Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: CkWRGB098BuZQ2K2wjY1bQjFBejdH66WHDUaEd2ac/w=
Subject key identifier: 1D:21:18:5C:BD:BC:C2:1D:AC:E7:85:50:1E:D6:79:96:B0:FC:B1:0C
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0199FFC79908570D0B59B206A07A263513E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 164B
Signing time: Mon 20 Oct 2025 04:01:34 +0000
Manifest this update: Mon 20 Oct 2025 04:01:34 +0000
Manifest next update: Tue 21 Oct 2025 04:01:34 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: lTiS9Qa/3j2aiBrxHvEqKX4hVEpYxZEnRKqLaBqscmI=)
5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:99:08:57:0d:0b:59:b2:06:a0:7a:26:35:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Oct 20 04:01:34 2025 GMT
Not After : Oct 21 04:01:34 2025 GMT
Subject: CN=1d21185cbdbcc21dace785501ed67996b0fcb10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:7e:ca:df:08:09:81:04:92:e5:d8:dc:27:
7b:99:c0:54:41:d7:c3:28:04:95:2d:1c:63:de:c9:
7b:62:95:16:2b:eb:37:be:e2:ee:39:5b:67:fc:30:
bf:db:eb:45:4d:95:ab:cb:af:82:ad:07:f4:57:d3:
a1:86:e4:e8:83:94:4c:ab:a7:c6:87:45:09:7f:53:
e4:ec:73:69:48:79:25:c6:2b:ae:5f:07:0f:f6:0c:
10:82:d6:8f:51:2a:86:2f:52:e3:cb:54:5a:6a:26:
be:27:c9:2f:18:bc:be:7f:b5:08:8f:30:35:44:24:
1c:d1:99:38:62:ef:96:91:a5:57:59:8a:ab:77:b8:
7d:12:b8:fa:fa:79:0a:3a:07:d9:f3:44:a3:ca:84:
45:04:40:77:ac:e0:1e:d6:dd:ef:77:d6:39:1b:f9:
51:c8:04:c2:77:0d:f8:34:bf:ec:65:89:21:8a:f0:
a3:cd:a6:2f:7b:cb:35:d9:a3:f1:c8:c6:be:9c:fa:
67:40:9e:64:54:9d:f6:1e:a3:34:bd:95:a3:77:61:
14:67:b8:65:28:68:e2:02:75:74:57:10:ec:4f:d5:
f0:f7:38:f8:ad:4a:91:67:61:b2:df:20:a5:26:6c:
f0:70:5c:0c:72:72:35:b2:5b:fb:2b:0f:b7:f1:b3:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:18:5C:BD:BC:C2:1D:AC:E7:85:50:1E:D6:79:96:B0:FC:B1:0C
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:f6:31:a1:5d:18:49:32:74:89:5a:2f:da:58:ee:a8:09:ed:
ea:36:4d:de:39:97:53:10:4f:cf:8a:5c:3b:b3:a8:71:92:ee:
8b:c9:09:4c:32:e1:6b:bc:33:d5:4e:85:04:08:b1:e0:a6:17:
02:a6:b5:27:e6:e8:33:f8:b6:73:5f:3c:5c:33:ac:e7:7d:8c:
a9:47:c2:d2:ea:74:00:84:f7:a9:41:96:e7:4d:b4:17:28:28:
76:83:db:bf:e6:91:31:06:72:f0:7a:aa:cb:4a:bc:ab:28:dc:
da:5d:0b:2c:af:54:0f:1d:b3:9f:89:49:d6:77:cc:98:0e:f6:
1f:4d:2e:f8:9f:13:4a:43:cb:f4:3d:38:b8:47:25:51:cc:58:
d5:61:b7:e3:45:29:96:fd:d7:b3:43:d5:c1:92:30:10:02:86:
74:9d:d4:11:f0:12:12:05:6e:d2:a5:f5:ba:94:bd:e6:8c:8f:
ea:47:5c:33:e5:f0:98:7c:be:05:fe:44:6a:f0:91:56:f3:41:
18:ca:9c:42:1c:02:f1:74:b9:f7:8e:74:ce:23:18:e6:30:d1:
62:0b:73:2c:f5:e7:dd:f1:d9:1b:0d:b6:0c:cd:d8:b6:b5:a8:
ad:f7:83:e8:fe:1c:e7:09:cf:ac:e9:ec:15:36:f7:8f:cf:a2:
47:c9:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:24 2025 by rpki-client