Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: LzzdNKNl+G+sqbLN+al6xwnQNrVaALeyJaONhhg8CIQ=
Subject key identifier: 84:9C:58:53:6D:87:9A:AA:AC:EA:2E:D7:61:7F:F9:45:4C:FB:67:C1
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 019A01B52EDDC8676089561254E5973C9933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 13:00:42 +0000
Manifest this update: Mon 20 Oct 2025 13:00:42 +0000
Manifest next update: Tue 21 Oct 2025 13:00:42 +0000
Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: rBQo4O2z2oX5ZIsHF6IQkkZobDXx7/m6uofkms3LeW0=)
2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:2e:dd:c8:67:60:89:56:12:54:e5:97:3c:99:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Oct 20 13:00:42 2025 GMT
Not After : Oct 21 13:00:42 2025 GMT
Subject: CN=849c58536d879aaaacea2ed7617ff9454cfb67c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:17:57:24:37:05:36:73:8c:42:34:d8:a4:
e7:97:4f:12:d0:00:59:36:3b:89:69:33:7f:6c:3a:
9c:08:e7:f2:63:16:77:fd:a4:1d:02:ec:9c:6b:ac:
2d:1e:c8:b6:ee:3d:d2:97:80:ed:b8:a3:1d:dc:e4:
90:e6:9f:a3:e2:09:9e:68:4e:68:2b:a5:2b:61:8c:
03:92:8e:f2:5f:e3:4a:fd:82:0c:89:ca:2f:37:31:
89:8d:c3:28:c1:1b:d5:81:e2:1c:df:1e:ff:26:b2:
f9:62:6b:df:e9:d1:9e:95:ff:8a:4b:7d:be:24:14:
6b:13:b2:dc:ad:59:ef:fb:a1:ed:f0:f3:d2:5c:23:
99:51:da:50:b0:13:1b:a8:c2:1f:bd:38:e6:3b:30:
98:9b:53:49:61:51:4b:75:5c:2f:05:bf:87:22:a9:
fc:d0:dc:79:84:3f:43:39:e5:f6:47:ee:b0:91:38:
31:11:0e:81:70:d8:44:4e:59:b5:36:7a:ce:b0:e3:
69:37:c4:bd:b1:fa:2d:b4:79:31:04:3a:04:85:be:
62:c3:9c:75:d3:cf:c2:4e:8b:31:02:e9:23:e2:f2:
08:f5:f8:ec:b1:6b:47:cb:13:ff:a9:f7:7f:03:4a:
80:ae:ee:df:1d:ad:41:1d:01:cc:80:8a:77:7b:e8:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:58:53:6D:87:9A:AA:AC:EA:2E:D7:61:7F:F9:45:4C:FB:67:C1
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:1d:cb:ad:23:e3:f1:f8:48:cf:a1:1c:58:f8:95:ff:cb:
aa:49:54:72:4c:84:0f:56:7c:8f:75:53:e1:38:5c:ae:0b:fd:
f6:69:ea:aa:27:76:43:4b:46:ec:01:87:47:a3:d6:c7:eb:ff:
4f:39:63:63:65:28:72:5e:e2:a9:f0:bd:d6:d5:4b:a9:5f:38:
d5:6a:22:77:f9:64:6a:1f:58:5f:8d:46:fc:42:54:9b:23:d1:
40:67:c4:66:39:cb:41:be:ca:9b:8d:c8:06:e7:90:c0:b6:4f:
a5:90:a4:96:63:6d:75:8b:db:51:1f:bb:08:32:17:f7:e7:47:
e0:9f:e9:dc:bd:c0:95:72:40:7e:e9:5f:64:b4:bc:99:a8:48:
bd:43:a0:12:2a:ba:88:b7:29:f5:39:69:93:fd:d1:0e:e8:a3:
d7:83:4b:b2:4e:ca:69:1c:84:53:53:09:1b:74:e0:8c:f2:2d:
0c:9a:51:20:e1:aa:5c:f6:e3:01:b2:80:de:3a:84:81:f7:4b:
ee:6f:24:8c:62:d2:e9:21:83:fd:5f:04:8b:a1:7f:aa:a6:b3:
74:cb:ae:42:53:de:3a:8e:be:10:b8:47:d1:d1:81:28:e6:73:
2c:8a:61:30:19:8a:54:a7:92:49:4b:14:d2:e3:2a:a7:e1:65:
f7:15:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:08:42 2025 by rpki-client