Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: RFF0dC+AJh1VJAdtHobw2kGyftjRRbxmhX+wLbwICdw=
Subject key identifier: 8C:08:56:BC:7D:5B:8F:97:7D:BC:23:C9:88:CC:FE:B0:01:6A:AE:22
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 0199FE1025FF4A91AFF07413D7091E911503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 20:01:35 +0000
Manifest this update: Sun 19 Oct 2025 20:01:35 +0000
Manifest next update: Mon 20 Oct 2025 20:01:35 +0000
Files and hashes: 1: 6I3Ul79wxRN6W37mo7nUpqwqt0s.roa (hash: J9bvPeLp8sfcjLoyxN9ggYT+mX3AB6I6+8a1daK3z1U=)
2: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: udK+qThFYan70rseZdxx9i/bAY2i0K1zjR3PykxN7Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:25:ff:4a:91:af:f0:74:13:d7:09:1e:91:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: Oct 19 20:01:35 2025 GMT
Not After : Oct 20 20:01:35 2025 GMT
Subject: CN=8c0856bc7d5b8f977dbc23c988ccfeb0016aae22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:0c:05:ae:37:27:63:ac:a8:2b:a1:31:01:
9d:be:9f:00:11:a3:2f:44:94:47:b6:f6:73:45:78:
55:46:51:2f:5b:24:32:ae:a3:b2:16:8e:f1:73:07:
30:c4:85:7d:4d:4c:2e:aa:96:3a:59:71:7d:6e:d9:
68:ba:28:d4:47:b1:1e:15:86:a1:10:a2:65:2f:00:
9d:f7:fb:5a:d3:30:50:0d:dc:62:e4:86:ea:c7:11:
f7:51:1d:79:d1:82:ea:e4:5e:87:7a:0b:77:ee:be:
8c:33:ef:10:6e:24:c4:b4:a9:7e:ce:80:4a:3e:9c:
ef:70:28:4e:17:a5:03:a5:46:ce:7a:85:96:f5:af:
39:a6:21:f6:37:9f:9e:a0:71:30:ba:f1:54:7f:2e:
78:9b:f0:d2:35:76:35:e5:42:29:f5:26:d2:c4:5a:
0f:4a:ed:09:86:a5:b8:38:42:0f:81:f6:99:b7:13:
40:75:67:ce:23:48:63:45:af:26:1e:f4:1f:e0:83:
1d:7e:ee:ba:29:30:6e:29:74:d8:5f:b6:1a:12:5f:
72:7d:b8:b8:49:e0:db:69:f1:3f:43:fa:c9:b3:55:
c3:e7:67:f7:82:af:a3:6a:f3:df:06:f9:cc:98:4a:
12:9f:0f:f0:ac:ec:dc:77:a9:25:7e:65:d4:5a:5f:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:08:56:BC:7D:5B:8F:97:7D:BC:23:C9:88:CC:FE:B0:01:6A:AE:22
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e3:e7:02:63:fb:7b:95:f4:31:51:c2:5e:a1:7b:f9:0f:28:
03:bb:5f:bc:4a:4c:fc:b3:fc:fe:06:13:63:9f:40:c7:39:50:
e1:1b:c4:34:13:e4:07:a3:41:7c:38:58:b0:6a:9f:34:3f:e6:
76:04:e6:2a:1f:08:b6:24:b3:cd:ad:f4:61:e5:8d:14:e0:44:
b3:94:3c:fe:01:59:b9:fe:8f:44:4a:0a:82:4e:8d:cb:e6:31:
1b:32:72:20:cc:10:07:0a:e8:a4:b3:9c:53:d0:51:8c:ed:b1:
a6:a0:ef:35:8d:19:45:96:d9:e6:eb:e2:f4:c3:bd:80:e1:f8:
65:66:27:c6:51:76:d5:d1:37:fa:3d:55:93:ef:a2:d2:db:65:
a3:98:62:9d:bd:10:87:b5:26:54:da:0b:47:98:a7:5d:09:e8:
9a:62:82:bd:6e:52:34:05:a3:58:05:89:b0:4e:c8:2b:b3:1b:
a9:f8:6f:04:d4:44:f5:06:5e:0a:cb:f7:4a:b3:32:65:0c:da:
89:92:37:a9:3c:56:49:2c:22:df:9d:31:28:e8:70:02:d6:8e:
6a:0b:7a:41:f4:a7:45:5d:f6:9d:f2:d5:59:27:b8:e2:7e:f3:
37:40:a1:63:c8:0e:0f:f1:0d:60:c1:ac:60:75:44:4f:7c:78:
f9:4a:5e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:08 2025 by rpki-client