Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: N2dH97+T22Ym9L4j5i4FZnuG2gSxYm1TqI+GKtqUPYo=
Subject key identifier: 0A:58:91:1A:F1:EA:51:09:43:0C:59:12:90:B2:3C:DB:15:97:25:5C
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 019A274276BE55443595F35A59B993E08FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 20:00:58 +0000
Manifest this update: Mon 27 Oct 2025 20:00:58 +0000
Manifest next update: Tue 28 Oct 2025 20:00:58 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: mOSphwOOEFvz5oEHDz9SV1pqxzpLzFhk7msp1MzZPOw=)
2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:76:be:55:44:35:95:f3:5a:59:b9:93:e0:8f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Oct 27 20:00:58 2025 GMT
Not After : Oct 28 20:00:58 2025 GMT
Subject: CN=0a58911af1ea5109430c591290b23cdb1597255c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:fb:33:76:2c:b4:eb:94:f6:c1:99:43:a7:
c0:97:54:b0:bc:30:ed:0a:18:48:cf:ff:9d:02:e3:
81:4d:64:1a:5b:0d:d3:6f:dd:3d:9c:3d:08:4c:d4:
f0:1b:4a:a7:22:29:f8:ca:c7:bb:a1:91:60:87:8e:
e4:4d:9e:98:79:69:89:c4:c2:2e:96:59:77:37:42:
af:f3:b6:00:e8:5f:2b:65:d3:29:a3:a4:87:29:ea:
1d:f1:45:b2:61:c2:59:cf:ca:0f:32:a1:24:19:5a:
78:2c:bc:a9:6d:dd:71:09:c9:dc:0e:32:c4:e1:c4:
82:d8:f1:29:c2:b5:b0:a4:cb:8e:a5:85:52:c5:2e:
60:11:0b:ba:a4:68:8b:07:ca:db:ee:d1:4a:f4:f5:
fb:94:c2:3b:b2:03:08:c8:db:07:ab:b5:b0:de:16:
1d:2c:5f:c7:f9:dc:31:27:69:38:02:23:8f:2c:d2:
af:36:6b:e1:06:c2:f6:67:55:f5:b9:24:b4:37:56:
6b:c5:9f:11:50:62:e4:76:36:85:3e:75:80:2f:09:
77:b6:2a:ff:5b:b0:85:c5:51:22:28:1b:c8:7c:6f:
1d:65:d8:67:c4:e1:66:74:bc:40:0a:69:89:99:70:
df:8b:b4:39:7e:69:d7:ad:12:44:b0:16:c9:96:3e:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:91:1A:F1:EA:51:09:43:0C:59:12:90:B2:3C:DB:15:97:25:5C
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5e:b9:38:d2:2b:6e:4a:19:f9:3d:4e:5c:1b:f1:a6:99:3a:
45:6e:a2:e5:71:92:2a:e5:af:28:78:ac:67:35:50:07:7a:37:
6f:65:49:a2:00:37:ca:76:3d:2a:2b:4f:a0:7b:57:0a:ea:0d:
13:4a:ea:86:22:4f:2d:12:19:f3:89:eb:e2:0b:ee:78:29:32:
c7:c6:be:19:ed:c3:5d:b4:16:6e:00:8f:34:17:ba:b2:2f:5e:
07:b1:ba:a5:a5:5d:57:c9:3e:13:b4:b2:17:1b:be:a4:2b:90:
3b:3c:b5:3c:c8:ae:41:6f:ff:d8:00:9b:7a:a5:2c:bb:8f:97:
23:2f:24:df:3e:6a:1f:c1:7c:53:5c:31:87:e0:cd:a3:aa:6f:
35:de:b4:23:1f:6e:f1:0a:86:a3:48:f5:93:23:a0:7e:1c:59:
50:04:ac:78:d1:8c:5d:84:d6:25:1f:22:c4:d7:e8:f6:e6:a0:
74:91:75:c6:31:d9:e9:2d:c8:3c:19:78:6b:87:b7:f6:6a:ae:
9e:f9:42:9d:76:41:3f:e5:d6:e9:17:a2:24:42:ad:22:f4:4e:
98:d1:3c:29:71:77:7a:83:95:67:25:ec:f3:97:ee:77:c8:3c:
f1:f5:36:4b:ae:eb:95:a6:e7:2b:cc:5d:b0:19:fc:1e:0d:e8:
24:92:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:43:49 2025 by rpki-client