Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: dX6YMQ6REwxwRE6W/C1UG4UwA+U3rS3uhuBElXRcvK8=
Subject key identifier: D0:41:20:B3:94:BC:B4:3D:DF:0D:75:4D:B5:61:9A:1E:0F:D5:CB:BA
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019A21ADCEDAECDC592B3C525EE6A16EAEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 016B
Signing time: Sun 26 Oct 2025 18:00:29 +0000
Manifest this update: Sun 26 Oct 2025 18:00:29 +0000
Manifest next update: Mon 27 Oct 2025 18:00:29 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: E+WlLh4bD+DoafekJaoXb2Asq8wpkg8jcqOnsDgHR38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ce:da:ec:dc:59:2b:3c:52:5e:e6:a1:6e:ae:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Oct 26 18:00:29 2025 GMT
Not After : Oct 27 18:00:29 2025 GMT
Subject: CN=d04120b394bcb43ddf0d754db5619a1e0fd5cbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:bf:27:70:71:27:54:b3:fc:d9:86:11:af:
c0:b2:36:79:66:e8:f6:b6:8f:cb:b1:7d:e1:5b:fd:
82:43:21:7b:d0:db:af:dd:bb:2c:9a:e2:44:64:0a:
b2:3c:84:ef:a3:48:2e:8d:b4:18:2c:6a:c0:61:6c:
94:52:00:c1:3c:da:26:cf:b7:e6:35:67:4f:4f:29:
03:6c:50:39:91:1c:ca:52:f9:0c:e3:18:af:8d:66:
7b:56:5f:ad:1d:83:64:ee:16:8e:33:17:01:12:86:
43:07:d5:a9:f8:d4:2e:e5:9a:c4:af:9e:cb:10:55:
de:0f:9e:0b:f0:6a:89:29:0e:1d:d7:e7:80:77:09:
40:68:e6:8c:a7:c9:23:56:0f:08:ae:89:12:f8:c4:
06:da:4d:e7:1e:ff:a7:05:05:22:5c:9e:40:4e:30:
9d:f8:f5:c3:d0:28:b5:5e:f7:af:37:3c:e9:af:8e:
fc:5c:c3:0c:52:d7:72:c5:a2:c2:fe:b7:3a:10:42:
7b:1d:43:8d:d8:b9:d4:93:dc:48:67:b3:15:54:f4:
a4:8a:dc:3d:76:f3:23:5c:87:37:50:b8:39:0c:1a:
2b:90:aa:74:df:f1:3b:be:3f:7a:c9:d7:ff:be:11:
f1:63:09:e6:25:50:6b:08:50:44:91:e3:87:4c:48:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:20:B3:94:BC:B4:3D:DF:0D:75:4D:B5:61:9A:1E:0F:D5:CB:BA
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:cb:62:d2:68:f7:bf:76:19:98:71:16:27:fe:99:8e:98:e8:
e5:2d:70:b9:49:93:b7:7c:86:b3:b0:f3:19:1d:26:e1:38:e1:
5f:23:fa:25:5c:cf:e7:29:8d:1f:15:88:2f:11:e8:86:8e:26:
6b:b2:9a:52:ed:e9:8c:44:9f:e4:0c:96:27:f5:b6:0c:b3:90:
ca:e1:86:e1:ae:1e:63:28:40:f2:9e:a4:81:be:4a:32:81:a3:
0c:58:eb:42:9a:7c:fa:14:bd:62:b1:81:71:25:67:dd:04:96:
a2:06:c0:70:7f:50:39:2d:c6:cc:0f:38:7e:24:66:f9:35:3e:
7e:23:60:89:ef:1d:d4:cb:90:2a:fe:a3:2a:ba:6c:d7:24:b2:
49:f5:30:1c:9c:cb:6e:9b:57:ef:eb:31:b3:19:1e:d6:45:63:
17:53:cf:43:c2:d6:d6:03:1a:9b:c2:f4:04:55:9f:0d:40:c4:
d4:59:bc:eb:24:4c:30:6f:20:9c:20:38:90:6b:56:bd:47:fd:
d9:54:c5:5c:2c:ef:7e:c3:ea:b2:c3:6a:df:55:85:33:46:92:
23:1f:6f:36:67:1b:09:e7:38:ff:7b:36:70:26:97:23:59:43:
25:50:97:fb:5e:3b:59:7b:4a:cf:87:20:5d:b9:fc:0e:47:0f:
20:e9:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:33:59 2025 by rpki-client