Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: qIPz8ZkXwdkAPslM5AvkKQi4E5oH9raz/R7eZZ5Ue7g=
Subject key identifier: 80:5A:7D:9B:EF:69:99:D8:35:4A:A0:59:36:3E:00:69:AB:19:8E:97
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 0199FC215A11F7938B14CEC1566BF7830E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 0288
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 8UG5Qh7t6gkyV0rD8nZ1oL2Ckuo.roa (hash: br/1geYk5+cZ7ZJEexlmKCcjPCyNtKTSm1+1iwPC7Z0=)
2: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: z2luNZKKHZkEJHgw2jPupcTJSAicKdVh6N02D8oXQnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5a:11:f7:93:8b:14:ce:c1:56:6b:f7:83:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=805a7d9bef6999d8354aa059363e0069ab198e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:b2:4c:1e:d8:f5:5b:67:3c:9a:95:ab:5a:
c1:09:b4:a2:85:9f:4b:9a:bb:d6:8a:44:f1:3e:dc:
7f:33:bd:f9:3f:b4:1d:3c:51:32:f3:5e:0a:65:f3:
d7:56:2a:f1:17:27:b1:c2:a7:47:57:9c:d5:29:8f:
74:9b:f1:11:4d:73:27:20:4a:48:3c:c5:f6:05:15:
7a:63:49:59:77:cb:dd:49:d6:6c:ba:14:b5:82:20:
e8:c8:c3:33:c2:17:f9:99:b5:b9:72:4e:30:81:90:
07:7c:45:8c:7b:4c:17:8d:b4:8a:e4:c1:48:bf:07:
46:64:f0:f2:35:e6:f1:48:c7:d3:98:2b:08:0a:bd:
ca:34:15:11:83:77:c3:15:5f:94:a7:34:2b:8f:da:
41:a1:e8:ea:bd:d6:ef:3e:bf:5d:09:8c:4e:f7:ff:
d6:4e:b4:98:28:2b:32:1d:df:bb:af:be:41:f4:91:
c2:a7:76:2b:17:e5:7f:ed:a3:52:42:55:ad:c8:ad:
69:ee:bf:19:5f:2f:3e:0d:8c:5d:2d:a4:83:c4:29:
5c:2e:11:18:ef:fd:a2:c9:87:dd:93:b1:dc:41:41:
d7:0a:4a:e9:fe:71:e1:f3:df:14:b3:65:28:4c:d4:
82:b9:51:42:46:19:e6:b6:05:e9:98:e9:38:f8:a4:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:7D:9B:EF:69:99:D8:35:4A:A0:59:36:3E:00:69:AB:19:8E:97
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:82:a5:a8:29:4a:c0:96:28:f6:20:07:7f:c3:32:92:66:0a:
74:33:bb:51:9e:9a:ed:f1:af:81:7b:d3:ef:b5:a3:a7:c1:af:
92:6d:ca:6f:12:b9:5b:36:60:6b:fe:7b:31:1d:15:47:d4:f4:
e1:65:6a:7d:44:82:60:1e:48:37:f7:0f:4b:cd:8c:ba:ec:98:
e7:4d:6a:9d:9d:d7:a9:9b:24:69:dc:fc:bd:c8:1f:36:9d:87:
f8:d2:04:87:07:7d:f3:5b:62:d0:73:33:c3:83:09:c6:e4:50:
4e:ff:1c:8d:ad:54:f1:0c:8f:ea:b3:0a:60:7b:ab:0c:32:83:
bb:e2:53:f2:ac:3a:3f:30:5e:41:e0:f1:f8:da:b4:35:ec:44:
fb:77:52:32:02:1d:c2:35:38:e2:ee:77:55:92:6f:7d:bd:6c:
e2:fa:82:d4:9a:26:07:17:c4:ab:b7:c7:80:51:71:4e:0d:10:
32:ab:18:69:fb:e8:10:77:f5:33:55:7c:12:3f:ee:1d:27:95:
cd:7c:d2:06:de:cc:28:6f:c6:7b:a7:71:d4:a0:31:36:f1:3d:
67:3f:18:a6:0c:3c:4d:bf:e8:ea:c5:7b:6d:7c:8e:ca:d2:57:
b7:7d:bd:d7:e8:5e:2e:5c:93:20:b2:dc:12:35:2d:c4:de:4d:
21:05:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:56 2025 by rpki-client