Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier: 3VD0Qr1e0M97+/kjwETPTRECbqRZZRQLsXPQ73MHCbE=
Subject key identifier: 96:A8:E5:A1:AA:24:AF:E9:EC:9E:9D:A6:3D:01:D7:74:DE:70:70:A1
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 0199FBEB100E80A32CF65D6BD54655B3EA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number: 032F
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=)
2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: CTjM4e4Dt+NPpiIsR35J1DuQI9UPU+tORoUrb4qhTTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:10:0e:80:a3:2c:f6:5d:6b:d5:46:55:b3:ea:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=96a8e5a1aa24afe9ec9e9da63d01d774de7070a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:b5:0e:01:0b:82:e9:f1:5c:d8:bb:45:c3:
80:68:f6:7a:1d:a7:f8:04:4f:61:9d:d2:e5:dd:e8:
5a:1f:e4:58:4b:ca:76:85:38:32:99:15:8b:0f:9b:
31:38:02:a2:3e:91:81:0f:11:fc:df:6b:61:3e:1b:
b2:f6:af:dc:40:31:7d:aa:87:ed:b3:26:fe:ee:2f:
bd:28:5c:a8:57:02:38:0e:1c:5a:d3:c9:aa:bf:35:
1c:a5:fa:ea:a3:5a:20:04:2f:6d:0e:6b:cf:3e:77:
47:22:f4:cc:b0:00:8e:2e:3d:60:ff:d4:83:fe:2d:
ab:bf:6a:8c:55:33:99:4e:1a:18:ed:b4:5f:53:3a:
81:c4:11:98:d4:04:5b:e6:bd:c5:2a:75:cf:b1:ea:
1d:f4:3f:41:a8:b5:f4:6f:f0:21:cb:66:3d:45:89:
cf:0e:9c:0a:7c:ec:93:0b:f8:3d:a2:42:f8:a3:e9:
3c:a4:87:c8:85:58:7b:5f:97:1d:3f:ec:59:f5:d8:
14:94:7e:89:a8:26:b0:11:b4:53:9a:4b:7d:3e:20:
6a:e8:6c:40:d9:8f:47:b3:b9:9d:e8:30:6a:34:e3:
df:01:62:91:c2:29:70:26:1a:2c:3c:25:36:c9:ad:
1a:df:20:43:c7:aa:53:36:65:1e:4a:15:cb:8b:3e:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:E5:A1:AA:24:AF:E9:EC:9E:9D:A6:3D:01:D7:74:DE:70:70:A1
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:01:d6:86:37:8d:b1:51:ba:10:8c:76:3b:5a:2b:91:d4:d0:
5c:bc:29:0d:6f:88:4d:65:38:1a:dd:b1:65:a7:01:d5:72:82:
54:b0:c6:47:36:36:b9:d4:16:64:43:62:52:3c:70:e1:a0:57:
de:59:d1:8e:d7:d9:84:7b:85:06:44:93:74:6d:fd:99:78:99:
0a:a0:19:c6:99:74:26:fa:84:1c:3a:46:ac:f2:9c:26:66:1c:
2f:57:fb:3a:61:17:70:05:01:2e:3e:46:0a:3b:a3:57:34:60:
d8:83:73:ff:f3:f5:d4:4b:cf:1f:f0:d3:bd:85:54:56:04:d1:
2a:13:9a:4c:e7:72:aa:96:07:fc:39:33:ac:e7:3b:f1:66:9c:
32:5d:06:c5:50:ab:05:76:73:40:bd:23:70:fb:b3:1e:27:74:
76:50:ab:e8:be:13:44:5c:a0:88:d4:70:4b:15:2a:fa:83:95:
7b:3c:52:f0:17:a3:ea:4c:24:65:bd:a2:fb:ef:85:79:c2:2f:
a8:a0:97:8b:c2:fe:2d:33:e5:7f:a5:40:11:c0:75:c2:e0:f8:
1c:68:ed:3c:7e:c7:84:47:b7:e9:72:75:24:98:cf:8f:8c:4a:
d7:42:fa:ee:49:31:a9:f6:41:8e:39:03:70:bb:cf:7b:9f:06:
a4:88:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:12 2025 by rpki-client