Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: n3ITGkCVkiQ16xYZopoBVR+MGWGzgP9eCTLskyJtOj8=
Subject key identifier: BF:30:B1:09:AC:31:48:E1:D4:30:05:D2:A3:EF:A4:EE:F4:D1:1B:2B
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019A1C5034D4C25D56DF864B74BA034B0B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 17:00:09 +0000
Manifest this update: Sat 25 Oct 2025 17:00:09 +0000
Manifest next update: Sun 26 Oct 2025 17:00:09 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: 5hudFnPO2vQC+Ap69VfOaxY/vmI2G5mY5FgwO5XWXY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:34:d4:c2:5d:56:df:86:4b:74:ba:03:4b:0b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Oct 25 17:00:09 2025 GMT
Not After : Oct 26 17:00:09 2025 GMT
Subject: CN=bf30b109ac3148e1d43005d2a3efa4eef4d11b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:63:f4:81:fe:8d:a7:17:8d:47:e5:a3:ae:
4a:f7:a7:0b:02:82:cf:ba:e4:21:27:28:0a:6b:85:
f4:77:cc:f0:78:d8:66:13:e9:36:a1:b8:9b:e6:ee:
9f:f3:cb:14:f1:ca:16:11:70:b2:2f:a3:35:b4:7e:
a6:f8:31:5e:34:be:2d:e1:42:d2:ed:62:5d:b3:ca:
42:36:3b:23:f6:f3:af:ad:b5:da:a9:01:33:ae:1a:
1b:c0:45:ba:69:14:95:91:93:10:3a:03:39:40:c2:
77:21:65:1e:34:b7:84:49:13:14:6e:8e:e0:fd:9f:
8c:26:63:89:e2:ae:3d:0f:ed:f3:b2:21:30:b5:9b:
7f:b8:63:a0:ea:a5:5f:40:45:59:40:a5:84:eb:f4:
88:e6:fd:5f:f6:4e:07:09:70:fa:54:62:34:08:36:
38:a3:48:df:b0:41:d9:69:af:93:2e:a7:87:c7:19:
0d:5b:60:9f:18:b7:d4:d5:b3:d8:97:40:43:cb:04:
e8:d4:78:26:2e:d0:5b:83:62:d9:1c:45:50:6a:89:
67:f6:f4:97:48:73:fa:b3:f7:14:4a:a3:06:bd:d8:
0f:67:cc:13:73:0d:ba:83:65:de:a9:ef:75:ef:3b:
78:ce:8c:a4:3b:3e:d0:c6:c3:1c:f2:7a:b1:0c:41:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:B1:09:AC:31:48:E1:D4:30:05:D2:A3:EF:A4:EE:F4:D1:1B:2B
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c3:16:e6:41:34:3f:fa:4e:c8:5b:30:60:a3:7a:14:b6:79:
94:dc:36:b9:2a:9a:00:c9:19:6f:18:59:fb:d6:5b:74:0b:f5:
90:4b:45:94:f4:8a:0e:bb:8e:7d:21:3f:05:dc:e3:80:e9:ce:
3b:46:a5:53:e4:f1:e8:c4:b9:42:cc:47:06:a8:ac:e0:44:9b:
4d:23:81:dd:f6:dd:00:6e:97:36:35:08:1e:3b:e1:f4:25:5d:
f3:25:48:07:9b:ae:52:a3:02:ac:57:63:01:d8:e4:a1:33:4e:
eb:99:86:8f:a2:f6:0d:3d:8e:71:a1:2c:f9:ab:14:74:3e:24:
37:db:b8:d7:e0:45:69:0c:9f:3c:5e:3f:5f:fb:6a:ea:81:c1:
bf:f0:5c:dc:d5:a9:24:7c:92:3d:66:a5:bd:8e:c0:25:9e:2e:
a3:f8:75:63:2b:d7:41:47:ad:92:6a:da:ee:8a:d2:47:2b:e6:
b7:e0:b7:3c:50:f4:d6:60:70:e0:fc:74:b7:93:7f:3d:80:43:
30:79:51:da:74:14:5a:66:75:05:66:3c:5c:85:78:8d:b3:3e:
c7:b4:a7:41:d1:82:4d:ba:bb:3a:c6:b5:1a:f8:07:5e:18:12:
11:86:5f:f4:90:d9:e7:26:17:fb:78:a6:d2:a3:03:7c:37:2e:
94:2f:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:03:59 2025 by rpki-client