac:a0:
ed:24:c7:31:e5:7d:40:e1:74:2f:7c:66:f5:52:7c:4f:78:10:
6b:53:c8:d7:2c:65:86:fe:08:02:5e:eb:f2:c5:fd:04:97:ee:
7f:db:0e:eb:18:24:03:ec:48:ab:9d:e8:74:f5:6a:90:91:b2:
19:06:9d:e7:86:8c:70:fe:85:2b:34:31:2e:03:6b:c0:73:7d:
e3:60:94:31:e0:03:f7:93:33:b8:be:80:12:12:d3:74:d2:87:
58:2f:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:01 2025 by rpki-client