Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: Bohkz27vBvWMiqZ9OLIffYQ1xDcYOp6fJvOG/KRca08=
Subject key identifier: 82:B0:EF:60:42:75:31:AE:16:E3:61:E0:A5:65:61:00:92:40:C9:F4
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019A26661E06CAD35E9E03159266195E897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 16:00:17 +0000
Manifest this update: Mon 27 Oct 2025 16:00:17 +0000
Manifest next update: Tue 28 Oct 2025 16:00:17 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: luZVpLGGXkYaLN7dojOs5USsMB4NMOpXqLXChjXEKbA=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:1e:06:ca:d3:5e:9e:03:15:92:66:19:5e:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Oct 27 16:00:17 2025 GMT
Not After : Oct 28 16:00:17 2025 GMT
Subject: CN=82b0ef60427531ae16e361e0a56561009240c9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:f6:55:b7:49:5f:5b:e7:76:64:7a:b7:ed:
7e:db:35:1f:48:14:73:6b:1f:65:00:84:00:c3:b4:
5f:de:40:7f:40:26:30:ab:d4:46:41:d0:d8:9c:1f:
74:af:1a:92:a9:68:34:f4:ac:8a:93:26:71:95:e8:
65:6f:40:c7:32:6e:4e:0a:43:86:0a:93:07:98:79:
ac:ed:cd:c5:e2:9c:47:a2:08:97:f5:cc:c1:a0:80:
1e:be:8e:fe:3d:74:02:83:76:96:34:08:6d:58:d2:
c4:b0:a3:b1:88:b3:0e:bf:27:95:11:d9:0e:10:cc:
ef:9e:7f:cf:63:0d:88:73:7f:64:dc:79:a7:4d:20:
b2:a5:03:30:e4:58:61:c5:3e:6c:7b:31:df:0d:dd:
ce:ce:9d:42:9f:66:48:7e:f9:a8:01:c9:e1:16:b8:
4e:18:d7:27:cb:ea:35:12:06:15:10:48:39:ee:c6:
17:2b:d7:68:c3:49:e3:43:e1:28:dd:16:e0:09:98:
47:60:46:c7:30:9e:d4:de:5c:8e:58:e3:26:06:78:
32:68:4d:2b:cc:b1:62:f0:d0:a0:ec:d1:52:ac:1d:
ac:2e:25:25:01:b4:89:8c:00:6b:04:bf:c9:76:2c:
98:3c:27:35:80:fd:ea:b5:4e:f8:df:70:c7:24:27:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:EF:60:42:75:31:AE:16:E3:61:E0:A5:65:61:00:92:40:C9:F4
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:50:45:67:21:d5:d2:94:69:52:f9:98:e7:0a:73:e5:d1:
e3:3a:93:d0:67:4f:c8:17:d0:48:97:bd:e6:9a:74:2c:b8:79:
5a:40:52:a3:44:a9:f4:16:e0:07:db:f8:26:15:ce:97:19:14:
c9:dd:b0:94:58:29:d9:28:f9:33:63:68:57:d5:05:bb:f3:00:
20:8f:04:f1:9b:83:45:a6:56:be:22:4a:18:84:8d:3b:10:4a:
20:f7:e2:09:ef:e0:f2:77:42:9c:f1:8c:b5:66:9c:91:70:93:
1e:c7:66:43:a1:35:8d:ca:f1:67:ab:a2:50:75:e6:5a:78:ed:
b2:7e:df:1c:86:28:c9:d1:9b:33:26:98:38:d9:ba:4b:68:07:
2b:29:15:a2:7e:56:d8:fe:a3:80:5b:54:89:6a:86:44:cd:1f:
fc:fd:e5:67:9c:9f:ac:6a:f9:c9:54:aa:5c:b8:16:77:30:1d:
3b:44:0a:54:bc:1c:c6:6c:e5:64:94:13:45:41:80:60:e3:34:
17:40:b5:3a:b4:da:ae:9a:f3:22:ba:38:92:f9:d7:8c:b4:36:
9c:75:22:07:04:e1:02:b8:28:f8:e3:6b:e8:c5:75:11:29:bb:
81:55:16:4b:75:8f:6f:17:e8:4d:11:cb:ce:50:81:c8:96:f4:
9e:0a:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:25:25 2025 by rpki-client