Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: 698ZeZyMjWjgJmzGXg+oNHEprsXYxFtJMlRHT+ysOyc=
Subject key identifier: 1C:35:C9:AE:2E:1D:8F:44:92:4B:86:E1:60:D8:1C:5F:45:5A:F0:A0
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 0199FA6A0A968C03C36937B363ABA0A6BEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 03:01:17 +0000
Manifest this update: Sun 19 Oct 2025 03:01:17 +0000
Manifest next update: Mon 20 Oct 2025 03:01:17 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: Cn3HmQOXzdNuHmcQARkvahJZf/pMs6uaMNcuvXyIaa8=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:0a:96:8c:03:c3:69:37:b3:63:ab:a0:a6:be:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Oct 19 03:01:17 2025 GMT
Not After : Oct 20 03:01:17 2025 GMT
Subject: CN=1c35c9ae2e1d8f44924b86e160d81c5f455af0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:9f:ae:fc:26:39:07:89:6d:7f:cf:c8:c8:
13:75:f2:a3:b8:84:e4:28:60:b8:ec:3c:3a:1d:35:
bf:11:73:9a:c5:a0:31:4e:69:7b:a2:3e:8d:25:d6:
46:a8:c0:d8:1c:7e:3d:3b:84:88:d4:cb:1f:41:cb:
4e:4f:27:c6:da:47:75:30:aa:2d:e1:5c:55:20:30:
a7:ec:8e:76:23:11:39:be:3e:c4:13:d8:87:35:54:
1e:8b:50:86:c9:60:44:64:d6:aa:61:5a:7e:c4:7d:
db:07:d0:74:82:04:32:e7:09:c2:9b:1c:8a:44:e3:
5b:86:2e:74:f4:7e:f4:82:ee:9a:e2:b9:9c:c6:8e:
13:43:c0:57:d2:11:f3:8e:35:f3:fe:5e:e7:2f:15:
f2:08:bd:b5:69:e5:53:28:3f:1c:16:a1:09:17:15:
42:e9:5d:a6:2d:ad:47:eb:1d:6a:37:41:be:76:b5:
81:a3:66:42:ca:8b:31:7d:d6:1e:79:d4:41:fa:20:
f1:3e:cf:ea:42:45:da:5d:92:dd:b1:b3:e7:36:1a:
ba:9f:28:61:cc:c2:69:e3:e4:16:3a:bb:db:04:5b:
53:a9:3e:dc:7b:bc:25:48:9d:55:bb:59:2b:d7:14:
e9:2c:d2:7e:b8:bc:bb:75:65:72:86:57:fc:9f:e9:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:35:C9:AE:2E:1D:8F:44:92:4B:86:E1:60:D8:1C:5F:45:5A:F0:A0
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ef:53:56:1f:ba:1c:e6:b2:b3:7e:1c:0c:2d:9c:97:6b:94:
0f:79:5b:0a:44:03:58:41:f4:a3:92:80:6b:dc:bd:a1:d2:e9:
32:ff:ec:d8:6d:fc:ca:6e:5e:fd:05:c1:73:62:34:db:2c:ba:
4c:60:aa:f5:ae:d2:3d:ec:97:9a:92:00:00:1e:92:3f:cf:e9:
ad:81:48:2d:90:f2:47:41:54:7d:87:58:79:ca:3e:f8:04:00:
fd:29:03:b1:4e:e4:7e:c6:a9:a6:6c:5d:57:2a:63:8f:b8:ca:
1c:cd:89:5a:d9:bd:c5:fd:3a:f6:85:9a:7d:ed:25:bc:2b:d9:
2e:e3:16:e3:85:b1:be:49:8e:cb:fa:21:6b:41:e9:6c:d4:d4:
b8:28:5c:b0:5a:95:58:a0:fc:c2:9d:9e:35:2a:62:bc:e0:dd:
4b:6a:eb:7a:ab:96:ad:e3:7f:06:20:a9:87:35:ff:93:cf:28:
f8:e8:fe:fc:e6:ed:5d:5e:08:6a:45:2a:d1:0f:dc:89:94:8a:
c8:8c:12:31:57:82:21:0c:50:fe:6f:39:f5:9d:da:6b:0b:5f:
69:77:9a:a2:32:da:61:37:4c:c4:48:da:7a:10:d0:bd:f9:0d:
81:33:c5:05:35:a1:a4:23:97:fb:be:e8:08:a1:d9:75:e0:9f:
5b:64:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:57 2025 by rpki-client