Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: kXMnE+uJn+Q7wAWZpPb/638MWrZlk3hnfLO+Kry2FrA=
Subject key identifier: 6F:43:A3:F9:EA:71:E2:39:70:2B:C0:25:A0:04:2E:83:3E:C7:AF:7E
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0199FBEBE7F7ADA23EE79E0939EF28DDA21B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0CEA
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: 9m2IBl9DQdYahssE36K0rl3cL0ckqVOTfdNOIeZ/XaU=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e7:f7:ad:a2:3e:e7:9e:09:39:ef:28:dd:a2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=6f43a3f9ea71e239702bc025a0042e833ec7af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:7b:15:dd:fd:df:3a:77:cd:71:ab:b7:fe:
99:c7:9d:61:a0:f3:f8:c6:5d:d2:cd:50:de:36:ec:
21:28:87:1f:89:73:cc:53:08:83:3e:f0:08:09:61:
59:78:13:c2:77:b7:75:66:ae:03:db:f3:35:db:f7:
6e:1e:9a:56:1d:60:6e:7a:99:d4:4c:63:9b:43:a4:
7c:eb:db:3e:99:e7:d5:76:10:84:c4:44:28:65:38:
f1:2b:e8:28:e3:1b:d0:0c:de:70:bf:93:d9:0e:d0:
7a:4c:7d:e7:07:c3:4e:d6:e3:5d:cf:44:98:5d:c5:
c9:76:df:a7:42:01:06:62:ce:52:29:b2:6b:0f:37:
fe:df:17:fd:78:6c:0d:a9:a3:44:28:3d:95:8c:4f:
23:0c:7e:1a:91:88:a1:0f:56:56:b6:12:63:cc:07:
ae:a9:39:23:8a:e2:b3:22:c0:da:a1:1c:37:1d:6e:
b7:a7:89:8d:1a:9e:28:72:48:29:aa:88:38:cd:6f:
b0:2c:b4:09:86:d5:78:ba:16:50:82:18:f5:23:bc:
5e:ce:ca:31:92:80:bb:f7:bc:ba:6c:f5:1f:eb:35:
0a:12:fc:53:a1:31:f6:23:e4:83:f0:b3:12:9f:2f:
7a:d6:6c:1e:58:bf:be:0d:f5:9a:a8:92:4d:8c:a2:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:43:A3:F9:EA:71:E2:39:70:2B:C0:25:A0:04:2E:83:3E:C7:AF:7E
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c3:28:2a:c1:04:21:df:28:c7:06:27:06:65:e3:4a:b9:79:
61:37:48:fd:5c:dc:cb:8e:bb:e4:0f:34:0b:93:e9:ad:ec:81:
d2:6a:ad:c9:57:ac:e2:de:73:33:6c:46:ad:75:89:28:92:ad:
f7:e2:26:f0:bb:da:64:60:84:16:7e:72:ca:25:8a:a3:a2:1b:
e0:11:7b:5c:ae:86:a3:4c:a6:d9:9b:d3:7c:ae:58:8f:fa:51:
fe:5c:2d:93:06:3c:80:5b:1e:5c:30:46:0a:3c:30:d1:4f:3d:
db:c2:94:b8:4c:ec:49:6b:54:49:14:db:2f:98:00:02:f3:64:
13:27:82:ea:a4:af:ff:28:a3:7c:32:92:8f:d8:02:c1:2f:98:
a1:e4:a6:82:39:1b:b9:d0:38:95:27:ad:8a:0a:97:d2:06:a2:
79:5b:ba:39:9e:3f:6a:51:77:0e:fd:b5:1c:c3:d1:c9:3f:0c:
cf:5c:66:65:11:e8:6c:0a:ae:63:67:4e:ae:c4:d2:67:d4:a1:
1e:94:e1:fb:5e:75:7c:06:e1:4b:cd:e4:e7:63:17:13:c9:b5:
0e:a5:15:34:38:9e:ba:49:bb:a3:ce:59:7d:85:5c:6e:a5:41:
3b:bf:f6:b3:17:9a:a0:22:6e:7f:80:ca:77:c2:67:4f:d6:55:
6e:d5:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client