Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: vNrqirOKZZ/kC4wUGgYVXfidGiLtcyWbyf1pAANWqVI=
Subject key identifier: 11:7A:4E:CB:58:30:F5:47:DB:B5:CB:F9:FE:56:5B:58:14:CC:0B:2F
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 0199FBEB37C7463D205995A0CFC95486211F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 8s5jlmVuyTPiRv4H9BvQU42g7nw.roa (hash: Ucu3y8/kR6J85jmowJDRLpHtgn2LtVqQioF1Y1wmZq4=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: x9BYGGAHCQDk1BAxJ1k0iGU8ERVeNdU7Rc+XQ5JW4wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:37:c7:46:3d:20:59:95:a0:cf:c9:54:86:21:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=117a4ecb5830f547dbb5cbf9fe565b5814cc0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:1e:d1:95:f4:fd:c0:82:fa:ef:31:4d:21:
6a:72:d3:20:66:e2:51:48:7b:d2:c0:f7:01:9d:1b:
83:31:54:b4:58:30:72:d6:b8:39:b2:66:cc:c6:32:
93:d7:71:bd:01:95:55:9d:75:b1:09:a1:a0:f1:b3:
84:36:1b:0e:11:06:5c:18:67:78:8d:5b:64:2e:bd:
b2:5d:74:87:8c:b7:8e:a8:2c:a4:58:6f:57:ff:12:
66:57:82:ef:4f:c3:0b:1d:1b:b2:c3:03:ff:0b:1c:
f1:22:27:d5:13:0d:9e:98:8e:cc:a7:38:17:bc:d3:
1e:ad:c0:02:ae:8d:67:fb:d4:41:1a:0e:b9:1f:9a:
4c:6c:99:1f:02:21:46:97:78:70:73:e3:14:9e:99:
5c:e8:89:7e:77:66:77:63:76:cd:38:67:c4:0b:43:
4f:ed:47:3c:ca:ae:21:e8:95:be:e7:f2:43:de:3a:
a6:8c:12:8c:78:86:42:c4:89:63:b1:5e:1a:63:4d:
37:5d:d3:b5:87:ac:1e:5e:62:d0:57:9d:e5:94:f3:
95:e2:24:70:89:26:8b:74:45:6f:ac:e0:e7:2a:4f:
6c:67:db:ef:76:f6:28:bb:d1:42:8e:53:f4:24:3e:
a2:b0:92:9c:f4:4d:64:7e:1e:bc:50:07:12:31:53:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:4E:CB:58:30:F5:47:DB:B5:CB:F9:FE:56:5B:58:14:CC:0B:2F
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:ed:12:93:2e:ad:9f:66:ef:b2:5e:0e:33:90:34:57:e2:
14:fb:68:d4:4f:d6:98:ff:fa:54:0c:5e:b5:c0:b3:7e:56:8b:
91:5b:ab:95:8b:64:d7:c4:a4:c6:d2:38:03:f4:5f:56:5e:fa:
a5:99:d6:b1:69:f6:f1:cf:6e:3b:42:ea:31:a1:5a:55:f0:1e:
82:76:c2:5c:80:06:c8:15:01:f1:24:96:bc:7f:7d:aa:d8:aa:
b2:63:db:de:2d:76:03:e5:dc:8a:72:38:04:71:90:38:f3:98:
d6:74:43:e1:cf:de:47:f8:9b:69:f3:de:a7:0f:f4:d7:61:81:
56:3c:dc:68:cc:23:86:81:f2:ee:ad:0e:e9:5d:04:a2:4d:56:
e9:97:74:00:b2:2d:d1:81:a0:d7:e3:0a:26:8b:d5:a3:83:22:
a1:52:a6:f7:f7:c5:01:3f:ca:39:80:b9:12:e8:8c:f3:a0:0c:
92:2d:f1:9e:d1:fa:ab:8f:f7:02:07:b5:79:ea:9c:a5:0d:1a:
1c:d3:be:23:00:5d:c8:59:14:57:e9:1a:ec:29:40:92:6d:cf:
49:7c:b8:ac:83:05:f3:b5:44:f4:d6:79:70:09:5a:e8:81:11:
49:13:7a:37:bd:7e:de:23:7f:20:46:1d:2a:4d:20:bb:45:62:
89:d2:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:16 2025 by rpki-client