Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: kmv5ctLXWj6x8H3QurBHpi6Ujj7f4xwuLwNmFEv47Q8=
Subject key identifier: 3E:30:24:57:DC:5A:80:B7:8F:4B:84:83:60:79:9C:23:F0:54:71:A7
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 0199FC584F4F2C06CE6101F61185260A1932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: GIiXAdIOPjSVGLE752Sn3u9KrS7sVVqyEbHuCx5w4FU=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4f:4f:2c:06:ce:61:01:f6:11:85:26:0a:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=3e302457dc5a80b78f4b848360799c23f05471a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:77:55:3e:e0:a9:e4:61:fb:a0:f6:c1:e3:
53:83:47:ad:25:8f:1c:0f:7a:f4:33:e3:8d:1b:e3:
27:3d:0b:88:5a:fc:aa:56:3f:ed:55:5e:52:4d:75:
df:c6:c8:bb:fe:cb:a5:43:e4:66:c0:e8:22:10:76:
54:4f:2f:55:d2:1e:f5:0b:bd:4a:16:f1:03:9b:9e:
00:17:87:cb:60:2b:2a:10:f5:3b:27:bf:4d:ba:c1:
67:71:b7:d0:31:70:23:97:02:e3:87:96:38:b9:10:
05:11:cd:12:27:dc:d8:92:02:9c:6e:88:ee:d2:2f:
dd:17:e0:c4:73:d0:4f:f7:a2:fc:f5:14:ad:51:97:
2d:83:4b:f6:c7:4c:62:26:76:df:27:d0:e5:da:c9:
05:ad:cf:e6:11:ba:61:43:76:88:d9:50:88:3d:6b:
d1:59:fe:b0:50:f5:f9:a0:f3:81:d1:ae:e2:b1:95:
b0:09:92:04:a6:a8:1c:7e:2a:29:94:94:b6:ba:6c:
b9:6c:d4:0a:ce:42:6b:ca:00:96:6e:c8:ba:d1:6b:
5a:08:d8:1f:e6:aa:06:cd:81:1d:99:43:63:6d:82:
f4:46:88:5c:ea:a2:33:8c:05:a4:39:fc:54:34:2f:
55:25:24:a0:37:47:16:2c:dd:cd:28:df:3d:df:8f:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:24:57:DC:5A:80:B7:8F:4B:84:83:60:79:9C:23:F0:54:71:A7
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e7:28:67:8d:9e:24:ba:bb:18:76:08:36:bc:72:6f:a5:cc:
c9:16:e7:5f:4e:64:11:35:71:73:c9:96:a8:fe:f1:ea:8a:44:
e7:e7:fa:f9:67:74:7d:37:2b:7f:8c:74:2f:d7:61:14:99:01:
9c:de:12:ba:26:17:b4:fe:51:7b:12:0f:9d:d7:80:60:bc:2f:
bc:05:76:2c:d4:b3:46:d3:3f:6c:3e:e4:e5:f0:7d:b1:9b:88:
4f:83:73:95:0d:91:02:a0:ec:96:61:d5:e8:33:ae:a9:95:ae:
d3:0c:44:8c:f2:46:ef:74:ed:12:2c:6f:62:db:17:d9:ab:57:
fd:b8:f4:f7:34:16:c6:6d:38:a4:0b:ce:80:68:35:eb:2b:b7:
63:aa:b3:f2:d7:4b:f4:eb:5d:b0:8b:34:21:93:01:77:eb:7e:
6a:3a:a7:df:b5:9b:99:16:52:08:7a:01:eb:41:c4:94:b7:bc:
62:0b:91:30:37:c5:42:b8:f8:7b:84:cd:7c:76:56:a2:04:6e:
da:76:08:6b:83:d5:ee:bf:16:44:93:25:21:49:b6:01:3e:e8:
bd:cd:22:d1:31:b2:c7:9f:4f:ef:71:4b:89:bb:07:98:9b:db:
33:27:6c:fe:b7:8a:13:12:95:21:02:d5:87:08:00:69:d4:68:
b1:50:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:50 2025 by rpki-client