Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: g5tXARn7NcVFgH7h8+9ivYGHCrCZA/Hu/fiN1PGRX+E=
Subject key identifier: B0:FD:6F:4D:C2:37:F4:52:52:1D:35:DA:55:AF:18:9B:47:F5:E2:A4
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0199FBEBC08EF5F40546957471B24C1270BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: 9g5YNUA+KK30ohlxNLygrUdmTtasLoh+cJkyPc6c3ys=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:8e:f5:f4:05:46:95:74:71:b2:4c:12:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=b0fd6f4dc237f452521d35da55af189b47f5e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e0:61:e3:a0:a4:0c:3c:df:6c:32:4d:be:a2:
6a:48:80:83:65:d3:0b:f0:38:73:8c:75:0a:71:8a:
25:62:65:70:f9:b8:16:1a:35:30:70:1d:56:89:cb:
ab:27:f6:7a:ed:c2:b8:c4:3f:b9:09:93:af:05:d3:
2a:fc:2f:83:de:64:ff:de:e5:91:3b:16:db:51:bb:
31:a3:04:7b:5e:8e:94:c6:ad:24:3e:4e:dc:1f:a2:
ea:3d:f3:4f:d6:bf:71:a1:76:81:13:1c:8b:ca:80:
42:6c:7e:c0:a1:ef:5f:69:22:3e:d7:93:cb:a7:12:
97:6f:4d:df:94:51:d6:1f:82:22:0e:b7:d7:10:f0:
3e:37:f9:05:29:e6:dd:cf:e1:34:75:af:13:36:25:
bb:28:51:53:f7:34:37:21:4c:be:9f:3a:55:14:f8:
b5:c8:a8:36:90:84:f9:3a:da:fe:a3:05:00:f3:65:
3e:ff:3b:6d:f2:f2:a8:75:02:02:bb:78:b3:3d:45:
33:b5:61:67:68:4a:87:97:2c:1d:94:86:2a:12:ca:
95:36:11:67:ac:10:19:73:db:72:da:cc:d9:0c:95:
b5:1f:91:4e:c2:87:a4:33:a2:37:c5:3a:b2:fc:35:
18:1a:55:e6:ec:8f:40:66:05:7f:fa:8e:5f:00:a7:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:6F:4D:C2:37:F4:52:52:1D:35:DA:55:AF:18:9B:47:F5:E2:A4
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1f:8c:db:df:02:77:d1:8a:9a:44:64:ca:a8:cc:ae:81:5e:
37:e8:e1:b4:25:f7:05:c4:e6:00:cf:67:dc:fe:e3:ce:59:99:
9d:17:7b:4e:3b:1e:df:67:88:21:ba:78:f8:46:85:9f:0c:20:
a1:da:2c:d6:05:0a:03:2e:da:17:05:97:dd:13:cf:32:e7:d3:
2e:28:de:07:11:49:4d:26:cf:23:2d:20:f2:f2:e5:ad:10:86:
5b:c6:4c:ad:4f:6e:5d:1a:4c:95:ad:c2:4d:69:b6:3e:4e:0b:
f1:5c:bb:fc:23:a9:f0:0d:98:bd:06:65:29:75:ca:b0:a1:67:
d2:a7:86:ea:bc:d4:14:fe:b3:9d:b3:62:18:dd:9f:e1:bb:a9:
60:35:5f:2c:19:5c:a9:08:aa:ae:f3:2a:a8:a4:9a:40:5d:38:
d7:30:8d:1a:e3:fe:80:ac:ca:32:43:2e:5d:0a:26:3f:19:69:
d6:e7:ca:70:a9:f9:6c:20:4f:e0:95:51:9a:0d:10:88:3f:38:
a4:8c:74:7a:ea:07:6e:be:75:d7:06:cf:f1:3b:19:0e:fd:68:
23:8a:00:4a:a2:aa:7a:4e:ee:20:20:06:d4:49:de:24:23:1a:
d7:88:e3:9b:c5:c4:0c:de:4b:e0:f1:3a:17:a3:02:d2:4f:95:
6f:e1:30:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:23 2025 by rpki-client