Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: LCW2vfGpKpuDrhl/6yv+E5lLp8QLJUtm02dFhWRXaHg=
Subject key identifier: 8F:B0:7F:68:87:0E:46:9C:78:79:41:16:6B:31:F7:AB:44:16:BD:03
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 0199FC5905E69533AB9976361A7E180426C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:56 +0000
Manifest this update: Sun 19 Oct 2025 12:01:56 +0000
Manifest next update: Mon 20 Oct 2025 12:01:56 +0000
Files and hashes: 1: 5dOeHmReGHpglp9CPLficnPxbRA.roa (hash: u/adm8/lzLOzXE337fHeCi8QttPIgGUNVZ/GPwCUh0o=)
2: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: dysWARGpzplWiGfiBTLOAqTEJ1wmib1gPacqdlJDeEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:05:e6:95:33:ab:99:76:36:1a:7e:18:04:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Oct 19 12:01:56 2025 GMT
Not After : Oct 20 12:01:56 2025 GMT
Subject: CN=8fb07f68870e469c787941166b31f7ab4416bd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5c:c3:38:46:2f:0d:4a:09:e4:94:25:d6:76:
d2:92:90:b3:57:15:07:7e:8c:f1:df:a8:b6:a5:e9:
93:8e:46:ef:67:24:60:7e:c7:f6:20:c9:52:49:67:
58:4e:36:16:27:f6:ad:5f:d6:db:d9:92:21:5f:ac:
25:4c:f7:8a:42:88:f6:7b:26:71:d2:19:d0:29:02:
46:c0:3f:6f:f5:5a:eb:ce:d8:5f:62:80:19:6b:ee:
0c:1a:73:c5:29:45:c6:2e:a0:93:a6:5e:6e:c5:0c:
e5:41:73:8f:16:da:a0:aa:b6:d1:4b:7a:c4:1d:ce:
8a:37:54:f5:28:c7:6c:bc:80:ca:d0:49:1b:d2:94:
a7:d1:f7:7c:48:c6:c8:57:25:f0:d8:a2:7d:53:b1:
0c:09:a5:57:e9:cf:a0:56:ca:6d:68:38:e7:5a:2e:
13:83:17:4d:1b:94:e2:9a:2c:b7:3a:b6:b1:33:9a:
05:05:ab:8d:ce:2a:05:f1:4a:ae:c7:af:2a:7a:4a:
d8:37:50:ee:fe:58:1e:d2:82:d1:a9:a0:a7:00:75:
2c:8e:df:43:94:7f:6e:31:9e:2b:f4:bd:49:7f:0f:
ee:c8:cf:62:97:41:bb:90:e9:5b:37:41:85:a1:90:
63:9b:6d:58:54:82:8e:8c:10:a3:44:b3:ff:db:5b:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B0:7F:68:87:0E:46:9C:78:79:41:16:6B:31:F7:AB:44:16:BD:03
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:5c:1d:7b:e6:75:3d:c9:8d:ac:62:76:53:a9:e2:7d:49:c4:
a9:52:64:85:6e:17:8e:f4:27:47:6b:cb:d5:11:f7:30:bb:05:
cb:c6:a2:3a:95:90:ba:aa:36:68:94:f7:77:cd:4f:0b:c8:3b:
3d:36:6e:d7:4b:9f:38:25:c2:cc:0b:ea:44:d8:19:35:c8:cf:
ae:9a:93:c7:53:dc:82:e5:ef:d7:a6:bb:40:d2:e0:c2:cf:29:
62:39:c6:4a:db:a0:ce:87:49:9b:3f:7a:8a:51:eb:b3:49:be:
5d:3a:bd:d8:ac:7b:a7:e9:a7:7b:ed:14:61:70:fc:aa:c3:cf:
4a:dc:e9:ca:78:50:6a:fd:26:49:a1:e5:4b:5f:59:51:40:89:
82:eb:d4:39:06:39:89:04:ad:ed:5b:68:67:fb:ca:12:b4:19:
14:32:8c:f5:fb:dd:1e:f6:6a:88:f5:27:e5:ab:86:e5:82:c9:
7a:63:64:b4:2f:3b:ab:56:cc:a4:11:f7:00:4c:97:8a:11:88:
52:2e:91:bc:e8:4d:bd:11:40:47:14:55:d1:38:15:1e:b2:24:
c8:fd:42:33:a2:fa:87:cf:be:8c:96:d3:c7:b7:09:ab:dd:4e:
45:da:3d:6d:86:b2:aa:cf:9d:97:06:d9:75:d3:99:97:95:2f:
50:cb:3b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:28 2025 by rpki-client