Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: AJ8goi4OqvuzbvuaxekO7MjG9HVjuxVNQQO3q3EZpIs=
Subject key identifier: 06:D0:DB:B7:FB:90:2F:3F:90:FE:1B:C7:37:22:B3:EB:D7:D0:50:19
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 0199FC8F25CB9E659A4230E2118955B137B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: uOPUPJTPrMifI3JfA7CDV0al5mJtMDqKydlJT7n8tJw=)
2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:25:cb:9e:65:9a:42:30:e2:11:89:55:b1:37:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=06d0dbb7fb902f3f90fe1bc73722b3ebd7d05019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:13:33:d1:b5:87:81:56:e8:b1:d5:f6:95:
d4:10:2f:90:56:9c:60:d9:3a:b2:a8:c7:a7:ff:71:
8e:40:06:71:41:9b:d9:c8:fd:d2:4d:4d:90:46:0d:
36:73:d2:74:52:2b:c9:e1:a9:a6:13:58:0a:a0:8d:
07:92:26:2f:fb:e9:c9:ec:28:02:5b:73:10:91:41:
af:95:6b:34:65:95:30:e7:13:70:4d:bf:0b:9c:99:
84:c8:ef:fe:5a:8a:75:2f:f8:c6:78:ac:c8:5b:12:
17:2e:88:e3:86:a1:69:0c:07:3e:f5:66:e0:e6:e0:
48:7b:ae:47:fa:d4:b9:a3:21:67:6c:9e:b4:d5:30:
19:18:43:61:1c:e5:fa:06:ac:81:40:4b:3b:8a:54:
7b:58:70:bb:fc:35:82:8b:c8:06:83:38:bb:8b:e5:
33:c7:d7:6d:80:6e:e1:3a:90:f6:20:b2:09:53:ba:
e3:a7:af:cd:5d:eb:58:63:ed:29:a2:5d:ca:e0:20:
30:ff:b7:26:4a:2b:f1:0b:b7:1e:10:d5:fc:5a:61:
a9:8f:0b:58:3e:25:af:5d:d9:82:99:b4:d9:40:77:
4d:fa:5f:15:67:53:1f:26:f3:22:a8:cf:46:0e:0e:
4d:ff:e0:98:fd:ee:ca:86:ba:51:ac:f2:46:6d:9c:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:DB:B7:FB:90:2F:3F:90:FE:1B:C7:37:22:B3:EB:D7:D0:50:19
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:e5:4e:a7:72:2b:5e:3d:fe:b8:f2:b5:25:ae:21:4f:80:
75:3d:d4:3b:18:73:d5:71:5b:dc:5b:e9:ff:c5:59:c8:08:3a:
14:91:b1:a2:31:5f:84:ef:10:eb:65:25:52:cc:19:c6:9e:7e:
3a:28:1a:5e:63:d0:b8:88:d1:a1:73:a8:55:a5:07:69:4c:2c:
62:39:54:ce:49:7b:47:2b:ae:64:29:0a:3c:64:1f:32:ea:14:
6e:0b:55:10:e7:4c:24:82:ef:25:b9:4e:ab:3f:cd:30:70:a9:
8d:4e:10:c4:04:20:92:60:24:9a:b5:cb:85:cc:07:cc:6c:6f:
61:4b:3b:d2:ef:29:70:c0:11:53:02:4e:a7:d6:c8:3b:fe:38:
d7:ac:0e:34:4a:48:a7:2a:1a:79:7b:11:99:88:ba:c6:23:0b:
0e:35:98:23:eb:11:8c:88:54:58:c8:9c:ca:4a:01:e8:f4:4e:
14:0c:24:79:4f:e0:cb:2f:6d:1d:a6:e8:da:ee:af:14:99:dd:
b8:6a:5e:e7:24:80:5c:fe:d4:d9:80:64:f7:79:7c:41:59:05:
eb:c7:1f:ce:da:28:6c:58:15:ad:99:da:f5:ca:1e:4e:64:06:
2e:23:3c:28:3e:90:6c:da:e4:98:54:36:e1:8a:a8:a2:28:64:
a7:eb:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:47 2025 by rpki-client