Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: O8/VoQhAB7oUXIMLhNSUOWX7jeQFgLIQLndHrGj0S9w=
Subject key identifier: C7:5D:68:91:93:E2:60:6E:99:13:83:B1:BE:46:BC:16:F2:B6:6D:3B
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019A0147AD9E1725B33AD336A1D49925A788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 11:01:05 +0000
Manifest this update: Mon 20 Oct 2025 11:01:05 +0000
Manifest next update: Tue 21 Oct 2025 11:01:05 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: 1rAdImRqewIgNFcIBGGUaqePqrA5DV8D9ZtFkx6YGdg=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:ad:9e:17:25:b3:3a:d3:36:a1:d4:99:25:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Oct 20 11:01:05 2025 GMT
Not After : Oct 21 11:01:05 2025 GMT
Subject: CN=c75d689193e2606e991383b1be46bc16f2b66d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:21:70:17:e1:bb:dc:6f:c8:e5:50:cc:b5:
d8:54:af:f1:fb:ed:af:19:8e:f9:22:e5:82:da:95:
64:31:a6:49:05:0c:61:97:a2:cf:dd:8b:ee:bf:af:
eb:06:a7:a3:97:1a:14:c9:fc:c3:e5:e3:32:a7:31:
ff:a5:fa:16:e9:c0:f0:e4:4a:8e:db:db:8f:4d:f0:
c1:12:9d:d5:ec:de:3e:ef:fd:7d:e4:48:b6:e5:fb:
f3:37:1c:c7:fb:c5:19:51:b6:e5:b8:09:13:34:f0:
15:9e:81:51:24:40:f3:a1:3c:68:51:77:22:73:a8:
ed:65:9d:f0:01:b1:87:ff:c2:fd:07:2d:64:91:7e:
5a:52:e4:e8:39:74:23:78:9f:8e:79:ce:a7:dd:1d:
44:86:54:8e:da:ab:b0:bd:51:65:ac:3f:51:b5:7b:
2a:94:44:51:a7:0c:ba:a6:f9:35:2e:55:c1:96:60:
1a:4f:60:21:1d:f0:3e:66:c4:45:6f:83:35:90:59:
36:bc:c6:fc:40:16:e2:93:f1:89:97:b8:3d:88:a4:
a7:bd:8e:a5:6f:d2:fc:37:40:5c:71:d8:15:68:0b:
97:7f:d9:27:51:b6:bb:ea:d2:a6:cd:16:df:c0:0f:
66:6a:53:d2:f0:1f:18:de:7d:d5:74:ad:98:5e:8f:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5D:68:91:93:E2:60:6E:99:13:83:B1:BE:46:BC:16:F2:B6:6D:3B
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:9d:49:96:8b:d1:d9:99:0c:dc:17:4c:41:06:eb:d1:40:
68:a7:ba:16:1b:4e:cc:d1:b4:8b:c5:75:5a:63:6d:c9:a7:31:
2e:1f:91:7f:c1:88:eb:2d:a5:68:75:11:97:cc:f6:97:42:57:
14:bd:14:2b:47:93:17:da:8d:5b:b9:72:64:cc:59:c4:b7:cd:
c5:34:d2:d8:51:31:f5:97:96:a3:a1:27:f3:cd:33:bf:25:a1:
de:9d:38:01:3c:a6:16:31:d2:70:35:e3:70:0e:4d:d9:51:e9:
5a:a4:83:cf:b8:56:79:c3:20:d0:d3:3a:f9:16:80:c6:0c:29:
17:d9:e7:a8:71:48:3b:54:7a:da:46:dc:09:9a:f4:ac:fc:5a:
6c:9b:5b:16:6b:ff:12:f2:68:b3:8f:a7:66:28:f9:84:8c:6c:
f5:10:93:3c:b8:1b:0e:d6:42:e0:2f:91:3f:bd:e6:c2:1f:b1:
7e:42:cd:ca:a9:aa:74:e5:d1:a9:5f:25:94:ae:4e:bd:09:5a:
6f:99:19:13:fb:25:24:36:b5:39:ec:18:e6:d5:fb:3a:be:86:
b3:27:ca:1d:18:89:e1:c0:4d:5a:97:8d:da:3d:12:a8:1c:ac:
75:a9:a4:4b:ef:fa:63:1a:f2:cf:d0:bb:82:f9:97:7b:ae:6c:
42:ac:c7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:01:43 2025 by rpki-client