
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: Q3b94oVez1Wm6gJOiGEx7qPUWdFP03RTWaJvw7qIe34=
Subject key identifier: E7:50:35:97:95:8E:E6:14:2A:59:F5:4E:96:15:C2:71:AD:12:FD:7A
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 0199FFC8AF3501CBEE8BB0EB02685F72E404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 04:02:46 +0000
Manifest this update: Mon 20 Oct 2025 04:02:46 +0000
Manifest next update: Tue 21 Oct 2025 04:02:46 +0000
Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: BXH+DCHCYSRYYfO9cYptyPmS8jGinZq/BPMzC39Di8s=)
2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:af:35:01:cb:ee:8b:b0:eb:02:68:5f:72:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Oct 20 04:02:46 2025 GMT
Not After : Oct 21 04:02:46 2025 GMT
Subject: CN=e7503597958ee6142a59f54e9615c271ad12fd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:a5:0a:74:12:f2:3c:45:a2:bb:5f:ba:33:
95:68:62:3a:84:97:5c:a7:85:e4:12:02:9c:99:be:
6f:22:07:3c:8f:3e:b0:06:95:85:92:7a:10:7b:58:
27:f1:6f:05:35:ae:e4:25:88:04:8c:52:04:2b:93:
2e:71:b4:6e:1e:63:32:90:fb:22:62:7d:46:28:f4:
e6:1f:de:49:5c:42:44:73:65:ef:21:f3:21:4f:ac:
08:ec:98:9b:f8:5a:0b:04:74:32:1f:90:62:43:01:
eb:63:d5:53:4b:be:e8:a7:d9:1a:d8:e8:c0:bb:ef:
8d:1e:a0:53:89:97:9b:6f:f1:d0:41:20:c8:ba:a7:
96:7d:0a:c5:61:67:c5:ba:e0:fb:c2:1e:98:31:9e:
8f:0a:4c:ee:12:f5:f2:fc:f2:4f:28:21:f5:15:da:
19:ac:6d:00:36:93:6b:9e:87:d5:8b:91:b2:99:d8:
b2:28:e0:4b:31:f8:94:8c:2c:5c:e1:7a:a4:30:b4:
b2:d4:aa:14:92:80:81:f3:03:89:8c:50:9a:20:ec:
de:fe:e8:7c:ba:0f:92:76:99:dd:f4:60:37:94:77:
73:36:f9:92:90:de:05:7b:31:e9:76:fe:e7:c7:6a:
7b:a5:3f:28:fe:9a:51:be:b9:e8:47:14:08:82:d7:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:50:35:97:95:8E:E6:14:2A:59:F5:4E:96:15:C2:71:AD:12:FD:7A
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:58:0f:a8:40:49:74:35:1b:a4:7a:49:19:76:8d:ff:04:7b:
08:1a:e7:f5:2c:66:8a:b3:cc:b7:de:fd:39:fc:ee:9c:a8:cb:
78:26:3f:74:f5:93:ab:e1:a9:bd:76:ad:d8:bc:09:d2:7c:76:
15:ca:9a:c7:68:62:92:f7:38:9e:ba:4f:3d:e0:16:50:dd:20:
4d:aa:79:7a:64:9b:79:a2:f4:ab:8c:46:6b:00:40:24:bf:d3:
f7:73:2e:49:c2:7f:e8:2c:52:9f:b7:2a:0a:96:61:63:a8:95:
e0:98:6e:ea:0a:2a:af:84:b9:dd:06:51:23:f4:51:8f:b1:73:
61:11:e0:69:d6:62:3c:9f:69:4e:4f:63:22:f7:00:62:22:aa:
93:09:ed:de:11:ea:0a:6a:70:21:01:95:0a:1a:b1:27:85:ee:
5b:71:6e:ad:49:20:e4:6c:ea:9b:c3:45:ee:8c:8b:14:5a:7f:
1e:a7:55:ce:26:78:d5:d2:de:bf:27:6b:41:19:d1:02:53:58:
22:2d:35:5b:05:01:ad:48:ee:ec:a1:5a:f6:a9:4c:1d:36:9a:
93:6c:04:b0:47:49:29:d9:34:a0:6c:fe:18:a6:03:a3:d0:d2:
e1:06:e2:da:17:ac:51:7b:24:bd:4f:31:d8:d9:18:82:8c:e3:
7b:24:66:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:28 2025 by rpki-client