Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
File: bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft (raw, json)
Hash identifier: Nxb9yp3Gt7oql6V9Kw0o7RXxpy/a2ACBZGCTV7JQrO0=
Subject key identifier: 37:A6:C3:E2:6E:6B:A2:F0:F7:B0:F4:AA:FA:3A:4C:27:25:9B:23:40
Authority key identifier: 6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
Certificate issuer: /CN=6eae4bb0513980c87f9bac592952c095777ac12e
Certificate serial: 0199FBEBBBBA81EFEBC4AF3F9208885052CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: C_vZrzZdhy-uejOZ6_GWZTSm_n0.roa (hash: 79ZNhw6Fw3tlIyCfv3zLmQ4ilyJAmRJY2DfEyitGouQ=)
2: bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl (hash: hGAr4wskym/5gjemEsl3/NryysZAAx7BDIN/V8D9ZYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bb:ba:81:ef:eb:c4:af:3f:92:08:88:50:52:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eae4bb0513980c87f9bac592952c095777ac12e
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=37a6c3e26e6ba2f0f7b0f4aafa3a4c27259b2340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:e1:db:a3:9d:21:c7:33:b6:f1:29:2b:5f:
a3:0b:ad:b8:5b:f8:04:17:29:12:a6:89:38:4e:c2:
19:90:6a:2f:a1:bf:9f:16:d0:da:56:2c:cc:f6:e9:
45:ae:bf:41:1f:a1:b0:36:4e:bd:6e:65:39:cc:8a:
d9:d6:4e:f9:fb:a2:07:f4:bd:88:3d:53:cc:12:ca:
9f:12:40:09:95:1c:39:f1:81:09:29:8d:51:2a:54:
19:9f:fe:b7:c9:42:48:01:0b:8f:c5:a3:3c:46:ba:
54:e6:db:cc:87:99:bd:81:30:23:f2:5a:a5:9f:8c:
07:2c:b2:12:86:f0:9d:6a:75:ed:d5:1d:8e:fd:d7:
20:91:ed:5e:2e:65:1a:3f:fa:c6:f5:2c:0b:97:b2:
64:e1:b6:2e:6a:83:0b:57:9e:32:42:fe:d5:9b:86:
22:79:3d:e4:78:22:e2:7c:e9:c5:68:e1:01:f0:98:
c8:80:15:6b:a1:40:73:ba:6b:80:8a:ec:d2:92:99:
9e:34:18:cc:b3:28:10:08:83:4c:fd:19:a6:a5:90:
d9:66:b2:8c:71:8e:17:07:b5:d0:fc:82:ef:1a:e7:
e8:ae:dd:cf:0c:ec:03:3d:1d:24:92:b1:e1:7c:14:
11:15:d9:91:9d:57:2c:df:08:41:25:16:43:0a:31:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:C3:E2:6E:6B:A2:F0:F7:B0:F4:AA:FA:3A:4C:27:25:9B:23:40
X509v3 Authority Key Identifier:
keyid:6E:AE:4B:B0:51:39:80:C8:7F:9B:AC:59:29:52:C0:95:77:7A:C1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq5LsFE5gMh_m6xZKVLAlXd6wS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3a72ba-1dca-40d9-a8ad-4ce6231f2ad9/1/bq5LsFE5gMh_m6xZKVLAlXd6wS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:4b:c9:73:6e:bf:98:5c:d8:93:e6:e7:de:84:63:36:a8:
ed:6c:3e:21:36:26:4e:7f:f0:a1:18:df:98:97:a6:88:8a:05:
c7:45:d2:53:f9:e8:fa:24:da:e7:64:a3:71:e4:4f:82:0d:46:
25:1d:26:41:34:5a:db:80:b1:04:47:d9:b6:8b:71:2e:3c:8c:
eb:8c:c8:63:26:4e:63:77:23:d5:d5:23:07:b1:c3:4c:ca:b2:
c6:e2:b1:fe:6e:4e:d1:3c:4f:16:8b:2d:85:e2:8c:4f:c1:02:
c1:a4:42:f0:d5:99:c5:a9:71:84:c9:f0:f4:b8:8f:aa:da:13:
aa:c3:f2:83:d3:f9:b7:7c:dd:94:7c:b4:15:5a:5d:eb:e2:6c:
48:d7:ed:fc:dd:73:5e:ae:32:ab:ca:55:5e:4c:69:cc:86:fa:
62:9a:d2:61:c9:b5:42:95:28:7b:de:35:e8:ef:ce:e6:e9:80:
90:49:79:67:3b:ca:36:ca:0f:03:49:9e:7a:d5:f7:54:9a:0b:
d7:4f:05:ce:54:5f:44:3c:c6:d6:a8:45:ce:e1:6a:c3:43:4f:
0b:ff:b0:05:84:92:75:44:7a:79:e8:40:0a:63:b4:27:d1:54:
b0:ec:56:18:37:48:b1:e0:30:78:db:9e:63:a8:db:83:d3:ad:
94:eb:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client