Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
File: b4E3h12v_gGPo4rUPMaKH6szXvg.mft (raw, json)
Hash identifier: SulS133P6rAEJH5suO0lFIZ/I/i26W2zlInDUOteXSc=
Subject key identifier: 30:FE:D9:82:39:5C:92:DF:B3:8A:2A:3C:54:AC:24:A7:22:2E:CA:5F
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0199FB7CB81FA25C3735FC0D1925AF0BDDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
Manifest number: 02BC
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (hash: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=)
2: b4E3h12v_gGPo4rUPMaKH6szXvg.crl (hash: K2Ait38r9pT645ky9kVnVgtgvC9pf9a72RQloMl5Ysg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b8:1f:a2:5c:37:35:fc:0d:19:25:af:0b:dd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=30fed982395c92dfb38a2a3c54ac24a7222eca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:f4:7c:0d:7f:cc:91:db:76:40:c1:a5:c3:
fa:52:38:8c:3c:65:35:7e:d9:56:8a:ad:af:f9:d2:
7e:dc:de:7f:60:c4:98:0d:77:74:84:f2:15:a5:91:
9f:ec:b9:47:f6:bf:6d:85:2a:d4:20:fe:c4:74:e4:
be:97:69:17:89:eb:4e:b4:b9:d6:5f:4f:3f:71:f3:
15:8b:df:ba:48:e9:99:86:84:f3:2b:2d:11:03:eb:
0d:64:c2:64:48:ce:5f:74:80:25:65:25:a1:04:6e:
4e:33:6b:9c:f9:e5:6b:f8:d4:ad:7f:f5:41:69:dd:
83:d3:9d:3a:94:76:b3:6f:56:55:d1:00:40:f3:d8:
ac:ef:72:40:7f:40:26:7e:5b:93:6c:2f:35:22:d7:
d0:47:0c:12:3f:83:ad:c5:53:de:bb:ad:3b:53:7b:
94:88:55:12:65:a3:8c:ee:a0:25:f4:94:e2:83:c5:
35:75:6f:15:c8:9b:7d:23:a1:83:1f:a2:4e:48:81:
31:78:e4:ea:7d:ba:db:35:54:b7:ec:49:f8:4a:1c:
f5:73:6c:88:59:8b:bb:0d:73:e9:19:e1:4f:4e:14:
22:7d:48:a4:a4:b0:18:92:33:bf:13:04:8c:9d:82:
78:07:d5:f3:8f:71:59:36:00:96:d9:4c:e7:4e:de:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FE:D9:82:39:5C:92:DF:B3:8A:2A:3C:54:AC:24:A7:22:2E:CA:5F
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ee:08:0d:e5:0a:bb:c8:53:67:c2:9a:be:cd:87:39:eb:37:
99:76:7b:a6:9c:86:b4:66:d1:76:8f:0a:60:70:d7:a6:ee:b8:
9c:38:eb:5c:c0:94:06:69:0e:db:b6:52:e0:97:47:f7:c3:30:
ac:ba:0f:46:16:d1:48:da:8d:3c:2d:14:c1:4a:7c:e0:b4:eb:
5a:de:e0:97:27:a2:56:68:a1:47:a0:3a:31:8e:0b:a1:ef:e6:
17:31:3f:a3:0a:1b:13:4a:2d:6f:25:59:1c:9d:ff:11:42:48:
fa:a0:62:d8:50:5b:3b:73:a5:0c:b5:94:01:c1:b0:17:80:42:
5a:d5:27:d9:f5:73:a7:f3:e2:41:9d:b9:d7:eb:c1:49:4a:a3:
3a:7d:e7:24:2f:d2:7d:7a:c3:76:d9:e2:b6:7b:87:1f:87:93:
ff:33:95:08:3a:08:a5:84:43:eb:84:d9:2c:10:3b:d9:86:03:
45:b8:42:bc:5d:18:f7:e2:cd:2f:01:e2:87:8f:d7:d9:af:00:
98:9d:b0:c8:26:6c:af:4a:99:72:9e:85:f0:91:05:70:17:5f:
bc:9a:e6:00:91:58:db:a6:61:4a:9c:a2:6a:cb:c3:b9:4a:a1:
fa:9e:70:3a:b8:61:64:21:dc:c0:63:01:4a:f6:08:c9:84:e6:
81:e7:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:02 2025 by rpki-client