Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: q5SGSfi8rs42OXvW+XTelcvWk5NYrDV6VggeCLpVfSQ=
Subject key identifier: E8:38:CE:09:19:1E:E2:8E:A4:F7:8A:CC:AF:09:8B:82:A0:64:92:F9
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019A01114342B3E9DDE0E556B0FF1E036A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 10:01:39 +0000
Manifest this update: Mon 20 Oct 2025 10:01:39 +0000
Manifest next update: Tue 21 Oct 2025 10:01:39 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: tGD94bIW7cw+kOrsENNTm5wdB0/8bYrjSWqXaCnx7rk=)
2: PiTVhjB-2LglvZMIT8kTcFEKBGQ.roa (hash: V1xaGbhkRK3S/8QPJON1VnScgqsWPteHvVSSGwPJ+xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:43:42:b3:e9:dd:e0:e5:56:b0:ff:1e:03:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Oct 20 10:01:39 2025 GMT
Not After : Oct 21 10:01:39 2025 GMT
Subject: CN=e838ce09191ee28ea4f78accaf098b82a06492f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3e:a4:de:82:b1:9b:ef:4b:06:63:09:13:85:
4e:36:de:c1:97:bf:ce:97:f1:97:56:f7:3a:bf:f9:
28:7a:db:df:1c:fa:4d:19:c1:c7:64:06:f4:19:ff:
06:46:2c:e1:60:d0:2c:47:9e:e2:3b:04:05:a8:c1:
51:16:fd:4a:56:fc:9d:4f:13:e4:15:ba:aa:a2:61:
2e:d1:18:aa:b4:3c:f8:f6:09:93:33:5e:3e:d0:4a:
35:fd:2c:97:83:5a:2f:0b:87:c2:63:61:94:c7:c2:
38:75:67:1d:c7:89:94:96:3e:c1:66:b6:d3:a8:4c:
b6:1b:ef:68:b4:74:d8:fc:47:b9:07:d3:a4:bb:60:
00:90:90:ff:cc:58:f6:30:98:f1:31:dc:6c:df:4c:
a0:d2:3e:e6:e9:e6:f0:ff:47:38:79:06:5d:6d:70:
d6:07:8d:d4:45:cc:bd:e3:96:d0:fa:fe:77:17:6f:
d4:7b:1a:cf:77:5e:e7:fb:94:b7:fc:26:74:f3:44:
c1:c8:a4:65:b9:58:42:b8:c5:99:ed:78:26:5a:f1:
73:a6:d0:e4:7f:dc:0d:c2:cc:ea:f1:59:8c:4d:77:
02:21:ab:81:3c:f3:d6:b2:53:6d:bb:67:b4:6e:87:
22:7d:48:cb:6d:09:70:9c:61:20:fc:a7:f1:50:e8:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:38:CE:09:19:1E:E2:8E:A4:F7:8A:CC:AF:09:8B:82:A0:64:92:F9
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:38:8d:7c:b8:34:54:58:1c:46:a3:f6:4a:73:76:e1:d9:bf:
b1:db:82:0b:56:e4:f3:b2:2c:b6:c5:45:7f:dd:74:66:52:7a:
8b:a6:61:8a:03:8c:2e:5a:8f:2f:e1:ae:a5:dd:3c:9d:f5:5b:
29:40:3a:a9:59:54:a6:25:0b:0d:11:e7:19:5c:49:a7:bf:f2:
1a:22:f1:ec:f1:fa:78:d0:c2:40:b5:46:cd:7a:a7:3f:c1:c1:
7f:15:ac:70:46:93:24:90:b8:ac:cc:7c:a9:a3:75:3c:85:48:
df:81:f7:33:f6:4d:ac:24:b1:22:c3:96:aa:ca:b0:fb:15:2c:
a2:5d:58:bf:c7:f8:24:f9:09:af:1d:6e:6c:60:55:d0:df:6c:
21:c8:07:ae:99:46:79:f0:96:8f:50:e1:92:c2:b4:b9:9a:2b:
7f:b9:cc:b1:18:55:60:e5:6d:59:27:bc:e8:fd:f1:75:63:cb:
e2:ad:5e:34:59:a5:ea:78:53:47:99:11:0b:2c:e0:32:bf:d0:
c2:d7:24:08:72:d2:e5:fe:ef:0b:10:a4:ce:ae:10:50:1b:ad:
b1:07:55:4d:09:a4:c9:4e:f6:98:42:da:2d:90:0e:2b:96:bb:
59:3c:d0:e9:f5:9b:17:18:1c:fe:9c:ef:39:73:8d:e1:76:3c:
95:2e:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:44 2025 by rpki-client