Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: DqgwpxQLHcDZhbenr7rcpApf69pPjC7WANlYOnijBvM=
Subject key identifier: 75:1F:10:40:E8:35:EF:3A:2D:93:68:CF:3E:71:8D:25:EC:DC:31:8A
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 0199FC58F43B519A441C64C8CAD9DB3B6780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: nit2jrawfpUghJm7NPG4o764bVNX9oohnnGOLQxWiwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f4:3b:51:9a:44:1c:64:c8:ca:d9:db:3b:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=751f1040e835ef3a2d9368cf3e718d25ecdc318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:88:f4:23:2d:67:a4:ee:69:f6:20:2a:9e:
b0:65:9c:e3:8e:c5:35:68:68:6e:24:e9:53:f4:0e:
5d:4a:67:73:3b:a6:9f:fd:bf:44:45:b7:bd:7e:f3:
d2:cf:39:5e:08:3a:2b:df:85:56:c9:41:1a:e6:82:
f9:f2:1c:04:ba:79:46:e9:96:8e:94:80:d8:02:a5:
e9:3f:00:4d:7a:ed:d5:70:c6:ec:4b:4a:4d:f2:90:
f5:02:ce:1d:81:1b:f2:7d:c9:8c:ed:de:3c:05:d2:
c6:f8:0d:c2:f8:ce:4f:7d:93:3e:d9:ba:28:47:7d:
eb:34:77:5e:8e:2b:14:28:c6:3e:cf:37:63:50:4c:
61:b3:77:d3:20:19:5b:7d:25:35:34:96:d1:6c:ee:
9f:63:3a:c5:ed:f1:3f:ed:22:7d:fb:2d:c6:f7:e7:
63:c5:de:3a:ab:42:ad:8a:47:e3:b3:77:a3:d9:6b:
03:8d:ef:c0:69:e1:76:2d:5e:af:a2:d4:3f:c1:da:
30:40:98:ff:42:80:08:df:fa:c4:96:46:22:4e:e6:
d7:69:27:b2:4d:bf:f0:6a:e7:85:b2:21:86:0a:3f:
30:df:db:a3:84:20:52:ed:1f:f0:05:71:03:fb:28:
70:33:99:74:23:1c:e2:0a:35:47:ca:e2:da:99:2c:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:10:40:E8:35:EF:3A:2D:93:68:CF:3E:71:8D:25:EC:DC:31:8A
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:9e:19:1b:25:36:c9:0f:d4:4d:ce:21:d0:a1:ed:05:9a:
d9:8a:2e:62:ed:2e:ac:a6:00:72:6e:7f:0a:a0:d5:df:4b:f5:
c1:1d:af:fe:d3:78:c6:80:bd:bf:89:0f:99:5e:db:67:2d:21:
74:44:e9:8a:14:37:f4:07:d7:88:0f:6f:93:78:fd:d6:da:61:
00:d1:24:ef:26:e8:f3:b0:40:25:de:17:8a:a8:5e:f7:66:67:
70:e7:89:2d:f9:57:b9:16:08:b7:25:d0:3b:00:e2:78:03:6b:
1e:86:09:85:54:dc:ae:bf:75:50:de:7a:52:20:c5:f2:67:91:
55:57:b1:0a:e0:dc:ba:1c:4d:0f:d0:2e:55:82:f2:44:11:6c:
7a:5e:48:75:80:62:7e:86:e8:fa:29:90:73:f4:d6:70:84:93:
b0:cd:85:cf:49:93:92:ae:c3:59:97:0c:3f:db:a3:c5:bb:ea:
2c:3f:a9:69:61:1e:c1:fd:dc:69:24:85:bd:e2:06:26:93:17:
bf:12:87:45:14:94:0a:b6:37:ab:83:db:9f:c6:fa:d1:32:74:
e9:ae:67:62:4e:d6:c6:81:73:07:5e:82:6d:10:6e:47:0f:8b:
3c:10:b9:0c:6a:ac:e6:62:af:99:c2:fe:8d:d1:19:69:8f:18:
cc:7a:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:25 2025 by rpki-client