Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
File: l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft (raw, json)
Hash identifier: iKuGB11tc+MykadoycO5LPNuw80aCeMPLYS85GSzlxs=
Subject key identifier: B7:2B:97:5A:7D:71:85:89:EC:FE:16:9D:3C:E9:13:B0:E3:B4:DE:90
Authority key identifier: 97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
Certificate issuer: /CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Certificate serial: 0199FFC8C5155A79B0700289C793883920BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:02:51 +0000
Manifest this update: Mon 20 Oct 2025 04:02:51 +0000
Manifest next update: Tue 21 Oct 2025 04:02:51 +0000
Files and hashes: 1: YVg_2iB1D0i_33LG7yJEAknUwCM.roa (hash: LAKKZLtOPGoM/C7ZDpXW5Qjmcc0Ag72bwBoz/cyOViA=)
2: l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl (hash: JFgVQD7eJuKy5safwvSqcbKEl1O8Ql04/vCGefP0RUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c5:15:5a:79:b0:70:02:89:c7:93:88:39:20:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97a23bb0aca9d226d05adfac08554181c48ef82e
Validity
Not Before: Oct 20 04:02:51 2025 GMT
Not After : Oct 21 04:02:51 2025 GMT
Subject: CN=b72b975a7d718589ecfe169d3ce913b0e3b4de90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:10:05:76:aa:4c:97:d4:61:b0:28:00:b0:
9f:b3:cf:30:c5:89:0c:d0:8d:41:d7:ca:a1:ab:83:
d8:49:77:fc:01:5e:e9:f9:b6:99:8c:aa:e6:04:98:
41:81:fa:cc:f1:fc:06:17:ad:6d:2a:2b:2a:c2:ae:
5d:92:38:68:27:7b:76:83:46:c8:11:95:ef:1c:cc:
60:00:3b:ab:51:7f:1b:f7:47:f3:58:72:ed:54:cb:
bf:a3:ff:5d:2c:74:a8:bf:8a:f8:5f:8e:34:b0:02:
27:e0:7e:65:be:14:84:09:60:25:b3:34:07:54:6b:
2a:aa:cd:2b:c9:f1:c3:0c:a7:66:09:1a:61:ed:68:
94:1a:5d:21:d7:a6:e4:e4:10:1a:f5:68:c8:d4:16:
ba:fa:25:ef:48:8c:57:fa:75:77:ce:38:75:5a:9c:
1a:6f:94:7a:42:ef:43:da:8e:8d:6e:7e:f7:2a:4d:
dd:08:b9:d2:14:8c:f4:b6:f5:69:9c:8b:23:e0:39:
cf:c8:c1:10:8e:09:86:3d:c8:21:b9:8b:ee:2e:45:
f1:eb:f8:a1:79:60:09:ef:61:6a:ba:33:7b:88:93:
86:9d:08:04:d8:29:57:cc:a2:8b:37:76:8c:02:d9:
40:8f:e3:61:29:8b:c2:cc:04:82:82:d4:8d:d8:5f:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:97:5A:7D:71:85:89:EC:FE:16:9D:3C:E9:13:B0:E3:B4:DE:90
X509v3 Authority Key Identifier:
keyid:97:A2:3B:B0:AC:A9:D2:26:D0:5A:DF:AC:08:55:41:81:C4:8E:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6I7sKyp0ibQWt-sCFVBgcSO-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c58671-3d4e-4775-af21-20af3d1b8ef9/1/l6I7sKyp0ibQWt-sCFVBgcSO-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:02:ca:52:6a:07:d4:49:5d:99:eb:4e:71:13:fa:9c:ea:f0:
70:e4:2a:8d:fe:6d:4c:7a:ed:82:0a:75:a5:22:09:bd:aa:f4:
41:91:1a:14:7f:e9:b0:74:e2:72:98:f3:9d:3d:00:97:15:5a:
60:6d:96:e2:90:84:22:28:7c:78:ff:1d:42:e0:e4:5d:00:99:
a5:fd:91:ac:ef:cc:43:2c:34:55:f6:9f:18:96:f1:7f:3d:b2:
b2:03:b4:77:ae:13:3f:ed:03:cf:b2:74:2c:e4:45:f0:67:d5:
cf:f7:a2:bc:59:08:42:1b:94:47:f3:d7:3a:70:41:55:5d:e9:
b1:e6:42:70:55:ba:a5:05:2f:2c:ca:11:51:05:44:d8:1f:9e:
5c:8c:c1:e3:9c:65:11:a7:5a:07:2d:63:e1:f6:9b:cf:c9:1d:
48:6b:84:9c:36:ff:95:a4:d0:2c:2b:28:85:03:74:0d:70:68:
d7:86:40:5e:14:a0:20:f3:65:62:cf:ff:da:fb:e1:f7:f1:69:
93:90:57:f8:83:c4:ce:51:28:40:f8:07:ee:2d:d0:82:fa:4f:
53:f9:81:e4:03:03:ff:9d:97:1e:0d:a7:f1:03:32:d1:8c:60:
53:2b:14:8a:c0:ae:94:31:b1:a0:fd:13:81:0d:30:2d:8e:22:
cf:6f:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:24 2025 by rpki-client