Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: S7EusWfxk0L/pse8wwt45Gbzm8qT0y+IACO/1MECBwM=
Subject key identifier: AD:B7:61:B3:53:9A:39:75:DA:83:4D:F6:77:3E:F0:23:93:B9:2A:31
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019A1A2B71FE97FDF6DFE74C972C55A46BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 16EF
Signing time: Sat 25 Oct 2025 07:00:46 +0000
Manifest this update: Sat 25 Oct 2025 07:00:46 +0000
Manifest next update: Sun 26 Oct 2025 07:00:46 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 9cguX882hRgjA238EHo2iJIiXFdh5ridKj1DlfU3Msw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:71:fe:97:fd:f6:df:e7:4c:97:2c:55:a4:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Oct 25 07:00:46 2025 GMT
Not After : Oct 26 07:00:46 2025 GMT
Subject: CN=adb761b3539a3975da834df6773ef02393b92a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c1:b2:19:82:63:00:81:70:8b:ae:7b:db:8c:
c1:bf:fb:4e:65:ed:24:3b:d5:e6:e9:7e:51:f4:1b:
82:b4:be:f6:1c:97:3a:55:61:98:cc:6b:ad:bf:88:
62:aa:49:14:b6:5b:18:4b:a0:d3:23:da:2b:13:b7:
63:f0:5f:e4:5a:20:02:89:20:74:b6:b8:83:f3:f8:
6b:80:4b:ae:cd:6c:bb:cc:ee:6b:5a:2f:00:e7:b6:
23:6e:a4:ab:af:af:b7:1d:b6:30:79:f2:29:a2:19:
d3:3b:2d:6c:12:1a:e8:84:cd:c9:87:b3:e8:55:a5:
d7:a7:82:b7:4c:50:be:92:a2:0f:7c:51:68:09:71:
d4:57:13:3b:df:8e:f1:cf:a1:5a:98:a7:a4:78:53:
4c:23:69:ba:82:eb:8f:23:a4:40:fc:84:98:2c:6c:
19:f8:1f:d5:e9:af:3d:c9:dd:d3:35:66:6b:22:5c:
57:2a:9b:8a:d3:a7:fb:02:c9:fe:ef:79:86:41:6c:
c9:2f:a2:87:1b:62:96:08:87:47:84:73:6f:65:78:
2d:2b:d5:72:eb:69:63:06:fa:00:c9:05:95:1e:2a:
3e:82:6d:9d:0f:3b:45:d3:08:1d:48:10:df:18:19:
42:7e:e3:bb:41:0d:6f:c3:31:3c:cf:8f:ed:ed:cd:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:61:B3:53:9A:39:75:DA:83:4D:F6:77:3E:F0:23:93:B9:2A:31
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:70:ef:1e:9f:72:17:ec:db:42:d9:c4:3c:84:b3:b4:a4:be:
ba:1c:54:8a:13:68:f2:0f:ac:4a:9a:93:b5:c0:03:44:8a:a0:
2a:11:44:8f:51:b9:e1:d4:22:85:73:fd:71:cd:a0:64:a9:3a:
ef:d7:3c:3a:39:48:7f:c8:1a:a3:e0:65:a9:9e:a4:ac:17:67:
7c:0e:b7:58:12:da:4a:e7:b6:7a:c5:da:3f:98:b4:2b:25:34:
aa:b0:ac:ad:11:3f:e7:f0:f8:ac:c9:d3:a0:9d:15:a5:3d:d2:
0b:ba:bc:1d:46:77:1e:09:e9:81:bf:91:37:9d:95:ff:ff:ca:
5e:1b:e5:04:65:c5:21:e5:49:f4:55:9a:31:20:a5:7f:f0:90:
2c:97:a5:fc:22:5e:4e:75:2a:b9:06:6c:cf:f7:91:26:f5:79:
c7:5a:9f:8b:cd:3a:a2:77:84:eb:4c:8d:6e:70:36:8a:07:30:
ad:ae:21:e0:48:f7:a4:cc:51:f7:8b:a7:91:d6:90:8d:43:b5:
25:57:96:00:66:dd:51:ac:ad:9c:5a:dc:57:b2:cd:2d:6a:ee:
41:6b:72:4b:47:11:1a:75:c6:c5:fc:c3:38:eb:f4:3c:16:95:
9a:a7:3f:91:a7:95:98:c7:6e:d1:e4:d1:da:7d:6c:45:c3:da:
fa:1b:18:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:20:44 2025 by rpki-client