Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: O0XEui5S1G9R07ZnXt0Vxi/VWXs3JifuIcrxzwbrjzI=
Subject key identifier: FD:FB:6E:67:40:CC:E5:C3:98:72:87:7D:F0:8E:19:F8:62:19:89:EF
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 019A28F974C775156705B23A27C11049F0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 04:00:28 +0000
Manifest this update: Tue 28 Oct 2025 04:00:28 +0000
Manifest next update: Wed 29 Oct 2025 04:00:28 +0000
Files and hashes: 1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: 0ZYW4VBy2oeb4LYtzIvRzlIU2MGuc+gsRxD+qC94RuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:74:c7:75:15:67:05:b2:3a:27:c1:10:49:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Oct 28 04:00:28 2025 GMT
Not After : Oct 29 04:00:28 2025 GMT
Subject: CN=fdfb6e6740cce5c39872877df08e19f8621989ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:11:2b:23:fa:d6:64:df:73:ad:1c:a3:6d:
c1:c3:e7:af:0b:cc:56:a0:b8:a9:7b:59:86:f2:ef:
8e:16:64:76:9b:1a:70:ed:6f:d1:76:c7:27:13:2f:
cb:a9:f8:a9:ff:22:63:40:f9:0f:5c:8b:7c:bc:79:
b3:e0:c9:94:70:6b:dd:ac:a7:c8:86:88:a1:8c:9c:
fc:6f:65:dd:4a:6b:aa:84:b5:6e:12:4a:ea:9e:f3:
d7:38:aa:cd:3d:8a:ee:cc:69:d4:9f:1c:0c:8b:13:
95:d0:28:13:3d:dd:a7:9f:5e:06:df:43:41:2d:4a:
03:a6:99:a7:fc:ab:ce:ff:48:87:c9:f3:79:e2:bf:
98:72:54:cc:f0:9c:3f:0c:2b:bb:3b:16:a4:36:30:
6f:5c:e7:10:d1:b3:94:cb:22:ed:de:92:fa:05:5d:
9d:4d:c5:81:a0:72:ec:5a:05:19:16:4e:72:53:f5:
9e:0b:74:0d:12:0e:a4:00:59:ba:d6:2a:76:bd:55:
75:af:f9:4c:aa:38:b6:c1:89:18:6e:ff:ad:59:69:
3e:36:67:5c:d3:5d:ee:aa:18:29:67:30:f8:c8:6e:
8e:09:28:ed:bd:44:ad:e2:bd:37:c6:31:60:14:86:
4d:9e:12:75:17:d7:5a:5b:f6:02:ac:fc:3a:13:fb:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:6E:67:40:CC:E5:C3:98:72:87:7D:F0:8E:19:F8:62:19:89:EF
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:79:24:82:59:fb:9e:2e:96:73:a2:72:2a:78:f4:3b:8b:c4:
31:dc:d6:31:c6:fe:57:6a:49:9d:ed:e0:72:c7:21:3d:61:1c:
d2:0a:e0:46:38:13:2a:e0:de:1d:a1:26:18:10:08:67:1d:53:
61:43:97:26:73:d8:b8:50:30:32:bb:74:22:4f:ab:a1:f1:aa:
f2:08:c9:c0:fd:97:f8:62:b6:94:73:91:e6:67:4a:53:f4:fe:
66:52:e9:7c:b4:54:b0:69:43:cc:78:11:02:d6:e2:d9:de:9c:
30:68:30:cd:96:2a:12:f7:2a:d5:66:d5:56:e9:05:4d:d9:4c:
d7:c7:c8:1b:b6:44:a8:db:72:b5:79:14:38:c6:4b:1c:3e:d8:
60:3f:d9:40:69:09:a2:57:64:08:c2:d2:37:78:f8:9d:33:ae:
35:78:f1:17:29:af:a8:5b:b3:10:c5:19:52:5b:50:a7:8d:87:
0f:8e:8f:10:a0:a1:7c:75:2b:8c:d2:11:9b:7a:6e:1a:0c:84:
e6:19:82:99:1f:e9:ab:0e:2d:58:12:d3:2f:42:dc:1e:b2:ac:
f7:9f:d2:e6:df:97:51:98:3c:dc:d3:ac:b1:a6:ca:ec:f9:ce:
2f:ed:1a:fd:94:e6:88:c9:d6:1d:e5:a6:1b:5d:0e:92:0c:06:
a2:d0:4a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:35:31 2025 by rpki-client