Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: /O0YGmbewQqakHCcZ6wbfDi3QcfwQLADpYfEDHYzU3U=
Subject key identifier: 35:3E:9E:8F:1C:95:5F:D9:2D:B7:72:B1:DB:68:AF:5E:35:D7:E1:72
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0199FD33E099165034C23FC064A6F8B83825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 16:00:59 +0000
Manifest this update: Sun 19 Oct 2025 16:00:59 +0000
Manifest next update: Mon 20 Oct 2025 16:00:59 +0000
Files and hashes: 1: U0kz5BkcYHKTFNPtHMwJo21XKHU.roa (hash: iaCyCipdJ6ekGgikYiiFtPDbJGVukpDzv6A6Dr6X+s8=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: l5l5oqfe3wcQ67PMWF5DNag8fEkw8m1XlVCwwn6gpaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e0:99:16:50:34:c2:3f:c0:64:a6:f8:b8:38:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Oct 19 16:00:59 2025 GMT
Not After : Oct 20 16:00:59 2025 GMT
Subject: CN=353e9e8f1c955fd92db772b1db68af5e35d7e172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:ce:57:48:8b:7f:50:00:97:e5:58:fc:43:
51:13:b5:bb:bf:d7:c6:2c:a2:2c:ef:72:0e:26:08:
f7:57:30:b9:d3:b0:d1:19:f5:d1:07:4f:1b:bd:f6:
e9:99:8e:24:ef:dc:01:c9:78:ab:dc:45:6f:67:f0:
cd:82:20:fe:bb:f2:91:a1:62:5e:43:bd:36:58:0d:
69:07:b6:a5:b4:91:8a:f7:dc:3e:bb:81:97:f3:eb:
15:8a:b6:f5:0d:f8:5f:41:71:ec:e1:95:79:6b:2e:
7d:ca:d3:d7:78:03:a4:16:6a:83:6b:08:3a:a0:bd:
53:e1:35:65:c7:e6:40:53:81:eb:7f:7a:30:90:98:
7f:78:bf:83:60:92:29:63:f9:ed:6e:fd:12:7a:c0:
30:a7:41:25:b3:f7:fa:fb:b4:e4:8f:1c:39:5c:6a:
a1:c4:33:bf:6f:e8:26:36:45:8d:91:51:38:75:3e:
df:4a:a6:7e:2f:17:93:a8:81:81:84:9c:50:4b:a2:
9c:ea:49:44:05:ad:47:01:44:c1:61:58:d9:d7:3e:
20:ea:c1:cf:c1:82:68:ed:73:21:5c:ac:75:1f:8b:
c5:d0:50:28:46:0b:20:f7:73:2d:c6:ad:ce:d1:e4:
61:f2:f3:15:2d:41:e6:41:d4:a9:b4:fa:8e:16:35:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:9E:8F:1C:95:5F:D9:2D:B7:72:B1:DB:68:AF:5E:35:D7:E1:72
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:67:d9:18:06:96:ca:a2:6b:0a:d3:b4:9a:04:a0:e2:7d:58:
d9:f2:e1:40:2d:b5:5f:8d:c2:18:ff:1e:40:00:74:e9:c5:99:
27:0a:86:0d:2b:8a:e4:8d:42:db:b6:d2:19:fc:bb:1f:7a:c7:
e6:2a:33:c1:50:38:0d:b4:00:b5:81:d0:d5:4a:ad:32:25:36:
0d:a3:34:f0:f7:68:23:39:61:e4:31:55:7f:42:e0:b2:96:e0:
0c:ad:ba:f3:76:82:3c:0b:9f:03:f7:23:ee:55:77:17:58:63:
57:89:ad:1e:4f:04:0c:09:58:93:09:8c:f5:c2:10:30:5f:76:
4f:33:a3:14:fd:0a:78:ce:e8:b5:e8:85:29:88:f3:02:97:99:
bf:b8:91:1f:ee:1a:57:d4:f3:01:10:50:18:74:03:1e:a3:74:
11:59:ac:67:98:50:9d:68:c7:5d:85:4d:83:af:7f:dd:62:c9:
a4:35:4c:5e:73:b7:71:75:57:c3:e1:bf:3d:c6:fc:d7:25:62:
8b:6e:a3:98:cc:f1:ec:b6:83:de:c6:13:c9:ee:ef:31:49:10:
f2:dd:ed:9a:41:bc:3b:a6:5d:f6:62:1f:21:49:34:d6:c7:c2:
35:6a:f6:ad:42:d7:af:29:9a:83:43:8f:6b:06:86:60:fa:c3:
66:69:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:25 2025 by rpki-client