Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: x6bBj3iGbkETicujYZGMO8Y0oJEowP7kztrvXSVehEs=
Subject key identifier: 83:94:C7:BD:12:0C:5E:B0:B3:46:98:B3:88:28:76:43:A7:65:B0:B8
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0199FC5831070C733A0731E9163536D2ADFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0CAC
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: C9BhHqxnbU4waMcYJ3rXkH1pqdjBV225VfCoznW7kP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:31:07:0c:73:3a:07:31:e9:16:35:36:d2:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=8394c7bd120c5eb0b34698b388287643a765b0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:bc:ee:6f:99:37:df:c6:a0:96:00:59:8f:
ad:90:05:88:2d:6c:7b:3c:bf:f8:cd:06:f8:80:e2:
1a:2a:8a:ba:4a:55:84:87:17:53:46:1b:91:39:bb:
85:9d:70:cc:ca:91:99:f4:6f:c7:ec:89:84:87:23:
cb:1c:ba:82:85:54:be:bf:ed:ba:db:ed:1b:7b:dc:
30:11:33:a7:cc:05:69:98:a5:c7:7c:b6:27:b5:1a:
aa:e8:45:41:ec:f7:08:58:88:cb:04:bc:55:76:ed:
65:ea:fa:92:18:d2:af:96:5c:e7:70:dc:56:13:c6:
1a:bc:03:30:76:3d:47:47:c3:b9:74:7f:53:30:24:
1d:1b:c0:49:db:5c:ee:1a:66:e7:b5:5c:55:38:44:
93:98:7a:71:3f:64:8a:5c:b0:40:db:95:ce:69:9c:
46:d3:ec:c2:3d:65:a6:ab:dc:bb:09:46:14:9b:ad:
bb:58:2c:7c:da:9a:b3:44:fd:6d:3b:c5:07:65:47:
fb:d7:d5:61:dc:a3:7a:74:68:7c:4d:0b:0b:11:8b:
e1:dc:4d:56:f7:e1:c5:b3:b3:2c:ef:7b:3b:3e:51:
0c:be:97:c7:0b:2d:f2:ea:f7:22:e1:a0:c9:5d:51:
cf:40:f0:f5:90:1c:2e:9c:57:4e:95:d6:97:0a:da:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:94:C7:BD:12:0C:5E:B0:B3:46:98:B3:88:28:76:43:A7:65:B0:B8
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2c:58:c9:8d:80:9c:00:31:42:95:fc:66:5b:07:cb:cd:9d:
b8:fe:8d:e1:16:b9:47:5d:1e:4e:42:74:65:92:a1:28:f0:6d:
7c:9b:5a:65:67:63:b8:7e:88:18:a4:3e:85:c6:80:c3:3d:a1:
c7:51:0d:54:63:26:5b:f3:59:b3:c0:be:71:3e:9d:dc:56:e4:
b4:7a:e3:2f:41:f0:95:74:c8:a4:af:d0:75:fe:14:27:ca:f8:
56:87:d6:f4:2d:ac:92:82:2d:08:d6:78:1b:59:34:11:52:37:
89:95:51:59:85:34:d1:1b:a9:89:ce:98:af:c1:d4:93:12:e4:
12:f4:09:0a:74:91:b1:9d:c7:db:bc:aa:32:19:0a:09:d8:33:
4c:a7:00:4e:4a:fa:cd:a0:80:a1:91:e9:00:e5:10:61:4e:8a:
1c:1f:12:e5:dd:44:ab:01:d9:07:53:4a:d9:43:b0:f6:f6:52:
5c:11:54:e3:b9:92:a1:10:b9:9d:3c:dc:33:c8:68:43:a6:9e:
fe:6b:c9:48:3b:95:43:b7:b5:1c:13:08:32:02:cd:15:2f:44:
31:92:e3:45:11:79:fe:5e:c2:83:98:5c:5c:d1:4c:0d:a0:b9:
bb:be:82:1c:e7:9f:42:84:cd:a9:9c:19:f7:15:e2:03:70:22:
07:f7:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:45 2025 by rpki-client