Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: R5m2EOkv3/pfJwildR+TdwJhEvVmumjRSMLwDSEGjS0=
Subject key identifier: A3:4A:DD:E4:05:59:0B:59:CD:E1:A0:2C:E3:2C:76:74:63:F8:39:4F
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019A23659261095A40FD3E6BBBC5C56E2AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 02:00:50 +0000
Manifest this update: Mon 27 Oct 2025 02:00:50 +0000
Manifest next update: Tue 28 Oct 2025 02:00:50 +0000
Files and hashes: 1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: hMVJzAKLF1nxUmlHSZ0OzwuATvY7pCqfeiid2lzy0r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:92:61:09:5a:40:fd:3e:6b:bb:c5:c5:6e:2a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Oct 27 02:00:50 2025 GMT
Not After : Oct 28 02:00:50 2025 GMT
Subject: CN=a34adde405590b59cde1a02ce32c767463f8394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:38:c1:86:cb:0c:17:78:61:7b:e0:2a:53:
0d:00:67:e8:c2:a5:81:cf:3a:a6:fc:9e:dd:02:05:
04:50:b7:06:9e:31:90:af:4a:3f:16:ce:99:8f:fc:
f0:81:a6:fa:87:d1:6f:b0:9f:37:3a:ec:8b:66:39:
eb:4e:95:ba:38:0d:80:b8:f3:5f:c4:86:63:91:70:
f7:f9:f1:e9:e6:77:c5:a4:78:1f:bd:38:2b:cb:f4:
84:64:ae:c8:02:13:38:5b:ee:2e:94:7a:c4:77:bf:
a6:af:2c:57:63:9d:21:49:a2:b4:63:50:c5:e9:f9:
78:1f:23:4f:e4:b2:e5:33:68:00:df:1d:1d:c5:64:
13:79:79:e2:7d:3b:32:fc:3f:c9:87:94:07:a8:20:
5d:49:dd:e5:66:07:f5:b5:67:a1:d3:d5:91:81:ad:
c0:e8:fb:98:b2:5b:30:c4:c6:29:f4:f1:b6:aa:99:
5f:b2:21:40:0e:5a:23:39:49:a2:a4:3c:d9:98:d1:
3c:af:7b:15:73:51:fe:f7:a9:45:65:39:25:e0:7a:
1d:48:ea:cd:78:22:b5:74:65:ef:e4:5d:8d:db:6f:
ca:0b:9f:92:f6:5d:2c:eb:4a:51:02:67:7e:5d:db:
e1:8c:4e:ec:cd:a4:6c:2b:ed:bc:17:9d:59:73:ec:
7e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:DD:E4:05:59:0B:59:CD:E1:A0:2C:E3:2C:76:74:63:F8:39:4F
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c5:ca:8b:8f:3b:50:55:5d:c7:28:10:bc:b3:29:24:3c:ca:
73:cc:90:4b:f7:e0:fc:ee:df:82:91:a7:ce:02:9c:87:e8:96:
5b:d1:b0:f5:d9:ff:e3:e6:0a:72:17:af:62:f0:4c:46:52:06:
77:10:67:cb:6d:02:1e:3a:b0:f6:4d:8c:52:44:cb:e7:4d:69:
95:43:a6:b3:02:d1:ef:5c:28:02:af:f4:80:44:fd:88:96:f4:
52:b4:d0:15:21:ae:81:cc:12:ba:c2:35:ad:b7:79:e0:1a:21:
c2:b9:ef:9b:f1:57:39:09:02:03:54:22:b9:08:dd:1e:ea:ff:
b4:a2:91:f2:f0:46:4f:42:e9:36:b4:35:f8:7d:f3:be:6c:8b:
b3:44:4a:a6:4a:fc:d7:c3:dd:32:d2:3c:2d:0f:64:bb:e0:e8:
47:a0:ee:da:a4:de:68:d6:8b:e2:a7:e6:0d:41:70:b7:c5:a6:
87:b2:ee:4a:6f:4f:cf:f8:a2:f2:18:d6:8b:75:f6:10:c6:88:
5b:0f:77:9d:88:d6:79:a3:e7:ab:d7:ea:88:33:90:8f:eb:9e:
99:90:79:b5:ca:92:40:0d:29:f2:69:95:2a:7c:13:75:d5:f3:
35:1f:28:da:53:80:8f:c9:9f:8c:67:fa:b2:7d:eb:fb:a8:86:
3e:e5:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:03 2025 by rpki-client