Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: cEEfWonWdRc6+j3w6GrVAYtm1NDxT7i1s0Etnqlwn2c=
Subject key identifier: 9F:BD:E9:68:18:30:0F:FA:CA:C5:77:60:1A:2C:33:B4:A4:6C:4F:90
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 019A02228A509A68AD00169D52CB8EB5BD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 15:00:09 +0000
Manifest this update: Mon 20 Oct 2025 15:00:09 +0000
Manifest next update: Tue 21 Oct 2025 15:00:09 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: A0cevJs+rm+vc10U7M6UbJ+KQ62rASrI+U16Z4Z59SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:8a:50:9a:68:ad:00:16:9d:52:cb:8e:b5:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Oct 20 15:00:09 2025 GMT
Not After : Oct 21 15:00:09 2025 GMT
Subject: CN=9fbde96818300ffacac577601a2c33b4a46c4f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:2f:40:d5:9b:ef:ba:5e:a8:27:4b:b9:a0:
36:b4:ea:50:59:9a:d3:20:b3:d5:68:9f:fd:55:f2:
10:78:3b:2e:84:69:01:5f:fb:64:6b:8d:69:81:6c:
15:d4:a2:10:71:b5:7d:b4:5d:2e:a0:e8:2a:5e:00:
9c:a4:d8:1d:fc:61:fe:10:db:73:67:9d:c3:a3:11:
3a:0b:1d:27:dc:0f:91:4e:61:38:48:0c:94:a8:a5:
5b:10:45:0e:f6:59:d1:6e:8e:7f:4d:19:df:1a:8e:
4b:72:20:56:8c:2b:d0:df:f4:16:b3:19:15:fc:a7:
4a:1c:54:c2:d2:5b:0c:13:2a:d6:ec:4b:de:68:94:
01:ea:41:70:91:c2:34:b2:b9:23:c3:e3:93:68:5d:
39:26:be:cf:e8:ed:02:a0:ab:41:b7:92:89:28:d1:
07:e2:10:0f:9d:23:8d:6a:94:66:14:a2:5a:c1:b1:
27:bb:24:49:c8:20:a4:fb:11:f5:49:07:d8:23:28:
37:1d:00:85:9c:4d:d7:2c:e4:2a:3a:72:62:3f:c4:
0c:8f:75:2e:4b:28:a0:b3:cd:f9:0b:e9:61:a7:ef:
3d:4a:13:74:03:0a:1d:97:ed:18:86:43:50:c0:57:
33:1f:87:e2:19:57:3d:d7:fd:62:49:ed:bb:96:26:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:E9:68:18:30:0F:FA:CA:C5:77:60:1A:2C:33:B4:A4:6C:4F:90
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ce:19:8f:c6:7e:04:1e:09:be:44:ec:27:f9:a8:bb:cf:2e:
24:ff:9f:fa:cc:46:0f:95:35:55:63:63:d7:a9:75:3b:5c:73:
10:f3:e4:cf:51:35:31:e4:ba:cc:60:ca:98:c4:2d:9c:1e:04:
37:58:e2:b6:e9:17:8c:4a:61:2d:6f:75:db:cf:06:27:cb:d0:
dd:71:b4:cd:c2:7b:94:6d:62:50:cd:01:f0:3f:19:db:71:71:
6c:5b:c0:57:df:a4:04:4b:91:91:92:3a:cc:7e:4a:d1:e7:f7:
17:cf:56:f6:22:e4:3d:21:23:fa:e6:e1:87:0b:a5:4a:3d:54:
7b:4b:52:50:8d:e6:6f:8c:99:85:da:63:9e:43:00:26:ea:b0:
92:a9:01:0a:3c:76:72:e3:72:0b:3d:ec:73:0e:a5:2f:ed:4d:
e6:b5:03:10:63:a3:d9:36:d9:1d:82:ba:3d:74:94:f5:cf:3b:
f0:ba:e7:d7:51:e2:90:ea:ce:8f:1a:aa:a7:5b:4d:63:a3:9c:
08:5c:3b:e0:f2:ac:d7:85:d5:96:0d:d7:53:a4:74:d1:6b:20:
92:5d:1d:e8:37:69:fc:62:b9:90:b7:ae:9f:9d:3e:ce:2e:ef:
45:9e:74:25:2b:c7:ac:00:df:ad:aa:87:8d:44:53:93:42:ef:
ff:6b:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:31:15 2025 by rpki-client