Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File: bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier: H3swQQcSsyOzMnlwEzhT35CHi0FmF+38WRjdp2Ke5Us=
Subject key identifier: A4:B0:2A:98:E6:11:BB:93:57:8A:2A:72:B0:2E:24:87:FB:07:3D:8E
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 0199FD34349122CEC86176EA3EC0CF65F876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number: 0EF7
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: 7KqUcQ+UzETw+GKDRjqmsZa+w+cv8c3MARsVOkqY0AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:34:91:22:ce:c8:61:76:ea:3e:c0:cf:65:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=a4b02a98e611bb93578a2a72b02e2487fb073d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6d:f5:83:22:f8:f9:b0:4b:e5:e5:9f:58:f2:
c7:e4:3f:0d:30:1d:d5:9e:1f:0e:7a:5a:ca:0e:ce:
2e:84:3e:64:84:e9:f0:79:f3:51:1e:f3:32:62:fb:
fc:fb:5d:e0:4b:11:96:75:12:78:d7:c3:dc:b0:3b:
8d:c2:4a:34:ab:8e:c8:65:ee:f7:ef:0e:ff:cb:ea:
21:cd:f1:3b:01:69:ec:45:95:78:85:1b:d7:ff:f7:
b9:f0:8b:22:4e:77:a7:b6:f9:bf:33:ab:6a:dc:d5:
34:a2:bf:e1:f5:ff:49:b8:ef:7b:68:c0:6a:e3:78:
4b:2b:aa:4d:4b:39:20:44:b2:6d:e0:d6:fd:36:97:
66:0f:81:ad:1d:84:30:4f:72:ef:05:85:48:84:4b:
4c:9e:76:6f:5f:9c:80:75:f9:52:6a:9e:9f:72:d6:
4b:07:f0:2a:4d:e1:76:f3:da:27:f7:42:f6:20:5b:
eb:01:0b:35:31:4c:6e:95:61:52:d8:11:81:5e:db:
fe:22:4f:b1:5b:11:0d:1c:f1:e4:79:bf:c6:89:36:
9b:de:75:af:ca:98:50:03:10:e4:16:ab:91:2e:b6:
07:4a:58:0a:19:bd:5f:64:d9:58:45:a1:79:58:52:
6b:98:5e:7a:c2:e1:ba:1f:ca:ba:8e:60:8d:fb:29:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:2A:98:E6:11:BB:93:57:8A:2A:72:B0:2E:24:87:FB:07:3D:8E
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ea:1b:a9:b5:c0:6a:e6:df:23:bc:17:aa:c6:2a:e0:34:57:
aa:3c:ef:54:3b:12:14:5b:4e:87:c4:68:80:12:a9:0c:9f:0f:
20:a6:b0:59:b6:0a:27:16:cb:18:51:42:ec:2f:bb:e3:e2:8e:
37:5b:26:7b:c2:75:a7:ce:21:92:10:79:9c:ed:ea:74:de:c5:
7d:82:c3:bd:e6:79:a0:38:b1:ba:67:b2:b8:a9:8a:c7:11:91:
ac:f7:53:f8:2c:44:10:4f:70:cd:28:89:82:50:a9:ca:19:7d:
eb:f5:54:db:31:d3:2c:1d:00:c3:33:bc:b5:b7:73:05:2e:82:
77:4f:09:d2:db:8c:dc:da:47:e9:22:88:b8:c6:a7:b0:bf:45:
e1:b3:13:55:09:68:88:a3:30:87:96:f0:97:b3:a2:e1:bf:26:
8b:8d:c5:72:e5:43:9d:01:2f:91:cd:0a:c4:f8:7e:38:34:bc:
de:6e:a1:b9:b4:81:7d:ed:89:e3:5f:df:26:27:52:63:c7:d8:
5b:1d:16:22:c0:ad:e3:8f:53:ec:6b:42:8a:68:1d:81:f5:96:
b0:63:67:dd:ae:97:e3:5a:23:1e:99:0c:5e:33:70:ec:3f:de:
c0:7d:8d:1b:ea:b4:11:fa:39:9d:74:90:1d:c3:92:19:32:66:
9b:8e:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:57 2025 by rpki-client