Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: hQZghLmwZLwmzhtz8Nl9MjG86bREh5/Xhll211EIRlY=
Subject key identifier: C1:9D:A4:08:54:E7:A7:4D:57:C2:03:D1:F6:1F:D6:0A:65:61:CB:6C
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019A4E4F7D9C6A4445D41C6B01D6621BF37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 10:00:23 +0000
Manifest this update: Tue 04 Nov 2025 10:00:23 +0000
Manifest next update: Wed 05 Nov 2025 10:00:23 +0000
Files and hashes: 1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: dckLBM97qsypzJHpIu9YXtPjWcLwmYJCUU7Z/qxbX1w=)
2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7d:9c:6a:44:45:d4:1c:6b:01:d6:62:1b:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Nov 4 10:00:23 2025 GMT
Not After : Nov 5 10:00:23 2025 GMT
Subject: CN=c19da40854e7a74d57c203d1f61fd60a6561cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:85:3e:67:ed:3c:20:e8:cb:ea:7a:8c:d1:
61:8b:2b:64:86:7a:a9:2d:17:8e:1c:90:7f:6d:43:
ca:0d:f1:35:c2:28:e1:06:c1:5c:3b:ee:68:8b:d2:
e4:39:77:5f:09:fb:20:bf:39:9b:54:96:10:2c:5a:
56:9f:b4:98:4b:27:46:e8:7e:70:af:78:32:07:0e:
45:16:ee:7f:0e:f1:7e:4c:e8:00:3e:70:86:b2:36:
14:1d:9a:a8:e8:fc:cb:a5:4f:e7:f3:1b:09:4d:11:
37:d1:d7:70:de:46:c9:61:77:dc:91:d7:b8:4e:f0:
ae:b9:22:9f:01:7a:56:5b:0b:88:f4:d2:a6:3e:48:
ac:9b:d4:4f:fe:b4:63:8e:37:1c:ef:dc:cc:f5:f4:
56:94:ac:72:fb:94:b4:60:60:93:0a:5c:42:87:34:
08:8b:76:c3:1f:f4:eb:0c:3c:e4:7f:bb:dd:4d:d9:
6c:c2:9e:94:c3:1f:c7:70:9c:8a:d6:7c:61:c5:02:
18:7c:56:4b:5a:80:d8:58:67:de:8d:07:bb:cf:df:
d4:76:e5:73:f6:83:94:5c:31:e8:a5:3b:6a:01:6b:
e1:ff:e5:6a:be:78:40:d9:2a:f0:66:ad:24:55:b7:
e0:b3:e3:3c:19:04:95:d8:d7:57:5a:b8:ad:77:9f:
ff:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:A4:08:54:E7:A7:4D:57:C2:03:D1:F6:1F:D6:0A:65:61:CB:6C
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ac:a8:41:42:3f:b8:1a:e5:8c:ae:6b:21:ee:fa:63:00:96:
77:cb:a8:19:af:06:86:51:7e:a8:7c:b2:7c:3b:90:44:b2:d8:
74:59:05:2b:12:69:29:81:34:f8:f5:e6:c2:ee:cc:74:d7:6b:
8c:52:01:44:e6:5a:28:c8:a9:40:e9:c6:03:5f:1d:21:fa:3a:
cf:6e:9f:5a:22:f5:5d:1a:16:98:f3:0a:cb:d0:6c:7d:6e:ab:
c1:cc:cb:71:f2:8f:31:00:11:e9:49:fc:f1:f6:27:61:1e:a2:
c7:fc:83:19:40:04:35:2d:e1:5a:07:2c:e9:57:d8:a2:ee:20:
25:6d:d6:8e:8c:aa:6f:4e:e9:df:31:56:51:ee:ba:d3:66:76:
f0:8a:83:9d:bc:c4:b6:a6:da:41:b1:9c:1b:96:88:13:15:b5:
24:d9:f7:2b:f8:30:ea:7b:b0:d3:6c:a2:67:b0:bd:f1:06:50:
ef:a3:06:c1:12:b3:05:48:24:f6:a3:2d:b7:09:87:09:5a:c0:
be:c8:53:73:17:39:48:ff:0a:48:52:30:d9:8a:58:a4:94:a1:
fc:cf:df:86:a2:2a:b9:98:a6:49:e3:ab:79:24:b0:af:e7:02:
f0:9d:ef:fe:4f:69:8f:d4:62:ce:68:88:3c:2c:6a:b4:89:63:
35:9c:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:17 2025 by rpki-client