Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: Wz7v9bnj3IH/Ihw/1uutkrzbVUs8OOSr235wfxJYdNg=
Subject key identifier: B1:32:47:74:C4:39:D8:47:63:C8:37:60:8B:0E:6B:B7:C7:FB:15:CA
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019A228A6545826285A0759B4F81104C9DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 22:01:26 +0000
Manifest this update: Sun 26 Oct 2025 22:01:26 +0000
Manifest next update: Mon 27 Oct 2025 22:01:26 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: X1u6CqIlO84P071F6grWMLGM8VhQlgy5Tb1sU/kTvm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:65:45:82:62:85:a0:75:9b:4f:81:10:4c:9d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Oct 26 22:01:26 2025 GMT
Not After : Oct 27 22:01:26 2025 GMT
Subject: CN=b1324774c439d84763c837608b0e6bb7c7fb15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:a7:32:d2:2e:85:63:ca:18:e2:34:5b:6d:
53:4b:07:06:bb:eb:a8:f2:b5:0a:81:15:f8:50:8f:
e1:a6:5e:8e:cc:97:de:33:c8:44:e6:f1:56:66:f6:
b0:76:1f:a6:eb:e3:03:05:0e:0f:c9:a5:a3:3e:de:
a4:f4:d1:eb:bc:b7:83:be:3c:cd:59:ef:2e:30:68:
cb:c6:ff:ea:a6:3b:d1:7f:26:27:50:8e:cb:7d:3d:
b9:e1:26:fb:0a:a1:67:f4:3e:c3:e6:a2:85:ad:7c:
d0:ca:4d:9f:c4:0e:1d:aa:ae:65:d1:2f:6c:3d:44:
10:0d:e0:27:db:99:4b:b4:65:de:ca:6d:00:69:c6:
c4:d7:84:20:f3:d7:8a:0c:44:76:9a:90:d0:df:f9:
3c:d3:f6:f4:ed:68:bc:1c:d8:ee:0d:e3:8c:b7:e9:
f3:a8:24:9b:49:4b:56:e0:3f:8d:e4:9c:66:e5:cd:
0e:83:54:31:b2:64:1e:c9:07:f5:b5:cc:38:38:49:
8d:6f:39:8b:e9:2c:5a:70:f2:3d:6e:b9:56:b3:65:
ca:e1:84:0b:46:d9:22:5c:bb:69:3a:15:d4:b3:8c:
3d:02:67:ac:b2:3b:4d:c6:87:3c:e9:35:4f:16:e7:
f3:f2:1b:17:67:03:36:0b:34:a6:71:1b:e0:37:c8:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:32:47:74:C4:39:D8:47:63:C8:37:60:8B:0E:6B:B7:C7:FB:15:CA
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:0f:79:57:86:d8:11:42:69:56:c7:a2:7d:3b:4f:5c:7b:
e6:9b:a7:b0:43:38:af:b1:93:5a:39:56:43:0a:95:32:a1:36:
99:89:b5:9c:b0:b3:20:fc:bd:f6:cf:32:dd:4d:b8:41:1e:20:
8d:7b:f7:9b:97:ef:54:8f:83:72:35:d4:68:bc:5f:c8:ab:a9:
cb:16:52:78:31:df:f9:e3:42:5a:aa:e4:22:fa:b1:46:a6:44:
e0:ac:28:73:d5:8c:15:3d:6a:73:f8:dc:e7:b0:57:b9:98:5d:
35:5c:0a:ce:33:f2:ce:7b:7b:23:86:f5:39:6c:ea:e4:da:de:
db:9d:4e:75:f4:4a:32:21:20:05:74:69:c6:83:31:4c:00:ba:
6c:68:e8:8f:93:3d:78:d7:d4:87:53:e8:c8:88:8f:c4:4b:de:
f9:35:b7:f0:6a:32:b9:58:0b:0d:cf:23:3c:da:32:ee:2e:c4:
d9:2d:e4:db:7a:5a:68:9d:82:ba:bb:be:40:f3:d7:93:ca:86:
c4:4d:a6:63:49:4e:96:fc:7d:6d:0b:ff:ba:e3:f7:02:9d:f0:
e9:5e:36:51:23:bc:9b:20:0c:f6:75:06:82:a2:aa:a8:7e:0a:
75:65:8a:63:67:82:cb:34:51:84:2b:1c:32:f2:18:b9:0b:08:
4b:ab:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:02:09 2025 by rpki-client