Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: e7SygLvaOZILmkodi9O5PBCjV2r1pCp58iJ4Nqoh6BY=
Subject key identifier: 31:16:44:A6:A4:C3:FA:C8:D3:4C:BE:D3:EE:2C:EF:5A:0A:0B:43:4D
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 0199FB45FC575290D2BFBAE1ECAC5442F701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 0B
Signing time: Sun 19 Oct 2025 07:01:31 +0000
Manifest this update: Sun 19 Oct 2025 07:01:31 +0000
Manifest next update: Mon 20 Oct 2025 07:01:31 +0000
Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=)
2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: JXooNaaLavMdPN7eP68HinDCJeUV3on60Gwc1G/p8Dw=)
3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:fc:57:52:90:d2:bf:ba:e1:ec:ac:54:42:f7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Oct 19 07:01:31 2025 GMT
Not After : Oct 20 07:01:31 2025 GMT
Subject: CN=311644a6a4c3fac8d34cbed3ee2cef5a0a0b434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:0e:93:ba:bd:6c:1d:91:49:41:19:7b:15:
70:a0:b4:52:71:e3:e2:3e:d9:8b:b2:14:f1:21:58:
53:28:74:84:4b:85:87:6a:12:16:e7:8b:f6:ba:1e:
6c:97:d9:08:36:a0:51:d8:41:db:8e:a2:96:e8:48:
66:8a:de:cd:7e:a7:27:9a:cc:db:34:3f:96:5e:32:
db:56:fe:f2:50:b7:8a:ad:48:05:07:5c:6c:67:1e:
a6:fe:3d:fa:4d:b2:84:f1:0f:af:73:a9:ae:2e:35:
b3:f9:f9:69:b2:e3:8e:e6:93:23:cd:e5:71:81:4b:
ac:25:dc:6d:eb:18:76:5c:31:ca:80:cc:21:cb:60:
be:22:cd:72:12:2b:62:35:ba:72:13:36:9f:26:66:
cb:24:e9:90:5d:54:66:65:ff:c5:8a:e0:79:5b:21:
25:f5:f1:3f:99:a6:88:6b:fa:80:ec:5d:f7:30:b2:
10:fa:c0:81:72:b3:af:31:2c:93:d7:a1:66:81:95:
ba:2d:97:60:c6:c6:f2:ee:b9:d8:b1:d7:aa:a4:15:
94:f5:16:58:6d:39:3e:5a:7a:68:36:1c:9e:45:b3:
e2:d2:c4:30:7c:16:eb:43:e3:4e:79:90:ce:e6:d6:
c9:45:66:fb:4a:40:f2:77:02:17:1a:28:93:41:6c:
11:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:16:44:A6:A4:C3:FA:C8:D3:4C:BE:D3:EE:2C:EF:5A:0A:0B:43:4D
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:59:01:cd:da:84:46:95:7a:c5:09:ef:e3:e3:a5:70:95:fd:
d9:dd:ff:6b:7c:95:53:98:a8:01:de:21:bf:37:b8:02:1f:8f:
c5:38:c6:f7:14:b1:23:47:9a:a7:01:de:dd:29:46:5e:30:b0:
7e:eb:28:5f:a8:da:ad:e2:a8:3a:73:01:28:d7:de:4d:9a:7e:
ae:e9:8a:48:69:a8:b2:3e:4f:eb:80:b6:1d:99:e8:6c:56:8e:
f6:d4:79:8a:dd:5f:b3:ab:72:b1:be:59:02:c0:45:3a:e5:35:
cc:b7:0b:34:28:ff:46:ab:33:33:c4:41:38:0d:34:a8:4b:e6:
1a:41:20:ec:83:f0:8f:3a:5d:c9:b8:2b:f3:fc:f0:36:b0:3f:
13:8d:4b:3d:41:43:53:7c:95:1f:29:dc:71:5c:35:f4:c3:36:
0f:93:18:6b:83:5e:0c:b5:b4:98:98:00:e7:f6:dc:ad:0d:c8:
a4:f1:6d:65:1f:34:f0:ee:51:aa:9b:da:f9:d3:4e:8f:cf:95:
8c:c8:eb:8a:92:0b:d5:50:16:7f:4c:c8:c5:b8:38:61:18:a0:
6c:33:62:ad:88:be:34:f8:4d:de:28:93:2a:28:e9:9a:45:04:
00:d4:f3:ed:33:15:af:87:b1:9e:f7:4c:ef:46:6d:09:f3:a9:
da:0b:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:04 2025 by rpki-client