Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
File: B16ZPnb51_pATWmmy2DUv5jyuh4.mft (raw, json)
Hash identifier: nPvpTSKf3XRpTZDKbDCMxEkrOfH6UKoAtXKQKc9EfQU=
Subject key identifier: 2A:BB:35:67:85:5E:CD:B5:95:B9:AF:D1:AF:90:54:1F:21:94:53:5A
Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
Certificate issuer: /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Certificate serial: 019A228AB8FB9B2CF73A43C781298CDD0157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
Manifest number: 0DD8
Signing time: Sun 26 Oct 2025 22:01:47 +0000
Manifest this update: Sun 26 Oct 2025 22:01:47 +0000
Manifest next update: Mon 27 Oct 2025 22:01:47 +0000
Files and hashes: 1: B16ZPnb51_pATWmmy2DUv5jyuh4.crl (hash: UqncTc4m75RDhJMTbffjDnc8R+h2LIELYLZgHi43apM=)
2: eQ-gR06b4zJqKEnaNnRmGDj0gZU.roa (hash: JTu+VCZve4g7YJ7lEl3E5gK1lzKHcSO10n13jSXvJvE=)
3: s_4M0Xn3RWdVl5Ee5amLr_m-SKI.roa (hash: PZMtSOH/plvjDd02CCjFt0ICQDy0I1QjX54XMQBvGFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:b8:fb:9b:2c:f7:3a:43:c7:81:29:8c:dd:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e
Validity
Not Before: Oct 26 22:01:47 2025 GMT
Not After : Oct 27 22:01:47 2025 GMT
Subject: CN=2abb3567855ecdb595b9afd1af90541f2194535a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:79:70:1d:ff:ea:5f:33:96:3c:d6:9a:f6:a4:
43:f7:59:f1:b7:38:69:3a:e8:5b:24:9b:c1:33:0e:
90:55:9f:7f:4d:69:19:f4:c7:80:92:f7:e4:98:89:
f5:e0:f0:28:45:17:da:bd:46:2e:bd:f4:b4:7e:d1:
3d:ae:50:0b:9d:66:84:2b:b7:25:5d:68:4f:1f:a1:
3c:38:d2:04:5b:6f:9b:81:e5:2d:53:85:bf:dc:33:
0c:ee:77:48:65:31:02:f8:0e:f4:2d:a9:07:95:72:
e0:d3:db:1a:df:87:f2:15:d3:27:b8:40:85:9d:51:
17:be:10:63:bc:6f:2c:d0:81:fe:47:69:45:4b:99:
f0:1f:4a:84:69:fb:91:12:da:43:e0:ab:e3:c3:0d:
8e:ac:7d:b8:99:aa:fa:0a:51:6c:6a:8c:a4:ac:24:
34:5f:33:87:51:b7:21:fa:d3:a5:50:01:45:c0:48:
de:17:4e:36:ab:f5:e8:d4:be:d3:d0:b9:35:0e:a0:
2a:a5:33:74:c9:d2:5b:45:01:e7:28:92:17:d9:62:
f7:43:1a:fa:a3:52:f2:de:ab:27:8c:72:8d:b1:72:
e4:a1:20:13:f0:33:98:f8:61:04:b9:af:a4:87:0a:
2b:7f:8e:82:4b:e0:d8:c6:3e:0c:53:fa:65:44:6c:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BB:35:67:85:5E:CD:B5:95:B9:AF:D1:AF:90:54:1F:21:94:53:5A
X509v3 Authority Key Identifier:
keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7c:09:b4:86:8b:ac:62:9f:30:8b:83:4f:58:59:f0:69:15:
5f:62:77:f6:f2:f0:f8:3a:44:cb:a2:9a:80:48:d7:3c:52:67:
4e:ee:5c:28:7b:ad:d6:1b:d7:cd:f9:a0:60:fa:fa:84:dc:1a:
c7:84:44:31:db:dd:ef:69:44:7c:2a:f6:af:2e:f7:e5:89:7e:
47:4c:bb:0e:72:d6:d8:b0:01:4c:5f:2d:38:0e:3e:14:b4:8c:
a6:ff:2a:15:45:d3:9f:14:98:1e:67:52:6b:5e:cb:84:ed:8b:
7a:5b:8a:e0:5f:a7:e1:6b:e6:d5:08:59:d5:7e:94:16:99:2e:
d2:81:83:b1:55:2d:56:19:c7:a5:52:e2:96:46:e4:66:2b:ab:
d5:c8:9f:db:c8:f5:1a:ca:e1:08:a5:da:db:0f:bf:32:6f:c9:
5c:93:04:a0:c2:1c:63:71:84:14:24:86:c7:fa:42:4c:78:69:
28:7a:30:ba:43:d2:cd:4a:35:8b:80:9f:ce:70:50:a3:47:67:
3a:42:48:93:01:d6:55:26:5e:b9:48:ac:07:61:6d:5d:6f:9a:
31:b2:00:d6:df:9c:1b:7d:a1:8f:22:3c:06:a9:64:5b:00:08:
80:b7:34:51:fd:60:96:5d:5b:ec:7f:fb:2f:2b:2c:e0:a2:99:
cc:de:09:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:27 2025 by rpki-client