Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: Ak+x7Lbrt0vLr7dQLq9fH5ymq7Q+rf1FyjeNUC9/0dQ=
Subject key identifier: D3:3B:90:26:4C:9A:1E:D8:F3:1D:A4:56:68:91:23:A0:80:79:CE:1F
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0199FFC75671117A7EA575861CAE2D26DEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 07D5
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=)
2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: 3JIc9nz1jChPGvC9KdVbb14WWeI6GgT218JogI/3US0=)
4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:56:71:11:7a:7e:a5:75:86:1c:ae:2d:26:de:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=d33b90264c9a1ed8f31da456689123a08079ce1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:06:c9:e3:2c:84:4b:b4:e3:58:cf:f7:3b:
66:34:fa:32:d2:89:a6:d8:3e:cb:4d:7b:b1:59:d4:
ca:47:d5:d5:b6:1a:16:ea:10:e5:f4:fc:01:30:17:
41:ca:3e:79:78:08:5a:90:fd:6d:6e:0e:be:ff:36:
f0:5b:80:61:f3:c1:ac:9e:7a:31:fc:17:e5:cd:3c:
f2:01:c1:13:46:d1:58:db:8a:57:9b:59:85:10:4c:
6c:a1:22:82:91:65:d3:72:a3:e4:13:0c:65:1a:33:
c0:b8:db:40:d4:6e:fb:bc:55:56:35:1c:f5:fb:cb:
95:9c:b4:a6:d7:fd:fe:70:46:0e:9a:77:b7:0d:a6:
0c:33:a9:63:6d:3c:5d:30:d0:6f:aa:a5:9d:da:71:
98:11:a9:13:33:de:f1:ad:e2:3b:13:3f:80:5e:c5:
11:c2:8b:22:03:7a:52:ad:ee:40:c1:36:8b:17:50:
5e:a8:bf:76:ae:2d:06:3f:14:b3:47:74:17:7c:4d:
40:ad:ee:2d:d9:58:73:20:ed:15:ac:bc:0a:0f:7b:
64:33:5e:64:a3:c9:81:c9:4b:4b:61:32:96:18:f4:
ca:f3:87:30:0f:71:25:30:a3:3c:52:cf:4c:a7:69:
28:bf:15:9d:3f:72:c1:3e:43:5e:36:a8:69:41:95:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:90:26:4C:9A:1E:D8:F3:1D:A4:56:68:91:23:A0:80:79:CE:1F
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:64:4e:60:df:4b:b7:f7:45:83:36:0c:31:40:8e:fb:cc:09:
2c:ad:70:3f:fc:c0:be:b9:93:84:94:de:b6:aa:ca:e0:e5:c6:
db:26:92:fd:b1:e2:71:f2:61:2d:51:e5:c7:c3:86:07:03:a6:
13:fd:33:7e:13:ed:c9:01:2d:df:29:cb:59:ce:23:7f:ca:92:
0a:8d:9a:62:65:0e:80:9e:7f:58:a5:43:10:b7:1d:9d:37:48:
ae:1f:c4:74:e2:9e:bf:52:58:1b:37:ea:5b:ea:12:84:29:be:
4a:64:57:45:d7:21:70:74:9e:db:e5:af:3b:03:4b:08:4d:83:
af:dc:d6:08:b6:b6:78:d1:c5:89:88:d2:ba:8f:11:3f:30:fb:
20:94:31:34:f6:86:aa:96:ba:54:3c:2d:f1:7d:e4:3e:5d:2a:
18:7d:67:8d:d9:e6:de:d0:d8:da:85:1e:dc:50:ed:d8:5d:fd:
83:ab:1a:b5:35:59:3d:d3:88:79:95:de:1e:bc:74:a9:4d:9b:
51:d0:1d:49:b0:05:40:31:34:26:3f:7d:2c:ce:96:38:7d:0d:
55:a6:35:d7:61:25:56:34:24:a1:e0:b3:97:30:68:67:2f:75:
f3:b8:b9:61:d8:f9:b2:2d:e9:61:81:b8:ab:ac:be:3a:f4:46:
94:1f:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:34 2025 by rpki-client