Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: JmObeDHzYa7XcDij68AdzYG+elFdu0SfemUsgNLDlfA=
Subject key identifier: B8:C6:7A:BA:C2:68:A0:68:3B:90:30:5F:08:8F:18:73:E4:BB:DC:FE
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 0199FB0F0CEBCD7250F1CE5087453A2B21CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 084A
Signing time: Sun 19 Oct 2025 06:01:31 +0000
Manifest this update: Sun 19 Oct 2025 06:01:31 +0000
Manifest next update: Mon 20 Oct 2025 06:01:31 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: lW3rbakUTUCw3t3fm/idYqhi0z087naNf08N/D4CvR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:0c:eb:cd:72:50:f1:ce:50:87:45:3a:2b:21:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Oct 19 06:01:31 2025 GMT
Not After : Oct 20 06:01:31 2025 GMT
Subject: CN=b8c67abac268a0683b90305f088f1873e4bbdcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:b0:bd:53:e0:c8:54:37:c5:3b:7b:84:47:
9c:e3:a1:1e:39:a6:da:4e:83:0e:9f:d1:23:bc:89:
82:30:b6:32:d9:02:64:64:5d:48:54:7e:4e:e2:4f:
03:ab:71:bc:43:cf:cf:ad:ff:42:ef:8f:06:59:6a:
a0:eb:5f:52:99:43:d5:9c:e7:db:e7:08:63:92:f2:
1e:b4:e0:43:0a:ea:60:1b:81:f7:a2:22:09:4c:af:
24:de:00:62:29:46:72:95:c2:5c:34:e3:ec:4a:1d:
7d:43:b0:c2:4c:6c:72:81:27:c8:1b:ce:15:b9:30:
fa:c9:4c:b4:8b:f3:96:2c:73:f8:52:84:48:f0:f0:
c1:c9:e4:40:48:fa:e0:8e:80:9a:25:a5:2f:a2:68:
18:cb:88:66:a0:16:a0:ae:79:ac:d1:59:5d:18:d0:
62:12:4e:7a:d4:d0:dc:3f:c4:8d:40:f3:6f:db:4f:
d1:ff:36:2f:69:53:92:9e:f9:ad:3e:eb:32:da:e6:
f4:0e:74:19:b0:c7:24:65:c2:6a:fe:43:1c:66:bc:
88:78:12:14:0a:2a:20:ac:25:f0:61:c5:ed:4e:32:
84:e6:09:b8:90:67:31:82:d0:57:0c:ba:9d:6c:77:
85:2e:f2:ae:29:38:38:05:71:b1:be:e4:f0:f0:4f:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:7A:BA:C2:68:A0:68:3B:90:30:5F:08:8F:18:73:E4:BB:DC:FE
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ea:0d:f4:69:0b:d3:12:f1:5d:4a:40:87:32:fd:30:1f:6a:
36:3f:bd:fe:26:e7:ef:23:c6:82:fa:db:a1:61:e1:b2:0c:8f:
4e:4e:b0:da:b1:54:1f:f7:f9:e2:ef:d9:8f:bf:db:d6:2a:04:
f4:02:1e:01:67:03:f5:5f:f7:7c:1b:a6:a1:cd:91:60:c0:20:
09:b6:d7:cf:47:35:92:98:cb:fc:51:08:25:37:89:1f:e7:a1:
cc:61:13:32:74:64:ff:22:8f:58:e6:d8:21:25:ff:24:86:c4:
ec:f3:20:b0:ce:56:f1:61:f4:86:f6:9c:68:b6:4a:78:c0:79:
fb:94:a9:7d:70:a0:d5:f8:00:51:6a:ea:f6:c5:73:30:8a:3c:
ea:ea:de:47:0c:9e:18:2e:3a:58:9c:f0:a4:34:0e:18:b1:ff:
b9:42:bc:01:07:7c:3c:16:59:b1:75:1c:7d:9b:25:36:30:0a:
9a:b3:83:7e:3a:d8:30:e5:20:7e:de:a0:df:e8:dc:37:3c:64:
95:87:b4:c6:bf:b1:ea:b0:6e:d8:ea:73:70:3c:ed:58:f6:0c:
d2:01:5e:c1:36:f6:27:65:e6:a6:96:b5:65:8c:23:54:9a:41:
a1:f4:ae:aa:aa:70:5c:c6:fc:6b:c3:ec:6a:8c:69:20:48:89:
36:fe:50:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:24 2025 by rpki-client