
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: qmn0YPttCJk1zBSbaIyz/FAabm3Dj+dKfZeNUlFExuA=
Subject key identifier: 39:A8:57:DA:3B:F4:11:AD:5A:5C:F5:05:B1:8B:DA:9B:BC:15:5F:AF
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 0199FE47762BCFBD4A23FF24F39DEF8F29C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:02:00 +0000
Manifest this update: Sun 19 Oct 2025 21:02:00 +0000
Manifest next update: Mon 20 Oct 2025 21:02:00 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: vPs8dQeesofOQcASSVwIpY9MzfHn76Rd14TmMzVnKbQ=)
2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:76:2b:cf:bd:4a:23:ff:24:f3:9d:ef:8f:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Oct 19 21:02:00 2025 GMT
Not After : Oct 20 21:02:00 2025 GMT
Subject: CN=39a857da3bf411ad5a5cf505b18bda9bbc155faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:36:02:d9:d3:63:c8:de:a7:1d:28:1a:c4:7b:
ec:18:ad:3f:1f:db:f9:7d:d6:44:75:17:bc:27:35:
9e:a4:2c:31:d1:26:84:4d:80:b1:3a:d4:3b:80:6c:
b2:98:b6:63:75:32:32:ca:0e:97:cc:d5:74:2d:17:
a9:14:ea:8a:1a:fe:69:37:86:77:de:2b:29:0c:ec:
1e:f5:f9:0f:99:d8:9a:7c:61:95:40:1f:93:0c:a7:
d4:15:f6:a9:f5:35:7b:6a:95:30:c8:c2:b5:a9:35:
d5:26:88:3b:b1:94:a9:fb:6c:06:63:4c:72:38:23:
63:e0:18:49:89:72:9d:d0:5d:c9:be:1b:52:fd:e1:
15:50:3f:a7:d8:d8:7b:b6:47:11:69:95:0f:4f:cb:
f8:39:4b:5a:d8:58:58:54:74:08:60:a7:ad:8c:29:
fb:a4:22:ad:f2:a9:f9:3e:d0:1f:dc:1a:b0:d9:c8:
06:5f:4a:ca:34:7a:53:7a:6a:44:c5:b9:68:d7:53:
87:04:e9:2e:30:80:cd:0b:e5:c8:d9:74:bc:97:44:
54:0f:75:6e:00:30:1f:e9:7b:72:05:0b:5b:3a:41:
c8:96:12:8b:a0:2c:68:03:04:38:b3:47:04:10:fb:
ee:63:4d:ee:dd:2d:0e:c9:a8:70:bf:f1:bb:8c:55:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A8:57:DA:3B:F4:11:AD:5A:5C:F5:05:B1:8B:DA:9B:BC:15:5F:AF
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dd:85:3d:62:02:32:a9:12:c4:0e:b8:c0:31:2a:88:1f:33:
19:be:00:88:ef:41:9d:31:5d:c4:3b:8e:1c:f3:7f:ff:88:be:
3a:01:cb:c6:74:e4:18:d0:c4:71:ec:e1:66:1d:ca:dd:a0:c0:
1c:12:73:a9:29:59:0b:a7:3e:15:8d:bc:b9:72:53:19:c4:6d:
5c:0d:69:04:9b:b3:34:69:0c:7d:6a:ed:67:7e:3b:1c:f0:bf:
7f:94:42:8b:17:d3:2e:8b:0b:a4:24:9c:b6:d4:84:35:8c:06:
ba:8f:76:71:4e:72:6b:84:28:1a:87:96:7b:20:0f:bf:c5:33:
5c:a8:33:e3:57:f2:0f:da:44:81:1a:31:36:01:0e:19:d7:d4:
8c:4e:7c:7e:a9:83:ab:e8:ee:6d:f7:41:54:b0:55:61:c8:23:
75:35:6e:b4:f0:72:71:f7:0f:a2:1e:f7:62:4c:4e:40:65:d5:
6f:6f:c5:9a:95:b4:82:7a:e4:2f:2b:8f:95:ee:72:e2:72:16:
9f:97:b2:c7:4e:a7:26:fe:63:ce:c9:2b:d3:a8:bf:3a:37:01:
6f:1b:09:b0:34:81:74:24:25:a6:b5:a7:70:52:eb:d8:fc:17:
b8:2c:23:3c:ee:fb:d4:fb:0c:fb:c4:97:70:6c:99:63:5e:c2:
dc:30:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:13 2025 by rpki-client