Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: aBESAkAY9UXVOCOlpIXa6BkdDiG2WyIdZ9X4DSns228=
Subject key identifier: B2:5A:15:F4:19:C3:34:A6:68:E1:2D:92:72:47:5C:72:B9:C9:B9:78
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 0199FC21424DEB2F1C26737760DB8C75510A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: yvSC8Wnx4jC4L/fq254tfuCgUVGwQNLvw9/FS9jPtMo=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:42:4d:eb:2f:1c:26:73:77:60:db:8c:75:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=b25a15f419c334a668e12d9272475c72b9c9b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:81:e0:98:5e:b6:54:13:b4:67:4c:27:50:
6c:54:bc:98:d4:25:25:82:0e:78:0d:3b:f8:e0:cc:
c7:36:1a:ee:55:3d:01:47:6d:85:bd:2c:39:50:68:
53:a9:72:b7:65:19:85:13:88:18:a5:f2:9b:1e:fa:
7a:39:a2:21:3d:00:ae:e9:f6:0d:7d:59:f8:26:de:
cb:b7:59:e6:4e:f8:a0:b8:89:22:5f:38:9d:89:20:
f6:f7:33:79:6a:57:8c:8e:c9:9e:81:f8:d1:6c:a5:
a1:1e:0d:79:96:38:ef:0b:08:32:06:37:b6:3f:af:
f2:15:49:0c:7c:49:32:23:60:59:fa:f9:54:34:eb:
ba:e4:d0:b8:7a:f5:24:4e:7a:fb:88:72:6f:1f:93:
7f:41:d8:f3:f4:38:98:96:c7:0d:96:8a:ba:3f:e7:
35:73:fa:8e:d1:09:a3:e5:1a:f1:34:ab:55:53:6f:
16:e3:1f:d0:d7:0b:63:f5:a7:e6:f3:5b:74:99:55:
88:bb:5a:f2:34:6a:5f:0f:01:54:c0:9b:3d:9b:6f:
b5:29:79:f4:47:ce:ae:ba:6e:ed:d5:f0:ba:86:6b:
30:2a:e0:2d:24:fe:1f:f5:5c:32:a8:a5:8c:3a:75:
f7:7e:f4:e7:4b:c5:a9:56:c5:8b:f9:d8:e9:97:b0:
a3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:15:F4:19:C3:34:A6:68:E1:2D:92:72:47:5C:72:B9:C9:B9:78
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:f2:52:c6:5d:ed:3c:1a:c4:81:f9:1b:af:a0:91:f0:20:
ac:4d:13:4f:98:12:06:97:30:fd:ec:72:7e:25:f1:60:8c:2a:
2e:43:98:80:f0:36:9e:65:7b:05:aa:16:4b:91:d0:66:e9:4f:
2c:93:6a:a0:e5:bd:c4:3a:f4:31:0c:55:b4:f0:cf:bf:88:27:
76:90:9c:56:ca:08:89:a5:59:a4:b8:60:93:53:ab:92:e7:8c:
56:5e:25:16:d0:f2:0b:71:cd:1b:c8:4e:1e:4f:51:73:30:d3:
39:36:08:18:e3:c1:d0:33:9d:95:63:d8:7e:b1:84:5c:4b:59:
32:2d:b0:eb:dc:95:c3:3c:f2:9c:9b:47:f1:01:14:83:77:78:
b0:05:3e:c6:8f:f3:80:58:58:99:39:da:46:9d:16:44:94:4a:
c3:b0:d9:ed:b6:87:8b:94:00:5f:1f:32:df:15:1a:97:2c:ce:
40:c0:4b:df:0a:ed:0a:64:90:d9:b8:61:95:6b:03:f7:08:45:
a6:be:97:e9:ba:58:a3:e7:2d:f1:a8:32:01:d9:cf:e4:36:cc:
2d:7d:2c:de:ae:0f:76:74:d8:93:d5:99:ab:53:ca:ed:0a:02:
e3:36:0e:97:76:7f:f6:42:10:dd:7a:73:47:ce:9c:e0:9b:07:
83:ac:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:02 2025 by rpki-client