Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: necotJktMG7VsM4hrkI2+DMqCwe/f6siju5A60l46KE=
Subject key identifier: BC:02:30:6F:74:16:8B:C8:BC:74:36:D8:5F:7A:3F:E0:6E:4F:2E:46
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0199FC218898348A590FAE3E73A6B5591619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: VrfkVYuHPtxgmc3aVLF9GUSPo3oPRSh2VS+WxKsnBek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:98:34:8a:59:0f:ae:3e:73:a6:b5:59:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=bc02306f74168bc8bc7436d85f7a3fe06e4f2e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:90:01:0d:cf:f3:f7:b9:f0:03:e5:33:e0:94:
c9:c7:de:5f:7b:59:d5:38:74:9f:34:c0:60:72:2f:
59:63:21:8f:f4:0c:a7:d3:06:7b:22:3f:1a:9d:06:
d7:fc:d8:3f:78:51:88:65:08:1d:1a:c8:94:28:d2:
0e:8d:45:fa:f0:61:3d:75:e2:52:09:42:4a:7d:17:
17:8f:da:74:c4:07:92:92:44:7a:25:c2:af:8e:08:
d5:f8:d3:78:f2:a6:95:26:3a:8e:1c:c9:81:c8:f7:
e0:9b:3f:0c:98:9b:b8:90:32:39:24:62:af:ba:e3:
90:1f:df:bf:f3:7b:05:47:ee:b8:12:44:2d:54:ac:
ae:c5:89:3c:b3:ec:01:89:99:d8:f1:d5:e2:12:84:
3e:13:10:e0:f3:9b:7a:6c:b2:f5:a3:3b:66:3a:c3:
de:8d:fe:d7:96:1c:0a:3d:3b:3f:b0:e1:c9:92:b0:
ad:9a:cc:7e:c3:7b:ed:08:e4:f4:1d:a3:ea:1b:77:
79:ae:89:bd:f7:2b:d6:1c:d0:27:80:86:85:4e:29:
f1:e9:8b:45:b0:a3:f3:f6:97:22:7a:a3:da:28:80:
e3:a8:60:b9:88:99:d0:04:21:46:aa:8a:e2:b1:30:
f4:aa:75:10:39:22:64:cb:d5:2c:05:d6:27:c7:c9:
19:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:30:6F:74:16:8B:C8:BC:74:36:D8:5F:7A:3F:E0:6E:4F:2E:46
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:d3:1e:07:6d:3c:dd:db:fe:3f:ed:03:68:70:df:be:d6:
1d:db:e7:2a:6f:e4:64:6f:83:74:21:a6:70:b3:82:b2:87:47:
53:b7:6b:75:c7:7a:63:be:c5:b9:34:61:bb:92:10:55:7e:23:
74:fc:5e:09:72:69:5a:96:6d:65:e7:9f:b3:36:95:a5:4f:73:
c1:4b:60:47:2d:c2:4a:b7:23:19:80:f8:77:17:97:ea:5c:07:
4f:eb:cb:16:c2:1b:d5:26:14:ad:6a:69:09:92:80:b0:56:49:
e8:55:ca:37:9a:4f:e8:65:9e:f4:10:67:c9:6a:49:44:64:fe:
61:47:40:ba:84:4c:a2:86:24:ab:23:26:1a:03:55:ca:06:e4:
af:93:83:81:c0:37:d5:9d:2d:38:79:81:92:df:31:a5:fc:43:
82:c3:b8:ca:f4:bb:49:eb:fa:40:cf:57:ed:09:82:46:90:60:
38:bc:1a:96:5c:cd:4b:58:48:05:66:9d:ab:01:43:dd:f7:e3:
8e:2b:81:bf:3c:5a:4e:74:d3:ce:3f:26:81:17:58:44:e6:2d:
29:51:89:04:0c:3d:da:63:31:76:a0:98:0f:68:57:31:62:ce:
20:3c:1f:fe:82:eb:e4:07:18:5b:9d:69:7f:ae:ee:cd:66:f9:
2f:4b:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:44 2025 by rpki-client