
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: 15I/FTZEh8n3OBZHK49pmYWJ4MQkI6wqDer6cWYdXeo=
Subject key identifier: B1:A0:FA:94:E8:DC:7B:1E:DE:5D:69:EC:3E:45:B1:CF:13:5B:4F:E1
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 0199FE46E8EBC61DA1425FCA06B65E53256A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0B1A
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: z2ZhLEjC8QE8Xb6a+D9H0/Itz6USnqb4UQhhj0jVsOo=)
2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e8:eb:c6:1d:a1:42:5f:ca:06:b6:5e:53:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=b1a0fa94e8dc7b1ede5d69ec3e45b1cf135b4fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f6:fe:1f:3a:2c:a8:a9:1c:ca:9e:0e:2a:e4:
b4:c5:cc:d2:cb:7b:df:84:8a:a6:2e:c6:4b:03:5f:
5f:4c:68:b8:a0:13:11:2d:3b:66:77:a3:71:97:6e:
2e:cd:95:ba:90:a9:31:f7:79:75:e3:9c:ec:8a:23:
44:d9:51:9a:c0:2a:1c:c5:a0:00:0f:22:83:2d:de:
87:5d:1f:da:5b:7a:7b:2a:f4:15:72:cb:0a:7d:9c:
dc:a9:6b:3a:78:b8:13:e9:c0:8c:03:3f:91:eb:15:
39:f0:90:9a:76:ea:d4:2a:2b:18:1c:3d:43:97:e8:
22:26:d9:68:d3:97:0d:a8:3b:7c:55:63:cc:3c:f9:
6e:2b:cc:b1:86:6d:93:6b:2b:ef:49:a8:f2:18:c9:
51:62:7c:30:26:9c:ba:a5:ec:b7:e0:e1:af:83:40:
32:00:4f:35:84:71:a3:a5:14:37:40:fa:d2:9d:a6:
19:64:da:56:81:1b:d2:25:20:47:d8:87:f1:82:0a:
49:a4:06:f1:58:83:7d:7b:c7:f5:93:13:61:8c:77:
a7:84:94:33:51:4f:9e:c7:1f:de:03:9f:90:e4:25:
ab:84:ca:2a:63:0e:91:9f:b3:83:5c:be:98:7f:e8:
f8:f7:2d:26:b7:07:ae:18:68:8d:63:a4:93:94:b2:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A0:FA:94:E8:DC:7B:1E:DE:5D:69:EC:3E:45:B1:CF:13:5B:4F:E1
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:eb:a5:fb:db:5a:4f:48:9d:9a:01:8e:73:35:74:d7:b6:5f:
c9:55:41:65:56:6d:0d:77:c7:ca:6d:b9:00:c7:2d:4f:d2:0e:
92:ec:31:50:70:0e:1e:b9:2d:0e:1b:61:30:09:c0:e5:6e:4f:
80:4a:d9:7f:86:82:02:60:fd:78:e8:81:cc:de:bb:77:5f:3c:
5d:92:db:53:e5:ca:8f:d1:5b:67:06:15:83:dd:e4:6f:0b:cd:
95:8a:36:69:65:be:4e:12:09:a7:e6:84:bd:5a:03:f8:82:19:
97:d9:c2:ef:9d:5f:ff:47:74:a1:c6:02:45:56:33:06:8b:6c:
38:ed:27:31:72:a8:01:46:a6:b5:91:e2:af:ed:b7:c8:2c:19:
f5:10:82:10:02:f3:08:e9:6c:93:9e:5a:3b:7b:84:2a:37:90:
83:fb:8b:08:d0:a2:c8:2f:69:d2:55:20:44:e4:f3:80:fe:41:
ad:da:c1:1e:0e:ae:1a:c3:fb:e4:58:3d:3d:10:8a:12:28:f0:
5d:b4:d0:76:f2:54:5c:36:e2:00:29:9f:64:12:3c:a4:ea:b2:
5d:dd:1c:20:7b:50:41:a9:5a:94:1e:c0:c8:b5:aa:75:13:22:
25:6e:11:86:02:51:af:fd:21:6e:0d:90:fb:43:8f:39:6e:73:
7c:12:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:19 2025 by rpki-client