Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: CHqmYGwPBw9QGaOZJuFIGt8cmDJMquCisynooGEXyRs=
Subject key identifier: CB:3B:EF:92:E5:B1:14:E6:65:45:38:7B:1F:46:7A:C5:C5:FA:CB:69
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 0199FC21573A283C07B7869E2A6BF422BC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: t508JAC1gyhvaGFbsycUJZkdDEzZDtnI9ZR69sEFy5k=)
2: S-uH2YCKKsWBJelfJrxohaQfZ4s.roa (hash: 7xEZvOLMz8mmv0R7hpmF8/cEimpEVrW14AuQipAjIzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:57:3a:28:3c:07:b7:86:9e:2a:6b:f4:22:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=cb3bef92e5b114e66545387b1f467ac5c5facb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:1f:10:c4:fe:25:4e:04:4e:ff:78:a1:20:
84:be:52:e3:1c:92:91:c4:09:8e:c6:02:dd:39:0e:
ab:66:c2:82:a1:73:a0:5e:1e:d5:48:08:49:81:6e:
5d:a6:3d:51:73:09:33:9e:4a:76:ab:10:0b:39:33:
84:cc:c7:3a:9e:6f:3f:ca:67:d6:b7:05:3f:2d:dc:
06:65:ce:07:bd:f1:e7:4b:ef:58:5f:79:b9:09:6d:
24:24:b6:1f:44:54:22:9d:42:80:f1:06:a2:c8:8b:
e5:83:cb:7f:b9:d6:1a:3b:ca:25:89:ec:27:a5:64:
9b:60:61:2a:f6:f1:3c:77:c1:2c:ca:cd:2d:eb:0a:
6d:74:84:6a:3f:26:d1:56:c3:04:8f:5b:85:f1:f1:
dd:58:95:74:58:26:f4:32:6b:a6:cf:0d:a5:ae:9a:
20:cc:e2:59:f4:67:89:72:a7:77:9d:42:13:f7:6d:
6e:84:db:88:67:01:2c:21:7c:ad:c2:85:57:12:da:
b6:f0:a9:43:d2:60:44:75:1f:d1:a0:6e:4e:4a:95:
6d:d9:d3:80:ad:d0:fc:eb:0a:58:56:e6:36:d0:1a:
66:df:7c:fb:21:0e:3e:06:5b:64:92:4b:51:8c:94:
1c:ad:b9:3a:eb:4d:0b:d4:98:7c:97:6e:77:d6:0a:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:EF:92:E5:B1:14:E6:65:45:38:7B:1F:46:7A:C5:C5:FA:CB:69
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2c:4c:71:e5:b4:e3:8c:67:e9:ec:72:42:cf:14:1a:64:47:
ef:e3:03:c6:51:7e:3a:78:80:75:f8:02:df:4e:76:24:71:d5:
26:46:12:b5:d9:aa:05:7c:89:32:4e:d5:c0:3d:4b:a7:44:b7:
6c:a0:f9:97:2c:0d:90:65:41:4a:a0:5e:ee:ab:62:1e:e2:ff:
bb:bf:d5:52:f5:17:64:57:f2:1e:e2:6f:46:8f:ed:91:3c:88:
dc:dd:1a:91:03:fd:3b:ec:40:7b:ec:cb:f2:f2:87:37:e1:a3:
19:00:6b:8f:d0:e9:00:78:4c:e6:25:c1:b5:db:58:05:05:67:
bf:7e:b5:c3:c6:d5:ed:73:57:36:40:81:ac:32:4f:82:32:07:
c3:0d:08:bd:0f:da:d8:fd:91:12:2b:c0:16:a3:8b:0e:a9:77:
18:7e:ab:44:cf:5a:be:2e:b6:38:ac:1f:93:b9:0e:52:ca:c9:
cf:b5:d8:c3:fd:11:90:e5:07:77:2e:ad:5f:6f:6b:32:3d:49:
51:0f:b5:73:fe:28:0e:84:56:b9:a4:6a:28:f7:6c:89:fe:75:
5b:29:79:67:a3:1a:8b:a7:7a:51:14:d3:9a:f6:e1:f4:c1:61:
8b:a5:24:89:00:b3:bc:b6:69:68:ca:4b:ba:70:d7:69:1c:be:
56:40:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:51 2025 by rpki-client