Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: xY+98p5oa7FEmxW7ZUCvBJYQ06vZ8UDLwIglmKzDcMI=
Subject key identifier: F4:DC:1D:6F:1E:EE:03:21:F0:E8:28:3F:AF:55:E4:40:91:4B:50:5D
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019A266704DC63472DCDA113FC7EDF58B00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 16:01:16 +0000
Manifest this update: Mon 27 Oct 2025 16:01:16 +0000
Manifest next update: Tue 28 Oct 2025 16:01:16 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: eDqs3nM012R/4mm5+5S35tb2ZgX2NbRvjt7LulW8iOA=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:04:dc:63:47:2d:cd:a1:13:fc:7e:df:58:b0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Oct 27 16:01:16 2025 GMT
Not After : Oct 28 16:01:16 2025 GMT
Subject: CN=f4dc1d6f1eee0321f0e8283faf55e440914b505d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:10:87:6e:f8:64:60:e8:b3:b9:28:56:46:
59:ed:86:03:4f:ae:2b:66:29:88:2a:f9:a0:8a:a2:
3a:31:03:dd:d6:6c:c6:46:6c:f7:14:d2:7e:7c:e8:
77:c2:1b:f8:15:94:17:ae:d2:0c:e9:75:2f:80:99:
9a:2c:4b:09:6b:47:8f:4c:29:78:94:3c:ee:c4:6f:
8e:b8:3a:e8:46:07:43:82:a2:af:ec:d3:b9:5b:ae:
6a:b5:b0:3c:80:59:b4:59:02:b0:63:9a:78:7e:26:
5d:8c:c1:6b:06:f3:70:46:ff:ea:ef:f8:fc:1d:1e:
aa:ee:ca:e0:09:f1:88:a6:9a:8e:33:42:f6:1c:4a:
d9:61:79:ce:44:2b:81:a9:94:dc:d1:4c:19:4d:54:
25:04:4f:3e:ef:5b:8c:8d:1c:dc:4b:b2:7c:f4:0e:
6e:a4:22:3b:53:d9:5d:1e:12:86:65:42:c1:a5:77:
22:8d:76:59:c5:b3:cb:08:fe:81:b0:e2:2f:41:59:
e1:21:e9:45:a7:00:94:6b:90:0b:4f:fa:6b:23:6a:
1b:b0:e5:33:f6:91:59:c5:93:04:58:91:00:b2:97:
34:1a:24:fd:85:55:e2:8b:f2:10:c6:2b:e4:f0:02:
02:04:34:3c:d5:7d:9f:1b:4c:f8:d6:78:3c:bc:53:
8f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DC:1D:6F:1E:EE:03:21:F0:E8:28:3F:AF:55:E4:40:91:4B:50:5D
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:02:2c:03:d8:50:d1:e4:12:07:40:0c:90:3d:5b:22:26:3c:
af:2f:12:a1:5b:72:ae:4b:4d:39:18:12:27:c1:2b:3c:90:d2:
04:b5:36:12:5f:8c:1f:3b:dd:05:ea:3c:7e:c6:d8:88:c5:9b:
b4:26:80:2e:ca:0d:93:df:05:3b:46:3c:f0:87:d2:33:14:70:
cf:61:c3:7a:02:9e:8a:ef:f1:04:8f:ec:0d:60:a9:0d:b1:ae:
e6:ba:8b:e4:ca:14:c1:8c:b1:7a:43:16:65:91:95:cc:20:19:
aa:17:7a:07:1e:87:46:a4:71:e5:15:99:01:7c:cf:33:bd:7a:
a5:aa:1b:9c:26:c9:12:87:58:db:2c:76:b8:7a:96:ea:62:9c:
76:df:ee:3c:f4:2a:93:9f:73:c3:b3:f7:87:75:19:4a:55:c3:
21:fd:b1:f4:81:cb:b6:3b:da:90:81:a5:f6:ef:0f:e9:1d:c8:
ee:1c:27:af:d6:1d:bb:ef:ba:5e:ff:47:72:4a:eb:c2:aa:67:
8d:b1:07:a6:76:07:25:78:ce:b5:97:3d:07:0f:5b:39:bd:d6:
92:fb:82:06:d8:7b:b1:b4:80:16:81:aa:42:37:7f:2d:04:cb:
53:90:43:38:c7:96:ad:b9:d3:5c:60:47:bb:08:4d:ca:57:d3:
9e:e5:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:06:23 2025 by rpki-client