Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: CHlDPHjo7Y2wPCh7cGOh3xF5/V0z2Hd5+DHd57kAu+w=
Subject key identifier: 0F:B9:3F:D2:15:B5:94:9B:C3:26:66:8A:C1:EE:BD:36:AA:89:90:B6
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019A28C2808A693E85FE127A004A2EBF3445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 03:00:26 +0000
Manifest this update: Tue 28 Oct 2025 03:00:26 +0000
Manifest next update: Wed 29 Oct 2025 03:00:26 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: JEUU731XRcOtHewLvMfVO0w3QRR1TSFbsacZDaxfyMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:80:8a:69:3e:85:fe:12:7a:00:4a:2e:bf:34:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Oct 28 03:00:26 2025 GMT
Not After : Oct 29 03:00:26 2025 GMT
Subject: CN=0fb93fd215b5949bc326668ac1eebd36aa8990b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ae:74:9b:68:58:37:c4:51:62:59:cd:ce:f3:
2b:e0:1a:cb:2b:58:ee:82:8b:66:41:40:b8:f5:40:
a9:31:83:70:ae:92:ab:f5:97:bc:4c:ce:2a:9c:b7:
d6:c9:d6:c2:be:60:17:e7:d6:2b:fd:79:1c:a6:b3:
fd:43:69:e3:a1:f7:ce:87:59:27:7a:3c:28:79:54:
ff:1c:69:ac:b2:06:d7:76:c8:e0:f4:de:20:84:e4:
a9:67:bf:e8:64:6e:6d:10:b6:4a:8c:f3:13:04:b1:
a7:7f:dc:e1:3c:61:46:3e:92:94:d1:33:2e:e8:0c:
93:bf:da:a1:e8:ad:f0:1d:b6:74:d0:c8:e4:3a:be:
f8:b7:33:d2:c3:42:38:02:4d:32:23:44:c5:3d:ab:
74:0c:e5:32:c8:e6:6c:16:31:0f:0b:85:0a:86:ee:
70:ba:43:5c:28:bc:d8:e7:a0:5a:26:97:28:73:4c:
82:ac:cc:e4:5d:bc:b9:16:3b:01:ea:be:65:8f:93:
0f:17:1a:0d:b3:7e:2e:b4:7c:24:11:96:3b:2c:b8:
56:ae:c2:79:ce:8c:70:4b:59:c6:a0:02:4b:6c:81:
f5:a6:27:93:48:7d:69:bd:e4:54:48:a7:66:60:85:
28:af:bf:ff:8e:15:d6:6c:0d:b8:c8:0e:d4:84:e7:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:3F:D2:15:B5:94:9B:C3:26:66:8A:C1:EE:BD:36:AA:89:90:B6
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:58:11:fd:85:62:75:da:6d:63:fb:6d:ff:f9:1d:12:bd:c1:
8e:c8:0c:59:94:d9:ce:f0:64:de:d6:e4:a7:4d:5b:e5:b1:05:
a7:6c:b7:c8:49:c7:24:cd:38:f3:7c:ac:9a:1d:c2:3a:a8:89:
09:69:f8:6e:f0:3a:c7:f2:ea:bb:0d:3b:e3:a1:0a:a7:8c:cc:
54:22:a7:b6:42:51:15:e8:7c:7a:19:aa:65:f5:c5:50:79:c1:
73:0d:76:cf:86:fc:51:73:01:b0:b8:61:55:ad:32:1c:9e:43:
2c:6a:63:bb:c4:80:58:0d:84:41:de:74:77:66:9d:c3:ce:10:
95:91:27:50:10:33:01:69:c4:4f:5e:ba:1d:e1:06:ab:72:f1:
7c:c9:35:cb:b9:09:7e:c0:da:1c:20:87:c9:1f:77:a3:4f:9b:
ba:ea:81:4e:26:c5:8b:e0:e1:54:ca:40:ec:c9:6e:11:fc:44:
c1:dd:91:e3:dd:65:dd:9c:0f:e6:ed:fe:e7:65:c1:28:7a:df:
1d:48:40:b9:40:50:6e:cb:1d:c9:47:e8:36:76:ba:43:f6:b1:
75:1a:8c:b7:94:e2:c8:bd:00:51:91:ac:b5:01:ee:97:3b:7d:
81:57:61:80:8d:bf:4b:14:a4:7c:33:52:66:29:49:b3:a7:e5:
3f:2a:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:48:31 2025 by rpki-client