Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File: bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier: 9HrIuuzwZtrP8EjHYPrK3MAV6SGZbMeotOwFqi4uS0c=
Subject key identifier: 6B:29:E3:79:F7:3B:1F:80:4F:FB:D7:27:9A:78:D4:3C:FF:C1:5F:42
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer: /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial: 0199FDD9564C341EDDE95EF12A7A18ABF8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number: 0A79
Signing time: Sun 19 Oct 2025 19:01:42 +0000
Manifest this update: Sun 19 Oct 2025 19:01:42 +0000
Manifest next update: Mon 20 Oct 2025 19:01:42 +0000
Files and hashes: 1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: hfnojfa787ZgHx5Kek3eEhk7MVUS8U2h1wIBHDEUjzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:56:4c:34:1e:dd:e9:5e:f1:2a:7a:18:ab:f8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Validity
Not Before: Oct 19 19:01:42 2025 GMT
Not After : Oct 20 19:01:42 2025 GMT
Subject: CN=6b29e379f73b1f804ffbd7279a78d43cffc15f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:54:a3:a5:d2:5b:f2:59:be:48:91:73:c8:a4:
21:25:87:51:5b:b6:4b:f8:a3:79:ab:4c:16:fc:fc:
e0:d7:7b:1f:d0:d8:03:df:94:98:2d:84:1d:78:3b:
bb:79:aa:24:e9:9d:3a:e9:4e:3a:63:ae:78:cb:60:
45:50:80:0b:04:6b:f7:1f:3e:e0:d5:9a:95:eb:18:
d3:0e:0b:ec:2d:d2:ba:3c:47:72:d1:b2:1a:f9:81:
19:bb:1e:16:02:6d:f9:6c:eb:fa:53:78:7c:32:05:
dd:7b:26:46:e9:41:f9:8f:b4:5d:0f:4c:7b:ae:c6:
cf:13:f2:64:38:03:af:1d:b8:49:85:4b:b8:b9:79:
6a:11:09:9b:48:fc:25:05:fc:88:3e:c4:62:81:33:
53:5e:f6:11:9c:b6:65:c6:23:52:79:aa:be:fe:96:
16:8d:ed:7a:90:01:3d:f8:fd:19:19:37:05:68:6a:
1c:e5:c2:26:04:22:f4:69:34:85:b5:c7:05:28:ab:
c6:06:a0:54:25:16:3e:ee:4b:87:01:aa:bd:c7:5f:
8b:3f:3d:6f:d4:fb:fb:7f:13:76:a3:45:09:1d:af:
0c:52:f7:3e:64:a0:a6:fc:92:51:1c:69:87:26:45:
31:dc:79:c8:46:5c:b0:f8:c3:bc:ff:9a:3a:52:a7:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:E3:79:F7:3B:1F:80:4F:FB:D7:27:9A:78:D4:3C:FF:C1:5F:42
X509v3 Authority Key Identifier:
keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:aa:d3:e5:8c:27:8b:a5:03:c9:39:87:fc:93:27:62:26:b3:
63:d9:fb:f6:ea:d2:b1:3d:78:7a:49:b6:af:1e:3d:48:9d:b3:
33:78:2f:33:5a:0f:c1:85:8c:93:d1:e2:37:83:a5:29:3f:df:
c6:76:43:da:62:e6:2f:70:e4:f7:ac:ae:4f:2c:78:c7:2e:6d:
30:5e:ae:ac:15:b6:2b:99:01:8f:db:de:0f:a7:a3:bb:90:a8:
cf:34:54:40:3e:13:3a:3e:ff:30:d8:78:36:70:10:68:c0:4f:
5d:73:3f:7d:b5:12:e3:b4:03:23:ea:04:62:58:06:b9:a4:d1:
27:a6:be:74:9a:be:5e:e6:e0:d3:13:44:b7:89:d7:19:0a:40:
99:69:cb:b4:cb:7e:ef:74:7f:f7:f2:c1:76:ba:fe:2a:4c:f7:
c1:f6:ab:e5:a9:a0:12:80:0d:58:7a:b4:c8:c5:05:02:20:b4:
60:c7:13:c7:ad:1e:5c:9e:0b:45:bc:d6:c8:b6:0c:cb:74:85:
3f:74:ec:ca:2d:e9:bd:54:92:4d:9b:70:44:e2:9e:50:28:9b:
77:3d:e8:d1:e8:00:c8:21:bd:96:06:ca:b2:ab:d2:b4:00:ac:
27:53:2b:d3:85:6f:b9:be:db:c6:56:43:58:60:6b:60:91:2b:
7b:a7:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:44 2025 by rpki-client