Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: J+nZ28A/E2EeY6O4Bn3VSdS/X2PlqsrZog2r3gLAjqg=
Subject key identifier: 47:FC:3D:24:90:85:47:F6:5D:E9:37:C6:B4:C9:34:28:CB:4C:C9:97
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0199FC8F30A7DFB7B36E1055ECD2BA8061BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: T1FOx8zn8R8+TVVJ38mnwNfMA/5Y6yZnXpG0ZliDmYE=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:30:a7:df:b7:b3:6e:10:55:ec:d2:ba:80:61:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=47fc3d24908547f65de937c6b4c93428cb4cc997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:26:c9:47:4a:4d:d3:4d:18:1b:a3:8e:3f:
e1:41:a4:0e:d3:83:47:52:2a:ff:35:73:d2:00:27:
b6:71:bc:b6:78:7c:52:e6:19:8d:6c:84:2b:e3:f1:
e0:0b:e4:9b:17:cc:4e:33:e9:d7:bd:58:6d:11:f9:
4d:e9:77:d1:17:ea:56:02:03:15:e3:a4:79:a6:b5:
7b:1a:65:46:44:ca:c1:d3:ce:e9:4f:fe:69:26:15:
97:e5:2c:a6:7a:5e:26:6a:c5:76:35:77:51:d8:af:
80:33:b7:42:29:80:16:f9:f3:4a:ee:30:2e:ed:6e:
cf:7a:88:b6:ab:6d:8a:d9:42:61:24:d4:50:fa:11:
76:89:a6:24:35:d6:b5:aa:31:e8:9d:ae:62:b2:63:
1f:5f:e6:e8:74:d7:f9:67:cf:54:a0:51:b8:3c:ad:
f5:a5:b6:a1:53:01:e7:68:95:68:32:00:a1:a9:b2:
c9:b7:7b:05:e4:46:cd:cd:90:64:82:75:9b:82:06:
bf:c2:bf:03:8d:0d:93:5f:09:a2:9e:81:ed:9e:a0:
7a:f2:00:db:6d:82:d5:c3:42:47:dd:cd:c7:64:ab:
4c:8c:ec:f8:9a:5c:64:9d:a7:9b:db:81:81:4d:dd:
e6:32:ea:22:bf:ce:b1:57:5c:c8:2f:8e:4c:46:44:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:3D:24:90:85:47:F6:5D:E9:37:C6:B4:C9:34:28:CB:4C:C9:97
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:93:ca:67:9c:70:a3:7c:ee:5f:2e:22:86:27:9c:cc:5d:fe:
d4:dd:e5:21:8f:7f:97:d8:2d:e5:90:b5:95:d5:9b:68:b8:e2:
09:90:5d:25:8e:b3:34:f6:eb:66:39:5f:5a:22:0e:13:a3:b2:
d0:65:35:fb:fe:01:47:7d:af:aa:9d:37:7a:a2:b0:bd:24:61:
47:6c:c7:d8:ab:7c:06:ec:3a:a8:8e:6e:4f:ba:fe:6f:30:d7:
ae:08:de:dc:12:8c:91:ad:f8:2f:9d:4a:45:d7:de:74:ad:f2:
27:37:b8:14:1d:fe:89:a6:35:ba:04:2b:27:c0:e1:f1:63:91:
8d:44:60:c6:8e:a1:d9:4e:a4:8d:a2:a9:b7:dc:27:32:35:03:
d5:df:b1:fa:56:b3:ce:a0:c1:0d:43:a6:c8:cc:a2:18:09:21:
00:bf:b1:3e:c3:31:8e:c0:04:83:ee:a6:e6:0d:83:2f:dd:ea:
98:b5:22:7d:fe:71:1b:2e:0b:c0:9a:6d:12:cb:a1:8e:75:93:
88:ae:52:a5:32:06:cd:17:9f:6c:0a:1d:a6:c7:26:4a:21:eb:
ed:84:e5:fa:42:66:dc:6c:dd:4b:2d:b6:cd:0a:b4:0d:a9:09:
c4:40:b7:4c:9e:98:bc:3b:b4:49:c0:75:cc:4b:b4:b1:ce:f5:
18:ae:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:57 2025 by rpki-client