Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File: B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier: 4RfSG9ZBdPYteAZSy9PHAj87GP+83HgUJpDlY3oNQN4=
Subject key identifier: 8C:CE:B9:8D:21:0F:8D:B7:F6:C7:DC:9E:F5:59:21:57:81:B1:D2:70
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer: /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial: 019A202D81DA0AD1D2E67852E5AF2AB1E736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 11:00:44 +0000
Manifest this update: Sun 26 Oct 2025 11:00:44 +0000
Manifest next update: Mon 27 Oct 2025 11:00:44 +0000
Files and hashes: 1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: lj1Y6UKSBU5uMMiav1arhPFzYEWYVfD0I+oMyMxpaNA=)
2: tp-dB2xKIA-Dznn_c4mvWy8vGjo.roa (hash: lUu46cTL71HHo1Gr7lMNLrh2M9SW7foXyhj6RDawOf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:2d:81:da:0a:d1:d2:e6:78:52:e5:af:2a:b1:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Validity
Not Before: Oct 26 11:00:44 2025 GMT
Not After : Oct 27 11:00:44 2025 GMT
Subject: CN=8cceb98d210f8db7f6c7dc9ef559215781b1d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:11:b2:b2:95:4f:6f:96:7e:ca:f0:1e:f7:
85:d9:aa:8b:59:0a:0a:75:1c:08:1d:77:60:79:73:
9b:e0:46:2e:0f:a6:00:65:80:19:23:09:37:8a:e9:
95:3f:7e:45:e5:f7:43:53:ca:f8:eb:e8:e9:dd:b3:
ea:a8:b1:64:67:1d:ef:b2:2e:f4:d6:91:82:d3:c2:
6b:71:7a:fa:84:20:2a:3b:36:54:a7:e0:36:f3:d8:
90:6b:11:7b:93:c2:76:1f:d8:fb:e7:f3:47:22:a9:
87:20:e6:2d:3d:47:06:3f:2b:65:00:5c:30:3b:01:
e2:96:2c:64:23:40:1b:98:71:0c:7b:37:f5:8e:84:
90:49:7d:11:20:de:3e:30:e3:8b:f3:b8:82:ef:3a:
6b:0c:3d:19:d5:78:6d:a5:56:95:4b:cb:7b:87:e6:
f8:ea:c0:ac:8c:18:89:41:71:84:05:d0:73:c2:24:
dd:7e:81:3f:59:27:25:62:fa:a5:e5:4c:14:01:32:
8d:12:68:98:5b:36:c5:95:db:de:92:7b:40:c1:65:
fd:4c:23:a1:ac:ab:aa:ef:f6:c9:1f:77:f9:1b:3c:
d0:02:1b:55:ad:1d:1e:e3:7a:e7:4d:dd:e7:15:4d:
ad:28:c1:5e:73:52:55:eb:d8:26:dc:3f:04:d1:92:
c8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:B9:8D:21:0F:8D:B7:F6:C7:DC:9E:F5:59:21:57:81:B1:D2:70
X509v3 Authority Key Identifier:
keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c5:c4:44:6d:6e:15:8a:50:e7:bf:3e:30:eb:9a:f1:73:e8:
24:4e:fb:b9:a2:c2:ca:79:fa:79:c7:2a:7a:2b:73:d0:95:17:
05:67:a9:33:8f:f1:3f:a3:72:82:90:e9:30:5b:2f:dc:67:43:
fe:61:72:d6:93:dc:62:af:ca:b7:ea:7d:5c:94:fe:1b:e2:b3:
63:9b:b4:2d:96:bb:37:65:3f:34:69:c2:70:55:83:52:72:3c:
32:c1:4f:63:13:16:a7:88:b8:ea:ec:20:4e:9d:36:ad:5d:0a:
14:ad:e1:a8:be:35:c6:ed:8b:fc:0f:b6:ef:9d:0d:af:68:69:
14:ae:fe:2b:7c:b7:6b:2f:e1:8e:53:30:64:63:1b:00:df:a9:
17:51:cc:dc:33:8a:f6:fb:9c:6c:65:68:1f:55:d6:65:4c:b6:
58:12:00:75:37:0c:26:35:0a:16:f2:70:53:a3:8a:c7:bc:e4:
91:3c:ca:ff:59:77:96:af:fd:cc:7b:e8:27:0c:25:e6:f1:e7:
30:da:e2:24:89:f0:af:52:68:52:74:0e:d1:f6:4c:74:3f:21:
5d:4b:9c:b8:84:f7:90:5a:00:bb:36:94:77:d7:a7:a4:67:b5:
a9:b2:f8:9f:3d:77:19:7c:c5:2e:08:f7:0f:6c:9d:6f:05:bd:
2c:30:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:49 2025 by rpki-client