Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File: b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier: qFv8fN4v4sCCTt6k1wJRDugYFG4oYuCWKX1TAogSyEk=
Subject key identifier: FF:43:2A:1F:D0:F3:FC:E8:E6:D6:80:0E:2F:FD:A0:5D:7C:5B:9D:F4
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer: /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial: 0199FC591581BB61355BD66955753719E36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:02:00 +0000
Manifest this update: Sun 19 Oct 2025 12:02:00 +0000
Manifest next update: Mon 20 Oct 2025 12:02:00 +0000
Files and hashes: 1: 8DoxxFomKD_zymJ7maQao4Dgi38.roa (hash: AGu4l/EpDaIWVAApJov5+PsDhMXLA5NiuSkK6swCSP4=)
2: GgF2VUQVgZHdiRVSGdZfQ62lDlI.roa (hash: pE2Dj5yrvDRhlXyXHQIl24tLKcXekRo8xAVslPDVPZ0=)
3: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: GNe3tCBOp6LtUCpcDe8BjeybZcLHTayv3Jnpjb4rO+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:15:81:bb:61:35:5b:d6:69:55:75:37:19:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Validity
Not Before: Oct 19 12:02:00 2025 GMT
Not After : Oct 20 12:02:00 2025 GMT
Subject: CN=ff432a1fd0f3fce8e6d6800e2ffda05d7c5b9df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cf:f6:0c:6c:26:a5:cc:7c:eb:f2:28:34:e0:
74:96:ee:4d:15:b6:20:3a:d9:cc:76:1a:57:5f:61:
d7:f4:e4:95:ad:78:62:ae:8a:07:72:c7:b0:3c:a4:
f3:47:38:a3:e2:c1:f3:fd:40:8c:3c:eb:2f:e9:8d:
2d:7b:c7:e8:b4:b1:5a:a7:32:8d:c7:8d:0d:3e:d9:
41:08:5b:ac:0f:1a:16:dd:0f:f2:3f:78:29:73:b9:
3f:8c:44:28:ce:43:fd:4c:5b:bb:91:b2:02:e7:03:
ed:43:77:5a:08:dd:e9:04:4d:ef:3b:b6:2a:1d:11:
cb:ed:c3:1f:cc:e1:da:d1:af:be:9a:9d:b7:46:ee:
78:fd:ba:cb:c4:05:07:af:75:b3:53:49:45:79:86:
7b:d8:8f:82:ba:e3:9e:13:24:eb:c0:c7:e3:6d:f4:
41:c7:19:66:a6:54:dc:00:5c:6a:03:94:7b:ec:74:
28:7e:03:1a:54:81:0a:65:0e:5c:7d:81:89:4c:0b:
b4:6f:cb:87:9b:66:4f:65:15:a1:c7:92:fb:e9:2d:
d3:2b:37:72:b4:74:f1:a3:17:26:dc:dc:c4:3c:8a:
28:ea:64:0c:ea:fe:8c:24:bd:0c:a4:ec:77:1f:94:
04:8b:d7:82:18:7b:75:90:75:de:65:47:ea:b6:be:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:2A:1F:D0:F3:FC:E8:E6:D6:80:0E:2F:FD:A0:5D:7C:5B:9D:F4
X509v3 Authority Key Identifier:
keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:de:dd:29:48:54:fd:c2:80:3d:21:f6:21:9d:76:04:62:
b7:07:d2:9e:a8:2d:ea:5f:9c:98:58:ed:72:21:36:90:3e:b5:
90:38:dd:0e:33:4a:c5:f4:a4:94:25:cb:e7:82:0c:9c:c2:49:
41:bb:5f:93:6b:10:1a:c4:cf:50:14:3d:85:c4:01:70:80:0e:
0f:d6:ef:c3:bf:ef:53:94:6c:83:e0:52:67:2c:32:ea:e6:5c:
01:58:56:2d:9d:ce:91:07:34:ac:3e:ad:ef:99:ed:58:f3:d1:
7e:98:5b:b0:ab:fb:a6:b2:fc:43:22:7f:67:cf:32:b2:84:7c:
22:03:a8:ca:d1:3f:ce:18:f9:e7:a0:61:0a:fb:aa:b9:82:0f:
5b:fe:bd:3f:21:d9:4a:4b:e1:52:55:61:21:d5:53:0e:e2:60:
1b:c3:06:a1:ee:b8:94:d3:77:0b:e0:64:62:23:7c:7d:6a:aa:
99:ac:80:47:94:d0:ab:ba:2c:68:05:73:9f:d3:46:f9:2d:49:
04:a7:58:cd:cb:ce:4b:6d:3f:d0:f1:9c:d9:82:39:6b:2c:9b:
e6:8b:bd:2d:ce:e8:6b:51:03:23:af:28:32:40:78:65:59:94:
b2:4e:f1:6b:d8:45:63:0a:b9:18:8e:4f:00:84:14:c2:4c:ea:
df:49:15:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WRWBu2E1W9ZpVXU3GeNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWRlOWY5ZGJiZDQ2MTg4NTdiNTgxMDVjNjc0MzcyMGEx
MWJjNmUwHhcNMjUxMDE5MTIwMjAwWhcNMjUxMDIwMTIwMjAwWjAzMTEwLwYDVQQD
EyhmZjQzMmExZmQwZjNmY2U4ZTZkNjgwMGUyZmZkYTA1ZDdjNWI5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM/2DGwmpcx86/IoNOB0lu5NFbYg
OtnMdhpXX2HX9OSVrXhirooHcsewPKTzRzij4sHz/UCMPOsv6Y0te8fotLFapzKN
x40NPtlBCFusDxoW3Q/yP3gpc7k/jEQozkP9TFu7kbIC5wPtQ3daCN3pBE3vO7Yq
HRHL7cMfzOHa0a++mp23Ru54/brLxAUHr3WzU0lFeYZ72I+CuuOeEyTrwMfjbfRB
xxlmplTcAFxqA5R77HQofgMaVIEKZQ5cfYGJTAu0b8uHm2ZPZRWhx5L76S3TKzdy
tHTxoxcm3NzEPIoo6mQM6v6MJL0MpOx3H5QEi9eCGHt1kHXeZUfqtr60TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9DKh/Q8/zo5taADi/9oF18W530MB8GA1UdIwQY
MBaAFG9d6fnbvUYYhXtYEFxnQ3IKEbxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTkt
YWUwNTc5NGM4ZTEzLzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82MWZjYjQtNTU3NC00ZTJlLWIyNTktYWUwNTc5NGM4ZTEz
LzEvYjEzcC1kdTlSaGlGZTFnUVhHZERjZ29Sdkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBne3SlI
VP3CgD0h9iGddgRitwfSnqgt6l+cmFjtciE2kD61kDjdDjNKxfSklCXL54IMnMJJ
Qbtfk2sQGsTPUBQ9hcQBcIAOD9bvw7/vU5Rsg+BSZywy6uZcAVhWLZ3OkQc0rD6t
75ntWPPRfphbsKv7prL8QyJ/Z88ysoR8IgOoytE/zhj556BhCvuquYIPW/69PyHZ
SkvhUlVhIdVTDuJgG8MGoe64lNN3C+BkYiN8fWqqmayAR5TQq7osaAVzn9NG+S1J
BKdYzcvOS20/0PGc2YI5ayyb5ou9Lc7oa1EDI68oMkB4ZVmUsk7xa9hFYwq5GI5P
AIQUwkzq30kVlg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:42 2025 by rpki-client