Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: Q+m+rJ87khSPH7WU/NAsd+5pywz/zmQYJhIUzdaNZdI=
Subject key identifier: F6:C9:EE:F3:8A:89:F5:3B:D9:C0:7F:A2:E1:33:5C:FB:B3:42:66:98
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 0199FF22DF6ECD26ADD8C910797073AB3DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: cnn6XU71kF8MFvuzEC0yNMVRXbBpRIq645f6VFklPX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:df:6e:cd:26:ad:d8:c9:10:79:70:73:ab:3d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=f6c9eef38a89f53bd9c07fa2e1335cfbb3426698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:db:e7:71:db:b1:3e:16:1f:af:bb:88:27:
c1:ba:e9:ed:67:c0:4d:92:90:91:8b:cf:dd:d2:7f:
37:1d:e2:54:ec:31:82:ca:f7:f7:bc:37:d0:dc:a3:
16:02:28:69:a9:0a:96:c3:b7:7b:fa:31:8a:12:ea:
f6:56:59:ab:96:a0:d2:1c:eb:31:7c:1a:dd:3e:b1:
25:13:51:64:f2:af:97:3e:ed:d2:38:0f:dd:fb:fc:
1f:af:03:d9:c1:3e:05:32:59:64:97:f5:e6:85:8e:
05:b5:d5:50:92:17:93:1e:d2:f2:7d:26:43:5c:fe:
52:fd:c4:1d:91:e7:b0:bd:03:20:80:0d:e4:3e:4f:
f6:e7:76:7a:08:21:1f:9e:da:5e:bb:34:e6:92:93:
c4:2c:df:6c:c9:52:e0:46:10:0a:5d:74:9a:43:13:
65:a6:ae:2c:5b:59:47:ad:f6:e5:2f:1d:5d:e8:8c:
15:e3:e0:69:32:88:d4:36:eb:b3:ef:61:66:d4:f7:
1c:c1:a6:92:c8:b3:e3:29:f0:fc:33:53:44:65:c2:
54:93:39:47:24:25:bf:b1:a1:f0:3c:81:60:bc:05:
f4:79:02:30:a5:23:b8:a0:5e:9f:bb:19:a3:dd:06:
bd:67:de:c1:7f:89:f2:e5:52:c0:ff:d4:63:6c:f4:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:EE:F3:8A:89:F5:3B:D9:C0:7F:A2:E1:33:5C:FB:B3:42:66:98
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:33:34:ea:89:43:04:14:f6:70:2d:2e:ff:60:8e:95:c0:19:
a2:4f:0c:d4:82:7f:a6:b0:0a:e7:2c:09:fa:52:60:0b:e9:84:
8c:f5:31:40:f8:ff:d4:90:57:0a:e9:45:80:c7:1e:33:8d:fd:
8f:6d:a9:b7:ee:56:94:e2:61:e9:69:84:ba:e9:a8:e0:bc:19:
7a:27:a8:f8:d5:c4:38:f0:5d:ab:9c:ff:e0:4c:ae:d1:e0:98:
f6:66:a4:4f:71:ce:9e:8f:a3:67:22:e8:3b:42:b3:5e:a0:c4:
db:1c:e0:aa:6d:fa:f6:b3:e4:0a:c6:a0:0e:44:c1:67:2c:39:
65:f3:5e:4c:bf:ba:b6:da:11:d4:e0:9f:5e:6e:46:62:f7:2f:
93:c5:a5:44:11:33:52:91:63:6d:cf:25:5f:74:a8:ae:80:d0:
cf:84:b2:c8:67:62:19:c8:cf:dc:d5:59:72:cd:52:aa:58:04:
51:e4:9c:ea:ef:18:84:46:32:41:4d:f3:51:68:2c:ae:a1:88:
c9:e3:53:19:33:88:f3:40:c6:5f:e0:68:70:de:ec:ee:82:e1:
aa:5e:99:8a:1d:60:1c:a7:a2:b5:78:e5:f5:b9:57:27:c1:52:
d4:4b:13:a4:e7:73:5b:f2:a6:8f:ff:b0:c6:b8:65:41:0b:e3:
35:ef:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:31 2025 by rpki-client