Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
File: i70nOhRTYWFVEmDYSNdvomRGzUY.mft (raw, json)
Hash identifier: GtBpCWOb/gaF0T3E746qwha5+6QEDdmhzbPxGh1LBuY=
Subject key identifier: 16:F0:ED:C3:74:35:6E:AD:8E:2A:85:9E:CE:B3:4D:1A:83:99:B5:03
Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46
Certificate serial: 019A71EEA7B1E888D07F585BC7F7FC439116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
Manifest number: 02F7
Signing time: Tue 11 Nov 2025 08:00:56 +0000
Manifest this update: Tue 11 Nov 2025 08:00:56 +0000
Manifest next update: Wed 12 Nov 2025 08:00:56 +0000
Files and hashes: 1: i70nOhRTYWFVEmDYSNdvomRGzUY.crl (hash: zj+sA/014GnCqh41Aqn+/y0pOd0A77gbR5jsQ50gCDU=)
2: iW3M8w8EnOfRKmq5UL0Jzk_nXrc.roa (hash: vQxUQ/gQ4diOyDGNSgt4mcIRpvqTprh0PY77byZ05KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a7:b1:e8:88:d0:7f:58:5b:c7:f7:fc:43:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46
Validity
Not Before: Nov 11 08:00:56 2025 GMT
Not After : Nov 12 08:00:56 2025 GMT
Subject: CN=16f0edc374356ead8e2a859eceb34d1a8399b503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:43:fe:b1:71:f6:73:fa:7c:5a:25:ff:fd:
6e:12:4a:25:dd:88:5d:b8:9b:d4:b2:3b:58:cf:3a:
c0:59:8e:7b:66:df:df:d7:fe:9b:fe:60:bb:a1:a3:
9e:d5:cf:76:5c:c7:57:66:4a:bc:ba:41:9d:81:c0:
b5:66:bc:ad:55:c2:1b:e4:33:3b:ee:ec:a0:65:ca:
c8:83:30:de:f9:6a:54:89:85:e0:45:0e:06:42:de:
09:dc:c0:49:95:fb:bb:dd:fb:5b:7f:94:40:2e:89:
8a:f6:ec:f5:53:88:d7:7e:33:f2:4c:e0:3f:28:5b:
35:12:45:9c:e7:00:b1:80:c5:b2:80:0b:6f:cf:84:
69:47:81:6a:00:ad:d6:7e:85:3b:56:3d:d2:21:8a:
e1:70:fb:2c:f4:06:f6:ef:7b:ca:39:87:89:42:e9:
24:78:77:b8:af:60:19:ae:c8:69:6a:15:41:b2:92:
3c:23:1b:03:d1:a1:67:3c:bc:39:51:23:d3:c9:3c:
6f:29:6c:47:e0:d1:5d:8c:56:46:ae:5b:72:26:f5:
71:0b:6e:87:bc:30:a7:a7:44:cf:a2:f4:c8:86:10:
53:bb:ca:53:a4:53:6d:cd:a1:25:9b:39:4e:84:7d:
b3:a8:6a:e2:47:cd:fb:fc:1d:a4:54:62:07:0d:99:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F0:ED:C3:74:35:6E:AD:8E:2A:85:9E:CE:B3:4D:1A:83:99:B5:03
X509v3 Authority Key Identifier:
keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:be:71:28:61:33:ee:1d:ba:75:de:9c:1a:72:66:e4:2e:5a:
86:26:f8:5f:21:0f:08:a9:fc:75:45:40:7f:2d:ec:5c:2c:a2:
63:24:3d:88:53:7c:0c:29:dc:c1:1c:9d:7a:65:44:38:3c:6d:
ef:90:33:10:64:1c:4d:9b:ed:b0:7f:6d:20:6d:1d:c9:21:3c:
1e:f0:2a:a9:a8:6d:5b:bc:d1:a7:d9:a8:c3:1f:c9:82:64:d4:
b6:f6:4b:cc:5a:35:f8:07:51:34:6e:97:a5:e2:a6:44:a6:84:
3a:14:c1:fd:6a:a4:04:7e:91:da:9f:ea:c1:85:bf:2b:02:e1:
99:23:de:0c:42:9f:05:16:df:25:98:aa:b4:9d:ac:70:c8:e0:
f5:a1:6d:22:da:18:23:6b:d6:fe:a8:d5:bb:0c:8d:8c:89:84:
cd:00:02:21:89:50:56:03:b2:c5:49:ec:5f:c1:6f:c4:ac:cf:
4a:7d:93:6a:60:20:e4:e0:a9:5a:f1:02:82:31:88:31:19:54:
c5:51:82:76:bb:9a:b6:b9:2a:11:f6:43:cc:f1:32:f4:65:fb:
84:c3:1f:81:30:76:cd:06:3e:69:f4:3f:5b:96:32:7e:a5:55:
bd:36:3e:0c:4d:ba:ee:c3:c9:b1:56:fd:2a:da:6d:1e:b2:10:
77:38:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:51 2025 by rpki-client