Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: 8gQb390c6Z5UcfN981+AYRs0aqIIXUoTFhlz6DwGM0E=
Subject key identifier: AF:E5:9E:AF:9E:6C:C7:E3:CC:F8:1D:8B:50:CD:2C:4B:DA:5B:AF:78
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 019A0147D51F48E74819EDD82C5C88629BDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 11:01:16 +0000
Manifest this update: Mon 20 Oct 2025 11:01:16 +0000
Manifest next update: Tue 21 Oct 2025 11:01:16 +0000
Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: u/ZWfw76Cnf0tFh2QuzwzosAMdMRq3XHqQCOLcApDfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:d5:1f:48:e7:48:19:ed:d8:2c:5c:88:62:9b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Oct 20 11:01:16 2025 GMT
Not After : Oct 21 11:01:16 2025 GMT
Subject: CN=afe59eaf9e6cc7e3ccf81d8b50cd2c4bda5baf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:96:78:c5:c4:42:05:21:76:60:63:e3:d8:
70:44:22:32:21:b4:fa:3e:c5:57:3c:d6:9b:c8:9a:
0e:22:e8:d9:b5:72:a9:c5:71:f8:6b:17:a1:3c:f7:
47:92:c4:e7:dc:da:12:3a:88:9d:b9:5e:cd:e6:3c:
f2:d6:84:1f:25:5e:93:06:66:81:b6:90:5d:57:f6:
53:9e:6d:1e:45:99:9a:f8:7e:2b:38:30:1b:d8:24:
c5:48:26:23:d6:46:f2:b0:6e:c0:3a:50:a7:e7:22:
c7:05:30:d4:83:6d:a9:01:c0:24:12:d9:5b:2a:49:
57:d2:71:d8:97:60:5e:18:76:9f:d6:b1:fe:6d:4c:
20:f5:96:86:1e:b8:a5:c0:ee:60:e2:03:c3:45:ea:
54:94:2a:a3:7d:f2:47:03:17:86:3c:40:95:bb:15:
84:5e:ad:b5:8c:5e:93:3b:51:52:a9:51:d2:40:4c:
90:4f:f6:7e:20:a7:33:06:14:00:18:de:fc:df:d2:
12:7b:90:9e:b8:d1:61:71:28:79:ca:86:57:cc:ae:
6f:2c:4f:6e:8f:c5:1d:a5:fb:0a:68:51:b0:15:86:
b2:3e:f5:7f:3d:13:d2:0d:03:bb:03:ce:a6:39:e7:
35:7f:aa:f2:f9:d1:46:66:97:7b:7e:ce:c7:02:91:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:9E:AF:9E:6C:C7:E3:CC:F8:1D:8B:50:CD:2C:4B:DA:5B:AF:78
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b1:fd:ce:5d:ad:7f:19:55:d4:0d:ec:23:96:f6:74:37:2b:
cb:84:e2:86:cb:76:53:4c:d4:a0:3a:67:41:f6:3c:8a:a8:5c:
41:1d:e3:de:de:44:48:c2:78:48:81:73:35:b3:59:98:b8:25:
3b:7f:b1:bf:1a:e9:90:63:aa:05:c0:df:98:e4:2c:d5:b4:42:
d0:84:bb:ca:c3:2d:3a:ae:65:4e:fd:c7:31:14:54:00:4d:1e:
f8:40:88:86:08:da:75:bd:3e:24:ad:86:2b:fd:eb:6b:a0:73:
b5:32:37:b4:34:68:8d:03:7c:83:f4:6a:77:ee:38:1c:18:71:
a1:03:33:e5:c1:d1:26:c7:09:fd:b3:66:0f:e2:78:8b:ba:dd:
b0:00:81:a8:2c:bf:a3:6b:eb:a2:18:b5:10:f5:05:64:f0:7f:
8e:b3:b6:b4:9a:30:7e:9d:cf:74:cc:03:cf:da:b4:b1:fe:5c:
b2:9e:58:19:bb:68:29:b6:0a:b8:8b:57:7d:f1:58:32:6f:f2:
05:59:d0:e1:9b:84:f8:81:7a:9f:de:76:7f:20:56:7e:80:cd:
8f:b9:c7:93:9e:85:f7:89:07:aa:1b:c5:9b:62:92:07:10:2c:
90:ba:fb:b9:5e:ce:6b:6f:32:47:97:95:4e:8a:08:83:e6:a9:
f0:b7:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:22:57 2025 by rpki-client