Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
File: r-b4yudJLQZOAwcckUc5Lu3UW8c.mft (raw, json)
Hash identifier: k2pmujBF8aGgg0kC96Xirb+uJfzSTo5vpczcKv9v4I8=
Subject key identifier: BF:20:B8:81:48:29:6A:B5:11:E9:36:FF:88:58:95:1D:3A:4F:C4:75
Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Certificate serial: 0199FBEAFEC134C4C9EFE4C8C0EC45667D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
Manifest number: 11A3
Signing time: Sun 19 Oct 2025 10:01:45 +0000
Manifest this update: Sun 19 Oct 2025 10:01:45 +0000
Manifest next update: Mon 20 Oct 2025 10:01:45 +0000
Files and hashes: 1: H4Dt1RaXNjrSuf7dIzKd6HI74Xw.roa (hash: 1FMAIN7AWHSRrarcSi8q0q/CcQ+uq+tcfRyHiGa5Hko=)
2: kemSd2KPq5UUT0EZWa92ek2Cwpc.roa (hash: kh0wd5NltixPwrZZXBgelPgGkebz79/WC48Vz4n628s=)
3: r-b4yudJLQZOAwcckUc5Lu3UW8c.crl (hash: OoY83fCTt8K0TwFYao3xCvfGorZPzUDEGCeaGY0PvqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fe:c1:34:c4:c9:ef:e4:c8:c0:ec:45:66:7d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7
Validity
Not Before: Oct 19 10:01:45 2025 GMT
Not After : Oct 20 10:01:45 2025 GMT
Subject: CN=bf20b88148296ab511e936ff8858951d3a4fc475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:ee:d5:af:42:44:f3:d5:48:9d:29:65:21:
d3:ed:f7:df:6a:65:27:44:95:05:cf:4b:59:64:20:
a2:db:25:dc:f1:a7:bf:68:ab:53:b6:e6:ba:e7:ea:
6f:18:e6:6a:fd:71:ae:46:ab:02:19:c9:a7:ad:08:
22:20:98:ef:c2:9a:44:aa:c2:ea:41:2c:cd:07:a2:
01:d1:b1:ce:fe:86:f5:07:71:65:2c:cb:0b:a1:9c:
fe:fd:63:72:b7:aa:87:f0:16:22:c9:61:84:b6:6d:
36:9c:c5:8e:be:35:fe:8b:6a:84:98:5c:83:0c:a1:
5b:17:ac:71:15:eb:64:21:1a:db:68:4b:89:f3:bc:
4f:b7:32:fa:8d:27:b7:10:18:5f:d7:26:67:f2:ff:
2f:96:3b:08:54:05:05:37:21:b3:80:66:a5:a1:31:
8c:f9:19:a8:0d:dd:93:19:56:dc:7f:53:42:eb:d7:
20:e8:d2:40:e9:17:c4:6e:c5:b3:7c:cf:4d:59:30:
3c:3a:e8:a8:3c:23:28:e1:f3:94:a3:00:fe:96:25:
1c:60:e8:a1:89:18:e7:11:cb:a5:bf:37:e0:2a:45:
90:88:7d:e4:9b:11:bd:5a:1d:99:6b:2e:d8:fb:08:
94:a3:77:23:3e:33:3c:fd:7a:e5:dd:15:66:7f:e7:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:B8:81:48:29:6A:B5:11:E9:36:FF:88:58:95:1D:3A:4F:C4:75
X509v3 Authority Key Identifier:
keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:f8:aa:aa:d5:60:c4:7a:90:3e:ec:f6:23:8c:ba:74:f9:
ae:d3:54:62:bd:1c:db:9f:eb:1d:62:b9:71:96:a6:c2:41:f9:
17:96:a7:fa:67:82:ec:e9:76:37:e0:ed:91:91:cb:13:cd:a6:
77:8f:23:29:b3:e4:fe:c3:64:2b:6b:46:fe:73:9e:cf:53:6a:
99:e5:36:48:eb:30:43:57:92:82:19:ef:6c:86:7e:cf:8c:c4:
07:99:02:de:89:4e:5c:ed:45:58:5c:81:21:82:05:17:d3:f1:
9a:d8:8f:73:3c:70:40:5d:ca:17:eb:42:d5:3d:57:33:df:7d:
0d:f5:89:88:56:73:27:2f:ee:16:b1:bd:84:07:62:ff:7f:c2:
35:59:49:26:23:47:e4:dc:fe:5e:82:75:12:fd:b8:02:04:6a:
06:f0:10:81:90:fd:02:73:fa:18:02:92:34:98:21:75:a9:f4:
c4:79:9a:a6:08:a5:60:88:c9:d2:62:ac:ad:cf:e6:62:1c:15:
a1:ae:22:26:3f:2c:5d:bc:bc:6b:70:e5:3e:fc:0f:0c:b5:f2:
39:bf:51:aa:a1:41:cb:20:57:bc:05:e2:f2:3e:35:8c:08:16:
70:22:0f:d2:85:d0:3b:e1:d3:3d:ed:a0:17:0c:2d:a8:d3:59:
00:50:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:26 2025 by rpki-client