Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: qWqGzzp5ZWionewr1ov5gqre47LVcAMneEp5ppOf3zQ=
Subject key identifier: B2:73:76:BB:90:6A:47:98:C3:86:B6:32:A0:AA:0F:E1:09:79:A9:E3
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 019A0035C5100D2C57D973C727BFBF5EE15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 06:01:54 +0000
Manifest this update: Mon 20 Oct 2025 06:01:54 +0000
Manifest next update: Tue 21 Oct 2025 06:01:54 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: mrUG4U3DUj4a3C8Zn2/2b5cM9W+cQAv7H1+Sa0LHOyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c5:10:0d:2c:57:d9:73:c7:27:bf:bf:5e:e1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Oct 20 06:01:54 2025 GMT
Not After : Oct 21 06:01:54 2025 GMT
Subject: CN=b27376bb906a4798c386b632a0aa0fe10979a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:62:df:3c:2f:b9:1a:11:9e:06:0c:3b:ed:
25:0e:25:54:d5:d8:bb:9a:b7:04:11:20:b7:df:fd:
a1:3e:b3:b8:c0:ea:21:84:d8:ef:b3:65:b8:cf:03:
91:63:9f:25:71:15:f1:db:b7:28:f6:88:82:17:03:
82:a1:c7:0c:fe:97:a2:ae:cd:8f:f6:85:76:46:83:
9d:97:c8:55:1a:86:5c:c5:5d:2e:4a:4a:9b:70:19:
94:c9:f4:43:c3:7b:68:40:62:c2:d7:d5:f6:07:4d:
f7:24:61:1a:4a:37:88:1d:11:85:a8:7d:38:a5:7b:
f7:ab:02:8f:d0:aa:50:51:0d:95:39:4a:4d:5c:67:
81:1d:4a:c9:cc:df:75:68:45:62:e2:35:de:44:9c:
cd:1f:c7:74:98:f5:16:3b:61:ee:c1:36:7e:b7:e5:
c9:26:78:16:d3:8d:2d:08:19:61:d2:86:b7:51:f5:
68:19:8b:ae:97:2a:fb:e1:b5:93:5f:89:17:b4:99:
15:a2:91:44:bc:b9:13:97:23:ff:36:22:0b:45:43:
68:6c:c4:b6:af:32:20:d6:93:00:5c:26:b4:0d:c5:
b9:53:83:d2:a6:dc:cf:66:38:92:9a:81:14:d2:13:
da:73:13:7d:79:ef:25:d0:1d:54:3c:c0:9b:03:61:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:76:BB:90:6A:47:98:C3:86:B6:32:A0:AA:0F:E1:09:79:A9:E3
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:09:a9:61:e1:a3:56:26:c6:9f:c4:37:ae:a5:ad:50:ed:
17:c8:29:d1:c1:28:f2:16:11:2f:82:8d:51:ab:b5:41:11:fb:
d1:ee:c9:82:f9:bc:97:89:d9:61:e6:17:0b:b6:9a:94:fa:4a:
5e:02:e6:07:32:52:f7:6f:95:d2:d8:c9:49:f6:00:0e:3d:a7:
5d:fc:77:d1:e4:67:6e:ba:c2:d5:06:e2:26:bf:68:d5:eb:d3:
69:8a:16:06:14:1a:a1:83:55:c1:8f:ad:65:7b:f6:8d:97:1d:
f3:e8:db:4d:c6:fb:8f:82:01:99:f8:4d:37:bb:ed:a5:e4:6d:
97:e5:22:2a:da:8a:b7:e7:07:ad:7a:57:4d:46:50:0f:19:b8:
c4:77:e8:e3:df:05:0a:b2:44:8b:0c:04:6c:ec:78:f2:48:a4:
10:a9:5e:cd:bb:8d:80:9d:97:b8:29:63:dd:38:07:0b:27:59:
87:a5:db:f3:e8:a8:77:c5:cf:00:49:6a:a5:b3:19:e8:8c:00:
24:d4:23:8f:32:7b:33:65:b6:bc:ca:7d:a9:e6:1c:ce:40:c5:
05:33:8b:82:8a:82:0c:8e:e1:4f:f4:b5:3c:06:44:de:44:5b:
af:bb:b9:43:d6:b5:4d:38:1f:67:c5:77:2b:1b:2e:ea:41:ae:
73:7d:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:16 2025 by rpki-client