Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: +Ecnnh8Y4MDc2jHy6TL4MUUMNA6nI9Yby3feN5LXIQ0=
Subject key identifier: E7:19:9E:E8:E8:EE:DF:30:D5:6E:AA:C5:AA:AB:E3:02:B2:03:1A:A8
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0199FC213AB3AEA72073581975D0857405DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: GjXiW26hWfRPSkPHw5Zu1ZUe2SxpPaSHagp9by4cXT4=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3a:b3:ae:a7:20:73:58:19:75:d0:85:74:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=e7199ee8e8eedf30d56eaac5aaabe302b2031aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:ce:96:41:40:9c:a1:28:4b:fd:21:06:46:
4c:25:87:1d:9f:ca:01:c2:7d:82:3d:fc:33:7c:dd:
01:7d:8b:d8:9e:6c:be:31:94:92:cb:e4:11:1b:de:
1d:1d:d4:f6:27:3e:1a:22:25:24:1e:8d:e0:77:38:
50:5e:11:5b:d4:20:38:74:6b:b2:26:cc:b1:85:44:
98:f0:20:54:d8:c8:ab:ee:56:a2:1d:f5:08:53:ab:
36:86:23:e3:33:bd:c1:25:a1:90:fa:e5:05:2c:d1:
74:22:9e:5c:9f:29:3d:b3:a1:49:2b:62:22:e0:90:
62:83:bb:f3:cf:62:00:58:9d:36:b7:15:3f:b8:cf:
2a:28:93:56:ef:0c:69:5d:ea:cf:d3:2b:e9:7a:0b:
64:7c:59:03:30:72:b4:fa:4f:0e:84:a1:77:41:10:
18:f1:d6:16:ce:40:ab:84:60:f1:44:2a:b0:0c:b3:
18:fa:8d:ca:4f:f6:a6:10:d4:b2:44:0b:84:5a:b7:
cd:ed:83:71:23:0f:66:e1:94:c5:33:21:d4:76:4e:
f2:5d:c9:f8:d9:57:a5:be:b8:aa:60:48:5a:ce:b5:
49:20:b2:c5:58:37:2b:4e:5f:de:57:00:48:8e:71:
47:f9:c7:8a:d8:30:5d:cb:28:78:74:89:c3:3b:a0:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:9E:E8:E8:EE:DF:30:D5:6E:AA:C5:AA:AB:E3:02:B2:03:1A:A8
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2a:10:6e:fb:cb:5e:72:16:57:d2:e1:90:e1:ab:67:08:fd:
02:d6:ef:4a:fc:b8:f0:89:81:6a:cd:bd:70:75:3e:50:f8:90:
0d:f0:24:68:b4:ad:bb:b2:41:79:62:fc:12:d8:95:fb:7b:f2:
f7:3d:cb:ff:33:bd:b1:6b:cd:3e:49:23:47:4f:07:4c:f5:ee:
69:3b:ca:6a:b4:a7:1e:63:5e:c9:37:2c:aa:49:00:4a:46:e3:
92:c9:20:e8:74:75:62:24:c4:00:e0:f7:42:93:ca:20:de:75:
3b:70:ae:25:b4:65:f4:96:c3:8e:1a:6f:8c:87:cc:9a:ff:c4:
83:99:b5:aa:29:1e:59:bb:20:24:1c:e5:1e:76:39:df:fb:36:
20:9f:20:8c:4c:90:82:94:e3:13:71:dd:f1:74:69:4d:97:03:
fc:61:b1:d6:37:24:19:b7:0b:11:78:c6:fa:2a:a2:95:cb:9a:
3d:57:46:94:30:5d:d3:c2:21:d7:0b:6f:d4:1e:ad:64:48:3f:
b0:a1:b5:c3:09:00:d9:e4:72:c8:25:47:55:f6:1a:82:a0:0d:
a4:c1:f8:9d:55:06:4e:9c:e1:e6:c0:f4:84:dc:f7:d4:18:6f:
d4:d9:2e:40:78:6f:bc:bf:8b:54:a0:65:b6:d0:ab:e8:77:70:
8b:22:79:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:30 2025 by rpki-client