Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: RxTfuoWHEjuB6carSHeAOdjZwfF+q1+em/Hv339wRf4=
Subject key identifier: 7E:33:01:9E:4A:7D:C0:D7:DF:D1:12:8B:35:25:C1:3E:D0:19:5D:EE
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0199FDDA4D489B59078AA967A2C5F5C3F07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: t0auegpMH5Iqp9j9I2DgfEng5V0DLPCUs5YNF++eXHY=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:4d:48:9b:59:07:8a:a9:67:a2:c5:f5:c3:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=7e33019e4a7dc0d7dfd1128b3525c13ed0195dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:a0:ed:b3:08:36:72:f4:de:28:19:fd:66:
3e:fa:03:27:9b:78:a3:8a:98:cc:42:80:9a:06:5a:
de:ae:08:d8:fd:8f:4b:a7:42:a5:de:52:69:d9:e7:
10:ca:fe:31:ca:f6:77:16:51:05:1a:43:e2:45:ca:
ce:94:7f:e0:24:3b:79:6c:44:cf:09:c8:44:03:7e:
97:0d:97:aa:e7:a9:3c:f7:74:bd:1d:44:2f:49:b0:
6c:ef:44:5d:44:76:89:a1:8e:32:41:0f:3d:5d:95:
04:86:8c:a5:38:60:7f:cd:79:92:0a:f3:1b:3e:af:
9c:a4:3d:76:21:a9:46:d6:93:c9:62:ed:f9:84:b2:
f6:ea:2e:1c:1a:18:68:d5:78:6d:95:55:25:c7:7d:
18:f6:d4:25:7f:c4:b6:ad:b6:f8:5c:7e:65:46:0e:
a7:5a:1e:a9:b0:93:bc:19:e0:bb:0f:7d:48:fb:f5:
8e:74:00:64:5c:5d:3d:0e:2b:20:d9:dc:f8:4b:1a:
11:4f:85:90:b3:ce:c3:3a:03:7a:7b:fe:85:65:23:
70:fc:47:49:60:f1:3f:93:11:ec:ef:c0:54:18:84:
c9:dd:51:98:16:17:bb:53:1d:56:aa:7a:1e:c5:8b:
54:4f:2b:a0:40:98:04:b7:87:40:30:f6:67:14:ee:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:01:9E:4A:7D:C0:D7:DF:D1:12:8B:35:25:C1:3E:D0:19:5D:EE
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c1:8a:36:73:c0:99:19:a2:01:bf:ae:d4:e6:0e:e0:44:ec:
5a:a2:0b:dc:8c:d4:b8:09:d2:77:59:bd:e9:66:e0:79:11:21:
b0:c6:9b:b8:a9:56:b3:c4:6c:e6:ed:ae:31:9b:a5:e2:bf:88:
63:d5:be:23:66:49:19:68:3e:5c:18:72:cc:54:06:cd:bf:36:
f4:98:89:44:ba:af:13:97:c8:0f:d2:f2:35:32:da:0d:a5:e6:
2e:62:e2:37:c2:e8:1d:60:ef:31:41:4f:c7:08:bd:3a:0c:56:
c9:93:b9:91:43:69:bf:31:ea:dd:ad:6e:0c:59:6e:25:ff:d1:
02:60:69:fa:f9:0c:38:12:37:f6:32:29:73:7c:4c:47:d0:ab:
22:96:40:d4:e0:9c:10:31:55:09:50:f0:53:9a:7f:24:9d:65:
72:ab:81:5f:a6:f2:11:ff:87:66:b4:cf:db:6c:83:42:45:e5:
cf:08:26:c9:75:01:b1:c9:1b:fc:34:3f:a8:5e:80:3c:52:08:
99:2a:c6:41:eb:44:01:92:f5:7c:2b:5a:08:c0:9e:ec:50:93:
6a:03:0f:ad:5b:97:73:b6:a0:79:73:e5:44:b1:a1:cb:ef:4b:
23:16:58:a6:6c:49:8b:13:80:36:4d:90:6e:43:49:4b:32:21:
12:fe:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:47 2025 by rpki-client