Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
File: b4RsjA22XcdG72TP2Cu5wZTif3M.mft (raw, json)
Hash identifier: 5+IdqMleVCZ0rNGuCJXmmkaVBq2ILbZJlmXVv2C2GZ8=
Subject key identifier: AE:10:2D:F4:6C:79:C5:9D:5E:21:ED:59:67:FA:51:2B:14:40:AA:E8
Authority key identifier: 6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
Certificate issuer: /CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Certificate serial: 0199FFC8903D38846F44336A289D76442617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
Manifest number: 15B3
Signing time: Mon 20 Oct 2025 04:02:38 +0000
Manifest this update: Mon 20 Oct 2025 04:02:38 +0000
Manifest next update: Tue 21 Oct 2025 04:02:38 +0000
Files and hashes: 1: 1Jntrl_laJPDesbXGgiWwWcFtHo.roa (hash: CoDTsiAxYNrmfWYqfUWdVx8o7SlGJlQ4gwhBUllspFY=)
2: IsL0Zx1rZ-iy8-jtpPfkClhI8pc.roa (hash: sqoYzZMt8wf4mUS5nMLQEfv8sbqAQGSNWeCswIb6zp0=)
3: YOMeWbqb2YP39GnUdvNTCOO7DWs.roa (hash: erbiSipizHuhTzJ/bRQWlIlf0Vk1QR2jgutHpwagwgc=)
4: b4RsjA22XcdG72TP2Cu5wZTif3M.crl (hash: U2rNGENuD/1l1qU3mrxfjXB+5QSeuONazigP/D+e7u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:90:3d:38:84:6f:44:33:6a:28:9d:76:44:26:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f846c8c0db65dc746ef64cfd82bb9c194e27f73
Validity
Not Before: Oct 20 04:02:38 2025 GMT
Not After : Oct 21 04:02:38 2025 GMT
Subject: CN=ae102df46c79c59d5e21ed5967fa512b1440aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:b3:63:50:c1:ac:c4:50:4d:c5:0a:4f:92:
3d:6e:fa:49:da:bc:dc:bc:5e:b3:a8:8a:40:fc:aa:
8a:f0:e3:17:d0:0e:94:e3:b0:1b:38:4b:94:5d:38:
7e:ee:db:27:74:40:a2:a8:b0:ee:e0:ec:68:b8:0a:
63:bb:53:4a:92:0e:15:d9:41:41:08:9e:72:79:69:
ec:7b:bc:b9:e7:0b:7a:ea:7c:1c:70:f7:a9:f3:bf:
5d:3e:ca:ae:fe:cd:8b:e8:53:20:ff:d2:f2:e8:0e:
e1:ca:2a:a5:0e:93:cc:a7:f8:10:04:1a:55:f2:5b:
90:c6:d3:b4:52:17:b9:e4:b3:d0:e0:c5:cc:88:51:
1e:41:d8:51:97:9b:8e:61:73:5c:cb:d2:ba:ab:52:
a7:45:ee:13:60:25:d3:08:3f:4d:73:91:52:ed:d0:
0a:ae:2c:0c:a6:57:71:b6:cb:de:99:38:a7:86:59:
3b:e6:a4:d0:b2:d5:f1:91:0b:0d:a2:97:0c:30:7e:
aa:02:d8:b4:d8:90:74:1a:cb:74:cf:23:74:a5:e8:
53:eb:74:92:17:4f:93:ac:d1:c8:1b:24:c4:72:be:
4a:00:18:00:3e:6f:e6:ac:d9:0d:b5:f6:6d:40:b6:
d3:59:44:9c:8e:4f:a5:53:96:8e:4a:1b:16:3e:8f:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:2D:F4:6C:79:C5:9D:5E:21:ED:59:67:FA:51:2B:14:40:AA:E8
X509v3 Authority Key Identifier:
keyid:6F:84:6C:8C:0D:B6:5D:C7:46:EF:64:CF:D8:2B:B9:C1:94:E2:7F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4RsjA22XcdG72TP2Cu5wZTif3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6a0102-417d-49bf-b193-48ba928fb1be/1/b4RsjA22XcdG72TP2Cu5wZTif3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f3:56:2e:51:7f:73:09:69:d1:63:52:9b:8f:43:4e:a2:b3:
56:31:80:d1:03:90:9f:d3:4d:52:42:e5:d1:00:ff:90:dd:d8:
be:6b:22:9c:cf:ac:4c:8c:9a:6b:12:d0:d7:80:94:d6:29:04:
93:6d:00:0e:2f:36:96:e2:38:50:8f:be:1d:41:04:19:85:bf:
c1:63:d9:b7:5b:27:95:3a:fd:1e:1d:e8:88:55:10:41:1e:00:
6e:dc:16:2d:bb:c4:c9:8f:de:2d:e2:b3:4b:c7:0c:31:b2:23:
e8:fc:7a:64:5e:a4:4c:05:0b:e9:b4:d2:1a:d2:9a:d4:de:99:
9a:82:a9:f8:f5:6c:ee:17:cf:c6:6d:3e:6c:ee:65:ff:d2:68:
4e:20:6c:08:fa:f6:bd:f1:d0:18:57:f6:e1:ef:67:9d:cd:fe:
bd:5b:33:10:af:66:3b:f9:c5:ed:40:fa:b9:4e:68:ca:36:e5:
c4:7c:28:18:bf:9a:6b:a5:ed:79:dd:3e:7f:c4:f8:37:88:08:
4e:8e:69:d0:ee:d3:9b:b8:ff:96:5c:c7:b2:d1:5a:14:16:c6:
09:22:59:bf:95:0e:1e:96:6d:1c:16:b9:40:63:78:4e:6b:0f:
39:16:1d:67:46:09:98:0f:00:c3:5d:46:10:71:f9:aa:d1:ba:
6e:27:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:13 2025 by rpki-client