
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: l8RFdV9HFmqt52A/wLvIE0wfWKw0VwID2xeJ+pKJiKU=
Subject key identifier: C5:8F:CE:78:18:35:8E:72:6E:69:BC:8E:EA:02:3A:B9:7D:8E:C4:C8
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 0199FBEC6A4F41377587318CB5E6690C8AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:03:18 +0000
Manifest this update: Sun 19 Oct 2025 10:03:18 +0000
Manifest next update: Mon 20 Oct 2025 10:03:18 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: CktS9TXAjbbWvmywXEYFlSu+otdEZAMcr+3KqIzKH70=)
2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:6a:4f:41:37:75:87:31:8c:b5:e6:69:0c:8a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Oct 19 10:03:18 2025 GMT
Not After : Oct 20 10:03:18 2025 GMT
Subject: CN=c58fce7818358e726e69bc8eea023ab97d8ec4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:4d:3d:cc:ab:2b:31:0c:5a:a4:10:b2:f7:
8b:9c:a5:d3:2a:04:da:53:b1:4f:e6:f2:e6:aa:61:
bc:25:ff:0e:b6:a7:d4:d1:2b:2e:d6:17:72:29:3f:
a6:23:ac:04:22:3a:9a:c9:4c:2f:d4:ee:e5:02:29:
da:99:a6:88:f8:e0:7d:7f:fd:89:70:06:0d:57:71:
40:f9:df:85:68:cc:fd:4a:4d:b3:4e:eb:ff:82:5e:
4e:c7:f5:1b:c7:61:65:64:6c:f3:26:72:72:1c:bc:
48:c4:39:6b:46:3c:5e:fd:a1:75:80:ae:38:9e:27:
68:ee:0f:c9:42:5a:c1:7e:3f:55:1c:9a:1e:7d:7f:
fe:cf:0f:84:5b:ba:bb:15:4a:31:7b:e5:d2:d0:40:
78:23:ca:d3:74:8e:d9:62:84:e1:2e:b8:86:25:eb:
15:fb:77:8b:39:7f:0c:41:2d:a9:92:f8:ed:5a:c1:
79:e8:dd:6b:d4:b6:16:2c:0d:b4:8f:96:f4:22:53:
8f:ce:5e:7b:e4:a6:8f:84:fb:86:bf:bc:fa:73:3b:
5c:8a:4a:40:9e:5b:1b:51:24:6a:55:1d:c9:d7:90:
c0:8d:fd:38:d0:13:e4:a2:d8:2f:de:33:74:f9:48:
11:fa:68:45:c8:05:2e:a4:00:64:66:7d:bd:9e:f7:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8F:CE:78:18:35:8E:72:6E:69:BC:8E:EA:02:3A:B9:7D:8E:C4:C8
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c5:4a:4c:92:6b:9c:97:01:f7:2b:4c:8d:65:18:1d:bf:ca:
43:43:63:2e:17:74:1a:dd:75:0c:eb:18:e7:85:41:74:eb:bc:
0f:6e:cb:df:09:e8:d6:e8:87:f0:08:31:11:c9:17:9b:f1:e6:
6d:e5:ec:a5:6f:79:61:c9:41:56:54:18:a7:45:e8:da:b6:ca:
d0:f6:ab:1d:6b:2f:b7:9d:fb:ae:3d:5f:44:e8:e8:03:2d:39:
5f:d7:ff:ce:93:ca:66:54:f9:aa:50:dd:1b:f5:f6:9b:8d:62:
61:9f:2c:d2:3d:a5:c4:02:ce:4e:2a:b6:32:90:2c:07:39:e5:
03:0a:c0:e5:44:93:7e:36:85:d2:4b:3a:8a:4f:bb:1f:2c:97:
32:41:7a:21:12:d9:6f:1d:5f:8f:25:10:15:5d:d9:8e:65:dc:
c1:fa:00:93:e6:55:25:7c:e7:0d:5f:cc:a7:53:49:37:12:e0:
00:ce:fc:5a:b2:77:36:fe:ec:bd:f9:30:50:47:b0:a0:c4:5e:
0c:de:44:b7:e3:54:2c:4a:cd:47:6a:72:a0:1a:79:ba:53:76:
20:77:77:74:5d:d3:1a:56:fc:e4:f4:d1:8c:0a:48:76:5b:b4:
77:65:cb:78:6f:49:2d:64:13:bf:0f:fa:40:7c:b4:71:95:ab:
53:bc:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:34 2025 by rpki-client