Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier: W6eRlSx+9Uxfo94aF2Qohfpky5WC+G62KC5o1dSdcuU=
Subject key identifier: 28:7A:23:F7:07:A3:86:DC:5A:41:C0:41:41:D3:8C:42:56:7A:E2:06
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 0199FBEAB81240E07C3A1B0D8848894E1DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: P+fftgjsL9fww8ZWJ96l8cFflszJYpoHcozqj+DciXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b8:12:40:e0:7c:3a:1b:0d:88:48:89:4e:1d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=287a23f707a386dc5a41c04141d38c42567ae206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:12:1a:e0:8b:c3:e2:47:22:26:c6:06:58:
17:16:dc:0e:ee:a6:b4:d0:1b:7b:0c:e3:fd:7c:71:
cb:1a:52:b5:d0:34:6d:34:16:65:16:b1:d3:8a:a8:
22:a4:03:4b:0f:6e:81:dd:44:3d:bb:1c:94:43:11:
aa:3d:43:4a:e6:2c:a8:86:d7:57:23:9a:50:1f:79:
72:27:9b:dc:34:84:d9:f2:7b:53:c0:c0:e7:4d:00:
a2:a7:09:ee:30:5d:4f:fd:42:8f:1b:5b:f2:9c:28:
fc:25:b0:2e:44:a8:ac:17:f0:bd:b3:2d:28:a2:c6:
55:9a:48:d4:7c:08:5e:93:ee:02:5c:f4:5c:22:b7:
6b:f6:fe:f6:28:57:e5:f9:97:6e:61:ed:5d:5f:17:
ff:1b:d5:73:16:eb:df:08:2c:3f:73:36:a5:f6:fe:
6d:f5:4c:39:aa:f4:8e:69:e9:a7:e0:80:36:46:0b:
8b:53:a3:da:24:c6:0b:e2:e4:25:f1:f1:a4:73:2c:
e5:56:14:45:57:06:9e:6b:00:91:3f:6c:7a:5b:d0:
90:17:ac:2a:75:40:44:c2:b5:eb:28:f5:1c:c5:97:
09:f5:5e:fa:9d:ce:69:2b:5b:16:20:82:b6:bb:3a:
5f:b2:69:04:2f:8e:f1:42:3b:29:4f:b0:92:59:fd:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:23:F7:07:A3:86:DC:5A:41:C0:41:41:D3:8C:42:56:7A:E2:06
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:7a:96:a8:1b:4b:67:76:a8:b6:a3:d4:fe:d1:e2:c4:ac:
1d:91:1f:6a:75:ac:46:d5:1b:0c:0f:e3:e8:fd:cd:19:13:4b:
2d:8f:86:70:77:d9:27:2c:78:eb:e9:7d:f5:e9:aa:c3:3a:86:
11:8a:50:d6:ae:b8:b3:df:45:17:cf:2d:40:99:6f:82:b5:93:
41:a4:83:5d:26:21:dc:c1:66:49:43:33:f6:82:45:4d:64:e1:
0c:b3:01:6e:38:03:62:7a:31:e7:89:e5:15:e5:78:42:c7:bc:
fe:b3:a2:69:04:5f:6c:6d:51:b8:77:5a:a8:bd:a9:d8:c8:7d:
74:41:51:c9:37:67:95:cf:cc:5c:c0:b4:29:67:91:41:f2:8a:
59:1f:2e:b0:0b:2f:bb:a4:14:31:f9:c1:53:7d:51:c1:df:1f:
47:48:03:a1:05:95:25:23:ee:c9:e8:ca:49:f9:66:b5:10:c0:
1f:06:d3:e7:a2:3f:e9:b6:1b:1d:f3:ab:77:f6:28:ae:55:19:
94:b5:48:a6:74:33:19:02:45:cc:1b:84:3d:92:20:fd:61:59:
91:44:45:d4:87:05:65:83:df:19:c1:27:4d:ee:ca:6c:c4:9f:
71:49:f7:8c:b2:58:d3:55:2c:d3:65:0f:cb:a4:43:3c:97:52:
36:0b:9e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:39 2025 by rpki-client