Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: 6VhuaNr/tP40mrwV+JHoV+TCd49LnQBPi/LymtN8Zqc=
Subject key identifier: 38:98:6C:4C:FA:64:99:BC:72:8A:A5:6A:B8:FC:4B:9C:B9:41:1C:82
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0199FBEBD72E45F8C18B34382B5BCC5C02DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: IsTCtVmTNyn-RD8cnFqGYXSoe0E.roa (hash: L2WChiXDdgP/OiZ7K6XF82266pxnvmteFE2BApkpXrw=)
2: nLB2qYSBJ1YFwwH2Uq3CWH-Xycw.roa (hash: DDaDM0x5+8q+LGF59JGSBz5quMqPXuHhZb7HpNUm6U8=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: uwUTAXhIbUe+dOMSIYUAI1ZaZEqft4l7xLTGbSOifhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d7:2e:45:f8:c1:8b:34:38:2b:5b:cc:5c:02:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=38986c4cfa6499bc728aa56ab8fc4b9cb9411c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:ad:db:13:f6:76:c9:f8:a4:fa:69:4b:db:
ad:a2:23:07:80:6f:a1:e4:62:c7:63:98:25:ac:bb:
4e:f3:a7:c1:0a:2b:ab:fb:ec:5d:d2:64:ae:f3:d0:
4d:66:fd:98:02:0c:84:ac:62:9a:d3:29:c5:d3:31:
6c:8a:f9:5e:cd:28:2c:8a:91:7c:bf:75:67:b0:bb:
a7:39:37:8b:62:c6:c5:9d:0a:e0:a4:f4:19:3b:64:
8b:16:aa:ed:1f:c9:25:c6:cf:bd:65:53:b8:d7:b8:
4e:91:50:50:a9:cd:3e:d9:9d:61:b7:ae:21:37:6b:
15:4f:0f:4e:85:8b:49:30:15:52:4f:27:ee:cc:0d:
00:67:fa:00:79:05:d4:66:65:67:50:27:c4:bb:10:
f3:0d:7a:98:ff:78:8f:0e:5e:82:85:32:1f:88:8d:
76:26:ad:58:e4:4f:a8:ec:cc:46:bd:e9:da:3c:22:
dc:9c:6a:9d:e5:f4:d2:cd:c4:a6:2c:9b:b3:99:92:
43:cf:52:eb:7a:bd:cb:50:9d:58:3e:fa:75:f1:0a:
68:fc:76:07:ed:da:57:64:fd:f5:df:f2:98:2c:3d:
3f:5c:8c:09:e7:fa:7a:83:de:fb:2a:6f:d8:e9:a8:
aa:85:16:12:ef:de:c4:2e:85:96:a0:e9:92:45:49:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:6C:4C:FA:64:99:BC:72:8A:A5:6A:B8:FC:4B:9C:B9:41:1C:82
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4b:b3:fc:6c:cf:50:f0:5a:0e:a5:01:7f:1d:d4:6c:18:7f:
fb:81:41:9c:ff:98:05:97:fb:48:a1:44:8e:b7:d5:71:28:14:
31:01:bc:ae:1e:64:63:0f:f1:9d:62:97:a3:f4:d5:72:59:dd:
c8:d9:19:b9:b9:d8:24:3f:39:c0:61:44:29:0e:34:61:be:83:
35:08:1c:aa:c6:09:94:b3:c6:df:62:15:3e:46:22:5a:ce:c9:
95:5f:d3:1b:b0:19:d5:33:ba:09:c7:2a:c7:c6:e0:fe:54:31:
01:a0:c8:08:90:a9:0d:b5:51:a0:98:70:29:3e:f7:3c:c3:29:
36:b1:73:f9:a4:bb:7b:30:e5:63:82:85:6c:b5:f9:0b:33:fd:
9c:1f:29:14:66:1b:e0:7e:31:b3:79:d4:68:86:47:32:91:1e:
07:bb:9e:6f:fe:81:23:75:72:8d:e7:fd:e6:cb:49:26:39:62:
e0:a9:ce:64:78:8d:c7:02:31:3b:42:e9:f8:a0:b8:3d:13:9c:
58:02:fa:8c:f9:ca:82:52:a2:ed:97:85:00:fc:bc:90:21:d6:
c7:f0:e9:fa:39:18:1d:6c:50:9d:81:33:6b:04:5a:4f:99:b3:
04:b6:c9:6e:57:10:0a:3b:59:38:4f:ec:c3:9d:42:fe:a9:51:
dd:d7:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:19 2025 by rpki-client