Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: uehtlL1dOwUmw74weN6gwfT+5bEC743mVy1TRqv9OYQ=
Subject key identifier: 22:D6:04:89:B0:A7:2E:2E:D1:45:CB:A9:1C:E7:47:D5:84:65:A4:39
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0199FD344F970075BE5BD1C57FCF51E90601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: CFuoQy02mQvAGPmQe6+G0ODDz2rKU5+c3tuf4DKsIQs=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4f:97:00:75:be:5b:d1:c5:7f:cf:51:e9:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=22d60489b0a72e2ed145cba91ce747d58465a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:79:5a:97:86:0f:a3:1f:de:1f:6b:9c:7c:
fd:ff:a5:2c:f3:c1:68:44:f7:69:ae:db:f1:7b:4e:
02:72:4e:c5:e9:10:28:e5:98:73:c1:89:a6:b1:2b:
4a:2b:77:c0:2f:9d:6c:dd:d5:00:55:2b:04:fe:d5:
21:85:f4:e0:c8:75:7e:af:79:1b:e2:62:03:0f:86:
ff:66:26:1d:b3:28:44:41:89:95:28:03:34:61:04:
89:b4:1e:22:46:aa:5b:46:ed:52:ca:64:ae:05:9f:
7a:f9:51:e8:25:01:03:63:e4:b8:6f:fd:6f:52:5f:
74:7d:c7:60:36:15:78:09:2a:4d:cb:8a:f7:cd:6c:
fd:9b:22:a5:59:e0:08:7b:be:39:f9:21:b1:d2:48:
ca:68:6c:8a:9d:ed:f2:44:d2:16:22:a0:23:e1:3c:
29:a1:cd:e5:cd:88:1a:5c:63:92:51:b9:4b:9b:57:
41:61:0e:67:0c:7a:64:4b:f9:9d:71:8e:91:96:c9:
a8:00:70:44:5c:e6:21:dc:be:63:d9:ce:c5:7e:21:
24:b1:d5:39:47:91:5a:36:7c:f3:9f:88:64:8e:50:
26:0a:06:5a:79:d6:4d:98:1a:37:22:6d:e5:11:79:
29:7a:68:cd:4c:04:17:73:08:dd:39:cb:cb:0f:9a:
6a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D6:04:89:B0:A7:2E:2E:D1:45:CB:A9:1C:E7:47:D5:84:65:A4:39
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:5c:9e:c2:ae:a4:7b:e0:ba:b6:9d:b0:f8:90:0e:0a:64:25:
ee:61:88:6d:7e:64:f3:36:96:cd:ff:09:e3:d7:56:af:b1:f4:
80:36:8d:32:6a:d4:b1:de:8a:a2:c2:68:53:5b:30:8a:bf:25:
9b:c3:b8:8f:3f:a4:0c:cc:97:ff:b1:dd:61:5c:e3:e1:1c:95:
86:2d:81:1b:27:96:d8:58:20:5f:c5:96:4d:9d:28:22:52:b8:
3a:ca:49:45:7c:51:f6:6c:87:f5:1e:6a:30:66:71:ee:ed:46:
60:8b:67:ac:be:1a:94:d4:30:1a:3d:20:31:69:4d:40:1a:f0:
15:b0:91:3f:23:da:00:1e:7b:3a:ae:fd:60:99:25:55:9c:4f:
9a:b6:e4:02:cc:9d:34:c8:df:df:92:c1:84:6a:64:7a:3b:83:
6a:d1:38:f6:7b:32:83:8d:e0:fb:0e:d0:8d:e4:02:37:59:0c:
f6:e5:7d:53:34:aa:fb:8c:de:52:d2:3a:41:d2:98:30:bc:95:
59:0b:f7:7c:96:aa:c8:cf:09:21:0b:94:2a:da:4c:c6:81:19:
37:61:25:e2:05:81:11:81:10:31:82:90:a8:06:36:56:01:23:
d2:74:0d:1c:d1:7d:14:3d:90:b4:32:4b:94:fb:fe:f0:d1:9f:
10:a4:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:56 2025 by rpki-client