Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: eHHI8d8DTFAYadCUrxRuFD9MYMwt7XDO57QDeCJKy5I=
Subject key identifier: F2:D1:E4:96:2B:AD:E4:E0:98:90:35:AC:C4:59:CE:A6:CE:4D:50:D9
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 0199FBEAB12458A9EA488ED16713605AB22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: s53l/N2tetp076CcNdmz10pckW6hmd3ZkRN5Irtf5To=)
2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:24:58:a9:ea:48:8e:d1:67:13:60:5a:b2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=f2d1e4962bade4e0989035acc459cea6ce4d50d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:77:c5:0c:ed:5a:9e:cb:58:a4:9b:46:0e:
8e:21:77:c3:da:4e:45:83:8c:b8:49:a1:b5:11:81:
a6:2d:56:2c:1d:1e:3d:ab:9b:8e:b8:40:20:9a:50:
86:af:40:63:69:db:ae:16:8c:67:a4:33:bb:36:9c:
96:b4:8a:ad:73:c8:c9:00:f2:33:90:a3:52:9d:5f:
61:3b:8f:1a:91:dc:78:89:c0:ab:47:a2:dd:de:1a:
88:d9:75:76:96:5c:a3:7a:6e:35:ea:16:48:52:4c:
8b:82:7d:7f:ed:e8:44:a2:56:1a:8c:f1:8a:a6:2d:
a1:a6:27:5d:d4:aa:aa:c5:fa:5b:7f:ea:aa:63:ef:
8a:e1:d0:42:58:2a:42:38:cc:fb:c1:37:52:3b:da:
76:d5:22:5e:bf:1a:8f:84:f8:c3:c7:13:68:85:d5:
50:2b:e4:d6:98:e1:e4:d9:76:25:1c:01:85:63:9d:
81:3d:1b:95:65:53:f2:ef:cc:13:38:5a:1c:1d:e6:
17:7f:95:69:6b:0c:6e:b6:be:84:ec:18:67:14:07:
a6:2d:41:32:f6:8a:6c:c8:78:a2:5d:49:ed:ce:ac:
c4:47:80:40:a6:7d:38:7c:14:92:34:2e:3f:ec:47:
89:94:b8:ef:1e:35:42:cc:d8:ec:13:a1:e5:65:90:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D1:E4:96:2B:AD:E4:E0:98:90:35:AC:C4:59:CE:A6:CE:4D:50:D9
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:da:eb:f9:f7:dd:7b:71:d7:bb:da:50:f1:11:6b:dd:8f:
00:28:66:93:92:61:ea:c2:ab:f4:35:f5:3b:3b:32:28:46:fc:
af:13:6c:a3:c7:1a:85:41:32:8d:1d:da:d7:8c:ef:41:f4:70:
67:06:2e:f1:6d:d3:df:22:ac:15:52:c4:34:c2:7f:dd:f8:fe:
aa:73:2c:73:e7:e7:64:19:df:b2:a3:ae:30:c1:c2:7f:03:86:
60:db:22:34:9b:50:0a:45:e6:c6:ab:fa:eb:58:b8:ec:0a:13:
a4:9f:5e:eb:5e:69:56:fd:94:e0:7c:46:a4:61:67:91:84:ed:
70:c3:dd:36:1c:c3:5a:a4:1e:f3:25:f1:f0:01:d5:01:7b:e9:
2f:18:bf:8d:31:f8:9a:79:fa:d3:a5:e3:be:bf:5c:15:5b:4c:
40:dd:83:84:37:14:9f:69:56:a8:cc:aa:e4:36:36:a1:a2:cd:
0c:94:cb:76:55:c5:cd:87:cf:85:82:01:86:cf:2d:f2:98:bf:
83:21:f8:07:52:74:f7:17:7a:18:84:08:0d:24:d8:31:99:3e:
e7:cc:be:c5:f1:09:2b:6d:5f:6c:48:82:9c:b0:68:72:a0:d5:
93:8b:de:7e:02:3e:2f:16:21:d9:65:f3:b6:5e:7a:8e:85:b0:
d5:ca:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client