Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: 1OkcnwtDHrxdJ7MWe2grNImzXf+37a6gnjy3EyxcAXk=
Subject key identifier: CA:34:35:AA:38:39:B7:A6:B4:EF:31:93:5F:6F:14:6A:9D:CD:59:F7
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 0199FC58A8A40EDC7F99032B66267BF8B011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: lM1Q+P/C0Eivl98j7DdTydS/Pjfa0uHZ/gcijU8qUGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a8:a4:0e:dc:7f:99:03:2b:66:26:7b:f8:b0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=ca3435aa3839b7a6b4ef31935f6f146a9dcd59f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:45:2a:2b:ea:b2:54:41:9a:7e:cd:9e:d3:
08:c1:e5:88:24:b7:a7:15:68:ef:9a:ce:88:b8:de:
15:59:56:7d:91:e4:c5:01:df:b7:0b:52:0e:58:f8:
c2:c0:8f:58:7c:4d:c3:17:00:50:1b:02:2c:c6:8a:
21:26:a5:ac:cd:ed:0b:da:b4:ca:54:28:3a:e6:3f:
02:85:71:ff:48:da:8e:e8:11:ef:5c:02:37:56:0f:
c4:1f:54:ef:af:2c:02:9a:2a:5f:85:ab:67:25:47:
b9:38:59:a8:40:5c:8c:fd:82:8d:05:3a:b3:cd:6b:
f0:c9:1c:c0:81:74:9c:5e:e1:f7:57:f9:a4:43:65:
fc:c5:d0:5f:ff:48:18:74:15:57:b8:84:83:b9:a6:
e5:ae:e2:26:f7:4f:79:18:61:88:5a:27:7e:53:b9:
92:b1:ea:37:6a:89:45:80:24:41:35:7e:d7:99:a4:
99:c8:3e:8b:2e:72:a6:9f:82:7e:93:bd:84:0a:2d:
c6:d7:0c:86:14:6c:88:b3:3b:d1:8e:36:13:4e:f6:
6f:2e:e2:9d:6f:96:e3:aa:d6:be:5e:34:ae:99:2a:
48:b3:62:55:0c:05:fc:dc:38:7d:ef:35:44:09:ac:
86:40:b7:38:c4:8e:87:34:b1:a1:6a:d5:44:52:1f:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:35:AA:38:39:B7:A6:B4:EF:31:93:5F:6F:14:6A:9D:CD:59:F7
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5c:fc:25:65:bd:da:47:fd:55:7b:87:ab:fd:97:be:60:37:
ae:e5:77:8d:6a:55:e4:7c:88:4c:79:61:44:52:20:a9:80:1e:
36:3d:7c:29:b4:f9:d4:0f:e0:e7:64:2f:a8:a4:21:e1:cc:84:
d4:7f:1d:f7:cd:07:74:9e:eb:ed:4f:1b:4b:7e:f3:8d:c3:7b:
d0:9e:9d:7f:72:2c:68:31:b2:6a:5f:03:12:d8:c1:62:06:b9:
62:75:0c:9f:67:15:67:26:67:0e:53:0d:e9:f7:43:4a:8d:17:
89:b4:72:8d:e5:e7:28:9f:14:36:9d:bc:31:50:84:15:b0:03:
d1:d6:33:3f:fa:d2:99:97:f3:d1:7a:0b:f1:fd:d0:8b:ca:5f:
71:cb:7a:cb:3a:b2:65:ab:79:6e:91:4a:28:ec:63:70:0e:be:
20:cc:93:55:c3:55:be:39:c0:07:ad:d3:83:02:8b:91:43:73:
73:2f:7f:3a:92:2b:b8:85:84:b3:e3:c0:f5:66:06:52:f8:83:
0e:b4:73:53:b2:4a:fa:19:58:10:d7:a5:d9:ee:3c:86:38:7d:
3f:7d:c0:7e:29:db:ba:87:2a:26:ea:af:53:c9:57:cf:01:ec:
90:b5:e9:aa:52:25:44:20:9c:74:dc:6d:ab:3d:69:e9:1c:87:
c0:33:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:04 2025 by rpki-client