Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: Rd2PxhS5BHcWFJ6YZigEJwzh2quLz3TgfWAW6FyvJow=
Subject key identifier: 89:4A:C7:99:20:EC:55:DF:F0:9F:A5:78:A6:39:20:49:9A:AA:36:B6
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 0199FCFD7940F9F3AD3A418A23595AA737EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 08D9
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: RgSVJ8o/y4AQDjN2E2ygla96xEua+s6BOeZ+IKou1q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:79:40:f9:f3:ad:3a:41:8a:23:59:5a:a7:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=894ac79920ec55dff09fa578a63920499aaa36b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:41:42:e9:87:07:3b:88:cb:bf:2c:b5:b3:
d6:82:c2:30:19:d5:3c:b6:1e:d1:86:da:ff:1d:6f:
12:45:3d:95:57:ff:9a:cc:18:e5:e5:22:3a:88:c3:
54:87:49:6d:4f:8a:a1:52:39:5f:70:16:49:53:18:
11:19:ad:fd:5d:7f:a3:6b:27:7b:ba:3f:e9:02:10:
21:9c:2c:f4:87:aa:62:d1:cc:36:17:bd:61:a1:af:
65:d5:63:f1:da:60:4a:86:17:7b:e8:49:0b:a7:36:
be:06:01:26:1f:99:d6:6e:6b:aa:95:35:cc:2d:0c:
94:d6:a9:cf:63:34:86:cc:2a:0f:3f:d5:76:e7:10:
5f:e8:21:24:da:11:23:d5:da:47:34:78:33:7e:6e:
0b:8a:45:51:7b:d2:4e:eb:87:fa:b0:12:f2:26:4d:
21:93:26:a6:1a:c6:2a:c2:2b:7f:8d:8d:9c:a4:f6:
39:96:d3:3e:d9:4c:bd:4f:f4:2e:59:7f:e4:f4:3e:
51:44:e8:52:fa:ca:4b:97:b8:e3:f7:23:f5:b6:c9:
2d:e1:4a:56:71:bc:15:52:3e:66:27:f9:97:d7:21:
bc:f1:c4:34:f0:cc:e2:ee:cd:27:21:7f:44:bc:8e:
0e:48:5d:e8:0d:84:df:3b:c2:9c:89:c8:41:54:5a:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:C7:99:20:EC:55:DF:F0:9F:A5:78:A6:39:20:49:9A:AA:36:B6
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e7:25:43:af:26:fa:50:65:38:b2:ab:9a:97:16:26:7f:a6:
d8:54:91:41:9a:3f:fb:f3:a6:60:fb:3b:5f:b8:ce:fd:2d:a2:
49:de:6c:b8:d2:73:c1:08:89:b4:a1:97:74:b2:60:b5:86:33:
54:2e:cd:70:2c:eb:11:04:44:01:b9:19:c9:cd:3b:e4:78:75:
38:74:bc:73:70:45:97:02:1d:97:41:5e:11:62:2f:a5:60:7e:
f9:1f:59:02:c7:93:db:37:4f:bf:89:01:62:11:4c:0c:84:9d:
85:ec:50:e1:74:8e:41:d9:c8:fb:c5:8c:d4:0e:31:dd:34:ec:
1d:f7:50:43:e8:30:7c:63:07:71:63:a2:64:ef:da:aa:87:72:
7c:5b:6b:a4:a4:f9:6c:40:ce:ad:ae:53:ad:1a:c3:c2:f6:11:
b1:87:10:b6:f1:7e:21:f0:36:f0:8f:18:a9:89:e8:0f:07:13:
b2:18:11:ee:23:0f:15:0a:d1:a5:d5:a8:34:fa:8c:c2:82:f1:
a6:b9:5f:7d:a6:1f:bc:bf:cb:b3:fb:5a:98:72:19:e7:46:a0:
87:87:c8:4e:b7:4e:a9:0b:d4:7c:85:0a:ab:2f:86:7a:1c:93:
61:86:55:93:ea:0b:7e:6d:36:d4:fb:53:bd:70:97:45:70:f1:
3b:31:ad:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:05 2025 by rpki-client