Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json)
Hash identifier: +D0t5U27SvR6XTZeKjIObw8IfJV1tLjxFrC3HpyqUg0=
Subject key identifier: DA:12:3A:D3:E8:1D:E2:A0:0C:DF:46:AE:93:B9:A4:7C:AA:6A:FD:42
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019A22F773C0EC1FE47AEFA5E4EF5EC8BBC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 00:00:33 +0000
Manifest this update: Mon 27 Oct 2025 00:00:33 +0000
Manifest next update: Tue 28 Oct 2025 00:00:33 +0000
Files and hashes: 1: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: 5PLDSO+5E3MRB5Od2sWuHN3qu4m/QnswuHEP7PERilM=)
2: hnLpwyr61Y9rfW-orNijGQDSlok.roa (hash: JEbPbaPqAJUCWgWRtGXMytB73uHDdZ/eD28RxoLxK4I=)
3: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (hash: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:73:c0:ec:1f:e4:7a:ef:a5:e4:ef:5e:c8:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Oct 27 00:00:33 2025 GMT
Not After : Oct 28 00:00:33 2025 GMT
Subject: CN=da123ad3e81de2a00cdf46ae93b9a47caa6afd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:af:02:8c:11:63:99:aa:39:75:7e:0a:89:
32:f2:61:7d:44:ed:3c:8f:e5:d9:7d:15:fe:ae:e8:
e6:84:4a:f0:29:a3:61:bf:93:f4:fe:66:ad:57:10:
90:0f:33:5d:80:17:f6:9a:87:09:13:4b:31:a4:1a:
a1:3d:fd:09:44:64:31:d2:aa:9f:55:9e:d0:c0:8a:
df:05:0f:16:3a:0f:0d:4a:24:d9:20:16:d5:84:95:
92:1a:09:38:81:08:4c:7e:21:15:9e:1b:5c:d0:c9:
c8:14:33:bb:dc:aa:d7:1a:bd:d9:29:60:84:37:54:
f5:31:4c:eb:73:06:96:04:79:54:b4:14:f8:49:63:
57:e4:3d:f2:43:21:f6:b2:87:cb:c5:4c:20:bf:2a:
0b:28:77:8c:da:73:84:14:cc:fc:ae:c1:25:0d:50:
8a:48:ef:1b:91:97:ab:8d:a4:b3:98:3a:e3:65:90:
ff:e8:e4:a1:2a:44:ea:36:36:02:d0:fa:80:ed:72:
5e:58:17:f8:c3:02:2c:4c:f9:c4:2b:79:1f:e3:e4:
ec:b1:a1:c6:aa:e1:db:87:1e:ae:5a:67:17:ec:bb:
ae:87:31:28:05:fa:6a:a6:e1:cd:a5:40:d2:fa:b1:
5e:44:e8:b8:62:f7:bd:fc:71:6c:57:66:eb:b0:94:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:12:3A:D3:E8:1D:E2:A0:0C:DF:46:AE:93:B9:A4:7C:AA:6A:FD:42
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5f:53:86:63:81:3c:59:ae:47:81:06:b7:ca:71:bb:fd:d1:
e1:66:dd:b8:41:94:a2:1f:e5:f3:52:aa:7a:1c:b8:71:d1:70:
6a:6f:4a:fd:51:dd:0f:1b:08:05:94:63:fc:ce:d4:74:a7:56:
a5:56:bc:01:86:9e:10:4b:23:67:18:a5:c0:36:00:41:92:6d:
dc:1c:ba:7c:03:b7:94:44:ee:fc:f4:0e:04:1f:8f:14:5b:28:
85:b7:52:27:fe:27:37:92:42:17:c4:67:b2:0a:c9:58:78:06:
42:72:34:a3:8c:7e:07:89:89:9a:a9:17:eb:35:77:7c:b4:74:
9f:f9:23:41:33:2f:ca:d9:19:38:96:3c:c9:be:f9:d4:b7:11:
91:e4:48:49:a9:f3:b8:5a:6b:12:27:1a:75:35:d6:36:4e:0c:
be:46:4c:0a:9b:78:48:2c:f6:00:5d:f4:b0:dc:6d:c7:ab:19:
63:88:23:e7:e3:53:66:dd:94:05:8d:e4:1a:2f:d3:67:47:79:
52:c2:e0:62:d5:ce:94:f7:9b:ce:33:38:6c:06:a5:ae:64:53:
0c:32:b8:cd:b4:de:48:e2:a9:fc:b7:49:31:d2:03:69:ec:1c:
12:1c:5c:1f:ad:d9:a4:8f:e0:ed:ba:e3:39:30:07:f3:05:42:
c4:2f:99:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:39:26 2025 by rpki-client