Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.mft (raw, json)
Hash identifier: CT9F1KzaMtusO+B/RzCuyHoQPfkwcJ4sj7EpSjtyGh0=
Subject key identifier: E6:67:57:23:01:35:11:E8:C6:0E:C0:76:C5:8B:F7:86:A2:62:B0:A3
Authority key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Certificate issuer: /CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Certificate serial: 0199FAD839D369BE714FA3D61B003E9EB9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: 3vQJX1qiDpD0wMY9PTYA0PPaBPY.roa (hash: 9p9BvXjVY0nIdlxupAXb84lfifwZdaujC3Pou0+e2uY=)
2: b_sPm9w6L65HtH5wIYmTyRnxD7A.crl (hash: LdE1S1QzoBBQmbtHuJjM2GTUbmlSWMk1oNoZECH3vcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:39:d3:69:be:71:4f:a3:d6:1b:00:3e:9e:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=e6675723013511e8c60ec076c58bf786a262b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:43:b8:f8:77:b9:f4:d5:72:77:02:6d:95:
f7:c8:7d:12:05:aa:9c:95:98:13:1d:f6:eb:c4:f0:
da:63:0e:8e:c4:47:18:61:07:7d:98:3e:a9:b6:37:
8f:55:9f:be:1c:90:f3:e5:40:b7:55:9a:33:47:dc:
5d:16:b6:52:e7:17:09:25:64:58:74:6d:e8:0a:88:
e0:c9:72:e5:0e:38:7b:d4:1b:29:a2:d4:44:a8:f0:
9a:fe:87:d9:61:46:a4:5b:34:f3:c9:b0:0b:45:e4:
15:79:18:b1:47:98:ad:a5:30:ba:30:1d:6f:37:bd:
dc:1b:af:65:62:20:5a:7f:70:26:15:f8:82:60:7e:
df:87:09:4a:98:68:de:65:7a:c1:2c:67:65:5c:0e:
58:4c:09:16:78:94:50:da:27:f7:86:5e:1f:6e:33:
93:dc:61:43:c4:e7:a3:d9:ed:88:f1:36:ac:ba:f5:
36:09:92:cb:0c:95:27:e8:8b:f0:c2:e8:cd:78:19:
00:09:fb:f8:16:e0:41:da:4b:de:0c:e8:b4:16:fd:
06:17:28:b6:bf:a9:f0:b4:c3:dc:62:9e:5b:17:c4:
ee:38:0c:81:ab:5c:7c:f4:a5:63:46:84:3f:52:6c:
5c:dc:71:a3:43:d4:74:01:80:97:97:98:a1:be:7b:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:67:57:23:01:35:11:E8:C6:0E:C0:76:C5:8B:F7:86:A2:62:B0:A3
X509v3 Authority Key Identifier:
keyid:6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f4:01:e1:fb:c2:02:a0:e6:1e:2e:82:a9:c4:df:da:d4:20:
d0:8a:b9:40:52:a5:99:4e:f1:38:04:f7:98:ad:14:4b:3f:65:
4e:96:33:d9:97:7e:37:17:8c:e7:d2:ef:c3:d8:06:6b:fa:b9:
61:33:ed:5e:99:65:7b:7f:bb:80:b2:fb:dd:39:9e:45:75:fd:
cb:4e:5d:11:d9:83:fa:9f:eb:20:07:d2:07:0a:45:3b:8c:3a:
d7:c8:4b:69:32:a8:dc:5f:65:f1:53:81:d6:9d:bf:83:d9:72:
0a:bf:c0:80:bb:9d:90:27:0c:64:d9:61:6b:3b:e6:12:8f:99:
ea:0f:ae:38:be:eb:5f:97:e1:ec:a3:8e:83:3a:4d:43:fe:75:
74:b9:27:de:8f:aa:bd:86:e1:90:65:7a:98:03:05:e1:24:a1:
f5:9f:45:f3:0e:ef:97:eb:fe:87:13:74:44:22:c6:4e:75:22:
9b:c0:d8:0c:3e:64:fc:44:57:da:c9:0e:a3:73:5a:1d:7b:5b:
7b:5a:bd:8e:97:6d:6b:61:aa:e1:96:ff:93:4a:c2:07:11:e9:
87:f1:55:e2:3c:a2:93:94:35:1a:7e:28:c2:34:e4:99:83:0e:
75:07:24:43:e4:c5:2d:15:d6:87:25:7c:d1:7c:fc:f7:62:2a:
8a:3e:02:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:22 2025 by rpki-client