Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: pnZ7LSHvaxHKTb5IrvyOGbR3AZFm/hxzWHFTEhxfXyg=
Subject key identifier: 06:A2:ED:62:7B:F8:C7:EA:74:08:11:D4:AB:F8:BA:F5:52:58:83:11
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 0199FBEBEB8184A39D419C2C4B52A6B42B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 123C
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: OQXcE5TVRJTODzeH8PR3o8x4aTHYlE+JQoxJSihTxn0=)
2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:eb:81:84:a3:9d:41:9c:2c:4b:52:a6:b4:2b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=06a2ed627bf8c7ea740811d4abf8baf552588311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:f4:77:d7:d6:23:d2:bd:eb:43:ee:5b:56:
3d:d8:fa:cf:31:71:d9:d5:a3:47:a9:d4:85:47:cc:
a5:35:ef:f1:ac:2c:ca:e4:3b:8a:2b:52:0e:7c:4d:
e5:04:fa:06:b1:1b:46:e3:8e:fa:d3:29:c2:2a:69:
36:6c:d5:0c:3c:58:15:a1:6d:6f:a6:27:93:af:2f:
93:8d:2c:6f:aa:91:f2:05:6a:25:0f:da:80:e1:19:
0a:05:c5:92:12:d8:ad:a3:84:5b:9d:fb:9b:d8:38:
fa:b4:41:8d:a5:34:01:55:10:e8:6f:ab:d4:b2:ff:
74:e8:9d:04:16:19:0f:cd:48:e1:a3:54:c9:08:a0:
0e:34:3b:6d:3f:d3:33:f8:d5:5c:80:a8:6f:0a:20:
10:f8:50:7b:12:18:b3:19:93:fa:49:e0:ca:66:20:
0c:62:92:48:bc:b2:c2:d2:c9:74:6e:ca:a9:ce:df:
f4:32:86:a9:d0:70:2a:0b:84:b7:2a:a5:73:2c:8d:
d5:6d:9c:f8:51:ed:16:44:f4:8b:0c:f8:56:94:a6:
3c:c2:2d:0d:5b:24:cd:14:2f:79:49:d7:db:6b:80:
13:06:5e:fa:8a:4f:55:1c:5c:57:fb:08:20:47:55:
ee:93:fd:a8:c0:32:be:fe:d0:4e:b1:bf:54:e0:bf:
8b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A2:ED:62:7B:F8:C7:EA:74:08:11:D4:AB:F8:BA:F5:52:58:83:11
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:d5:65:0b:4f:b9:93:e1:8f:39:4d:c5:44:f0:d0:d4:42:
03:c2:6c:49:6a:00:67:a3:b6:a5:0d:12:8a:04:17:4b:a1:3c:
22:b3:9b:95:ed:7c:2a:de:7b:c1:22:d3:fa:ea:1c:50:d5:79:
15:a7:80:e9:57:0e:92:fa:49:c7:00:08:32:ff:df:36:7c:04:
f1:1c:af:42:86:35:6d:54:cc:ad:3b:43:74:a4:67:1f:54:7b:
b1:02:e3:5e:aa:5f:f6:4b:c6:65:fa:f2:59:6d:6e:55:74:e7:
08:16:4e:30:3b:b3:44:72:ff:77:3c:02:89:16:b6:05:85:08:
67:75:91:d9:fe:86:54:46:5a:22:c5:e2:82:7d:13:ae:76:09:
93:10:bb:a2:b3:67:df:5d:ff:a3:1e:e3:95:47:96:78:94:e7:
da:62:08:ea:ea:cb:80:7d:fc:b1:e4:e8:7b:98:27:4d:6b:ac:
4b:4b:9e:33:67:41:51:ee:d5:a7:a7:e3:3e:6a:18:94:74:06:
4b:06:ab:f5:31:97:57:64:c7:6b:e1:94:33:6c:c2:a3:09:10:
14:8d:0a:50:0a:3a:10:3e:78:f9:e3:06:b8:1b:4c:8b:59:92:
15:4e:ce:b8:14:a5:7c:9b:0b:d8:4b:1e:f8:61:cb:41:f5:2a:
91:e1:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:08 2025 by rpki-client