Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: UZAIFcikGzPZKrx35HfoHIVIm4GTQikdInxpQBo3D/4=
Subject key identifier: F2:EA:29:CC:1A:8B:3C:2D:43:9E:3E:F5:7C:41:27:3D:F1:7A:D8:74
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 0199FBEA88B6195381336D60754793444C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: MSq02GEiYCYX86ZOO8dAeEwdjkPzQSKxhpaeGg1T3yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:88:b6:19:53:81:33:6d:60:75:47:93:44:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=f2ea29cc1a8b3c2d439e3ef57c41273df17ad874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:98:09:6f:49:a3:f4:ac:76:9c:4e:13:20:02:
52:1b:10:e1:6e:7c:2c:7c:67:cf:03:6d:25:de:b4:
ec:88:a1:54:80:87:02:cd:45:dc:bd:3c:03:7b:02:
b0:b7:1f:23:0c:65:72:b7:fc:de:9b:d6:f4:88:0d:
ca:db:bf:d1:cf:33:dc:43:2a:33:7a:aa:22:51:43:
71:23:e6:f2:27:c7:ff:51:13:93:90:37:e2:68:78:
01:e4:cb:71:cb:64:6d:ce:22:7f:48:70:c6:bb:cb:
2e:33:ac:f2:28:15:78:ac:dd:51:65:52:98:16:3d:
27:e4:3a:d3:9a:6d:e9:78:22:41:56:14:cd:0a:1e:
30:1a:ad:ff:4f:08:35:21:2d:48:91:65:51:0f:dc:
2d:7c:25:94:e9:0e:8d:0e:2e:9c:e9:67:10:a5:9a:
ef:3a:4c:6b:89:06:2f:31:34:6c:9d:f8:d5:c6:97:
9c:15:81:73:d5:27:4a:15:bc:15:31:ef:32:ab:a0:
ab:1d:b0:cd:09:3e:bc:55:07:e4:60:74:13:47:e9:
9d:d2:84:b2:46:12:04:0e:f5:ed:0e:21:55:a1:43:
7a:57:bd:fb:9d:c0:1d:44:63:f3:77:40:06:aa:95:
eb:3d:82:b0:1d:6a:dd:45:23:ae:d7:a9:17:5f:ec:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EA:29:CC:1A:8B:3C:2D:43:9E:3E:F5:7C:41:27:3D:F1:7A:D8:74
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bb:c6:9f:ce:de:bc:11:66:50:02:70:43:53:97:ad:69:ef:
c7:59:94:aa:c1:75:8b:37:45:a6:69:e5:06:29:6f:b4:a6:fa:
cc:12:c7:b4:49:2e:fc:3f:b8:5a:0e:db:39:28:35:c2:60:ee:
33:86:fe:7c:4c:f0:b7:9b:71:b9:56:a6:ff:80:a1:79:b0:2b:
db:a1:1d:1a:f2:74:3b:a2:cb:77:8e:38:8a:86:c9:50:b1:5f:
a4:d9:df:35:aa:17:c9:ff:0d:10:4f:f9:47:5c:eb:cb:b5:46:
33:ff:3a:68:47:f2:da:d3:e7:97:65:a3:1b:d6:2c:cc:3a:33:
16:bb:46:9d:4b:bf:6b:68:fa:91:92:22:c4:04:44:7b:ae:ca:
f5:ad:6b:02:80:6b:11:ac:52:e4:9e:64:5e:3a:da:17:5e:3f:
5e:01:6b:e2:c4:e1:e5:19:ea:21:f6:63:58:11:73:ac:bd:04:
cd:8b:51:37:48:6f:79:25:d4:4e:82:a5:3b:87:2e:db:c5:96:
48:f2:c2:10:07:60:0d:c4:bd:77:9a:f5:4c:fe:af:cd:ec:0f:
62:3e:b3:db:7e:21:42:f0:d0:17:1e:18:f3:7d:b0:29:fb:67:
1d:2a:53:b4:89:08:e3:cb:11:2f:28:aa:c7:97:5e:00:4b:95:
c9:18:b7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:40 2025 by rpki-client