Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: uox86n66F2+fJ1mLKFNTvVnk+b3iAHQNII0vBBlul68=
Subject key identifier: 51:2D:A6:A3:C9:CA:FE:6A:7D:0F:1B:E3:45:DA:71:6E:CA:E5:58:83
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0199FCC6576EAB7E45864A8B96114C436EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: qcnHWiDjlvOcGkV0eDiZ1PCWbEglYUQ3hkAZ84P/oPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:57:6e:ab:7e:45:86:4a:8b:96:11:4c:43:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=512da6a3c9cafe6a7d0f1be345da716ecae55883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:19:e5:45:6a:cd:c3:09:af:da:49:e9:ee:
3d:7a:19:eb:bd:20:1d:00:58:3f:2b:be:c7:f5:16:
bc:ec:ff:d2:15:b4:6b:48:4f:93:f0:2c:77:7c:13:
b1:b8:0e:e6:70:0f:dd:61:dc:37:13:1c:2e:06:0f:
5b:5b:57:39:a5:6f:22:5b:81:ff:7a:10:d7:d8:65:
b8:c2:b2:80:a6:ce:8a:9d:87:e7:6a:2e:09:20:7c:
83:40:57:c0:3a:98:c0:b5:e8:f5:ca:6f:e1:be:0a:
52:f4:f7:ab:54:47:33:5b:03:fd:5d:a4:b3:2c:e3:
e1:2a:7f:ce:7a:05:50:ac:13:54:88:8d:b7:0b:1e:
01:6a:5c:ca:ec:9c:54:53:fd:83:26:53:ed:2a:3c:
fe:f3:79:86:cb:54:37:7d:44:fc:3a:6c:07:e7:a5:
bd:e8:16:5c:ec:e9:39:ce:9c:02:cd:ef:8a:cb:f1:
ca:a0:ca:30:83:41:3c:cc:87:be:e0:db:11:2d:ef:
2c:29:e2:67:46:3c:24:a0:0e:e8:b1:09:13:98:72:
af:bf:b4:f4:3d:b3:79:62:d4:46:1e:62:81:64:38:
73:da:75:d8:9c:87:83:cd:65:b2:e5:3f:21:67:79:
ef:16:9c:dd:38:ec:d5:d8:1c:ee:4b:40:e3:9b:6b:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2D:A6:A3:C9:CA:FE:6A:7D:0F:1B:E3:45:DA:71:6E:CA:E5:58:83
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:17:99:12:b3:98:b5:62:05:58:f6:19:fb:b2:17:10:77:56:
3e:78:4f:1d:f7:17:e1:b3:7e:4a:dd:70:ff:ac:ad:c2:da:87:
42:b3:dc:68:5f:02:65:95:e4:b2:1a:c1:01:bb:8b:af:59:50:
6d:49:2a:b0:08:61:e7:c4:f2:a7:8d:00:c1:14:11:05:21:9b:
85:13:cf:89:37:58:8c:1b:90:78:50:a6:52:66:3d:c4:f6:e5:
11:d2:1c:8b:61:2d:89:8d:83:7e:ca:59:94:6f:1e:a4:d7:b9:
08:30:06:b0:9a:4a:5f:14:05:b5:ae:1a:36:7b:d5:87:5d:1d:
cd:cf:a8:b0:68:4b:e0:e3:43:c7:5b:9c:ee:33:b5:3c:26:db:
c1:35:32:5d:5b:76:05:28:c6:7e:d6:f7:50:5a:d6:bb:f5:83:
0d:d2:85:10:d0:0e:d6:62:7b:f7:17:bc:30:5a:90:f4:05:cc:
c5:1c:a1:6d:2d:5c:ec:5f:91:ea:e0:d6:0d:48:5f:62:10:3a:
29:31:3d:9a:b3:20:07:00:b5:e5:a6:38:ff:d9:d7:f5:8f:4e:
3e:d7:22:91:56:58:e2:4c:62:b7:68:04:04:80:4f:0c:06:5f:
b7:38:94:fc:07:87:8a:c1:68:c6:e9:d0:cb:44:9c:ad:3a:6b:
8c:18:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:32 2025 by rpki-client