Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: ngpmZABQEEQEUxkCZrD7s2cm+rM2VhrrFHdFaOrigek=
Subject key identifier: 3A:01:7B:EE:4B:0B:AA:89:58:27:51:DF:36:4A:22:E9:DA:BC:1B:8C
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 0199FB0F0740F6B1E842357BDB5076094A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: QDfU92VCjM6Xxssx2rYGjxGD8N7t5HihDCTrRejwWZY=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:07:40:f6:b1:e8:42:35:7b:db:50:76:09:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=3a017bee4b0baa89582751df364a22e9dabc1b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:cc:fc:9b:c2:23:9a:8a:f9:9f:5d:94:02:
c1:60:34:a3:c1:49:2f:ad:9f:c0:39:a5:52:67:fb:
d8:de:4f:62:64:15:ac:a5:15:58:7d:d5:05:1e:ea:
92:af:05:19:83:76:31:c0:db:1d:37:a6:d4:ae:b6:
e9:25:d3:3c:83:73:91:c6:ce:1e:85:c3:18:79:82:
8f:27:77:bb:e2:c9:f1:6d:d9:11:20:a9:99:e3:1c:
5e:84:74:c4:fc:ff:36:58:a1:92:07:49:6a:f6:9d:
6d:83:32:1a:58:3d:e3:58:55:fc:39:12:d5:d1:e0:
43:4a:9c:b1:5c:06:df:56:90:1e:aa:70:4d:76:ad:
51:18:40:dd:c2:cf:bb:82:d3:54:3f:a2:b7:6a:93:
51:58:ab:c9:3d:3d:ba:31:35:68:10:f3:56:a0:0b:
55:16:d1:1a:9d:a0:fd:0a:df:13:0c:24:5a:7c:f8:
8f:60:cb:30:48:7b:62:4d:67:f5:c9:12:80:e1:b8:
1e:a0:57:94:b8:b8:9f:db:02:4f:2b:90:ad:ce:e8:
7e:fe:1a:87:42:7e:77:76:e7:74:8d:6e:64:7b:cf:
b1:4b:66:c1:c5:86:e4:0b:19:6f:d4:6c:e6:23:2d:
46:5f:ca:cd:c5:94:f3:bb:d3:88:7f:24:88:62:c9:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:7B:EE:4B:0B:AA:89:58:27:51:DF:36:4A:22:E9:DA:BC:1B:8C
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:48:cf:60:71:da:c5:41:c6:10:f1:5f:51:42:49:1e:b8:e6:
fa:8a:54:b0:a3:71:08:62:db:ec:4a:80:fe:9e:f5:40:45:2c:
b7:11:7b:c1:54:93:7a:3e:22:d9:0a:8d:2e:40:44:d1:0e:8e:
47:45:95:db:05:52:6c:86:c2:04:9d:e2:49:89:d2:38:4b:39:
b9:46:e5:bb:97:46:df:1e:d5:cb:28:e6:63:c7:a2:0b:af:32:
c3:b0:05:6f:e7:c0:84:34:6d:42:11:51:f9:b2:a5:5f:63:40:
de:52:ba:6d:1f:7a:92:19:4e:6e:db:22:d1:aa:f7:ce:00:b0:
57:6f:50:da:cb:42:ca:87:d7:80:36:8a:e6:69:07:78:03:cb:
e3:45:26:69:fd:63:37:5a:0f:88:a7:7f:13:92:0d:03:6b:67:
10:00:33:e5:d2:fb:72:82:b0:1b:98:13:e7:54:0a:84:15:9d:
0f:82:4c:64:fe:f2:67:f7:af:25:7e:35:98:20:c0:f5:3c:86:
a2:9f:bf:e4:2c:0c:fc:09:46:10:a2:b9:5c:93:4f:67:d9:64:
e0:c6:96:72:b3:fb:b9:ec:8e:d3:1c:41:8d:22:61:64:78:0c:
3f:34:8c:71:6b:66:2f:97:42:0c:45:59:65:0e:7a:a3:0c:0f:
66:29:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:51 2025 by rpki-client