Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: ZyGAkVv+DibcaAd6zHhXU/xJnIh/W771AFt40shxn0k=
Subject key identifier: 8D:0E:61:90:D0:6F:C7:AF:81:30:5E:74:A9:46:46:D3:51:F3:22:61
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 0199FF2274E0AF994B8E520FD3B756C6A31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:12 +0000
Manifest this update: Mon 20 Oct 2025 01:01:12 +0000
Manifest next update: Tue 21 Oct 2025 01:01:12 +0000
Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: TnQdwAhtEe3rJhW795y2ug18/HkW4bVqcaogMsbqq5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:74:e0:af:99:4b:8e:52:0f:d3:b7:56:c6:a3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Oct 20 01:01:12 2025 GMT
Not After : Oct 21 01:01:12 2025 GMT
Subject: CN=8d0e6190d06fc7af81305e74a94646d351f32261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:36:8d:8e:2a:b1:d9:cf:f0:85:0a:54:31:
06:5d:98:8f:d0:1e:18:5a:41:52:f7:3c:2e:1d:5c:
b0:ec:9b:db:4b:97:d4:74:aa:80:af:35:53:26:9d:
1d:3e:42:9a:c1:1e:0e:10:b1:31:36:99:c4:b3:11:
36:cf:2d:6b:8c:a6:e5:79:3f:e7:7f:e1:04:3e:10:
2f:d3:ac:a3:fc:7a:24:9f:dc:eb:dd:40:6d:a8:1e:
b7:a2:f8:83:bb:54:bc:61:40:5c:b6:03:05:5d:d9:
db:88:20:f2:15:fb:e1:4f:c0:25:db:0d:30:19:88:
34:04:4a:d5:7f:68:ff:f8:6f:c9:ad:7d:c4:e7:30:
48:e8:b7:9e:74:38:ca:55:72:0c:f5:00:db:a9:7e:
11:c3:3a:c8:cd:b0:19:c2:0e:0d:39:b6:1b:49:70:
31:49:a2:28:ca:1d:a3:ab:78:08:22:3a:b8:7b:b5:
12:96:2b:c5:62:96:58:97:3b:02:93:99:75:f3:74:
30:5a:e6:1e:f4:af:d2:07:07:56:28:a3:66:30:21:
52:44:b7:99:52:7a:db:58:fe:75:d7:9d:3e:44:d3:
d7:b4:d2:18:9c:13:7c:e4:90:6f:4d:ab:c9:94:b5:
73:ad:e1:3e:aa:c2:70:07:a6:9b:2b:2a:f1:b6:01:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:61:90:D0:6F:C7:AF:81:30:5E:74:A9:46:46:D3:51:F3:22:61
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b3:81:a3:fe:c9:15:57:0f:a2:3a:fd:c2:a8:80:56:52:cd:
e6:8f:f2:1c:62:db:62:63:29:18:e4:e8:90:0a:23:5c:fd:75:
55:d3:f1:82:e3:0b:7b:fe:68:e4:03:07:a9:69:fa:d4:5d:18:
cb:a3:d0:24:0f:6b:5a:a1:29:03:78:8f:5c:97:56:25:b4:52:
c3:35:94:1e:06:ad:ad:61:01:4e:61:32:51:eb:22:88:0a:79:
ae:52:3c:a8:2d:ea:a6:93:3b:b7:af:24:36:8b:bf:57:16:ca:
a2:f6:f7:96:8e:19:97:0c:e9:ea:d0:8c:60:ab:95:d3:75:fd:
b7:d9:cc:8f:a6:22:f1:c0:08:33:25:2c:c0:b1:93:1f:dd:3c:
f8:84:39:ea:00:a7:3a:5f:5d:ea:0d:2b:39:9c:eb:1c:7c:06:
f8:e5:07:34:5b:2f:e0:db:e1:3a:d3:72:ac:82:7a:16:51:42:
7d:b9:b6:07:36:1d:63:1c:9a:07:06:36:b4:44:bf:5b:45:85:
50:2a:03:69:28:a9:47:ad:79:cf:d7:c2:f0:ee:e4:20:fc:71:
7b:04:96:89:68:68:6d:a5:43:5d:8a:b2:c2:2b:88:cf:9b:0c:
c8:2a:5e:6b:0e:31:af:35:4d:c2:4e:5d:c2:3c:28:7e:b3:49:
7b:cd:d9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:18 2025 by rpki-client