Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: IsSv5YXzPhGkvXgYHHNwRl4sFVVLevzrYIbRV4uHGAs=
Subject key identifier: 76:B5:E4:36:D0:4D:38:01:5C:AA:03:19:23:E8:1D:11:BF:FA:16:6C
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0199FDD96196BB50727B0E2101E6C0AD712A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 1550
Signing time: Sun 19 Oct 2025 19:01:45 +0000
Manifest this update: Sun 19 Oct 2025 19:01:45 +0000
Manifest next update: Mon 20 Oct 2025 19:01:45 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: 85pT5Q8tYOL3vixROSrsNbXnNIosmEJz8gBkRaFRB2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:61:96:bb:50:72:7b:0e:21:01:e6:c0:ad:71:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Oct 19 19:01:45 2025 GMT
Not After : Oct 20 19:01:45 2025 GMT
Subject: CN=76b5e436d04d38015caa031923e81d11bffa166c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:2c:5b:49:b9:94:87:82:2f:71:a8:8e:c0:
b8:d9:94:0e:00:04:69:a7:4e:6b:7e:d2:60:f2:64:
30:ef:3c:a8:d7:84:f4:74:c3:21:72:b5:ee:1e:ca:
17:f4:28:0d:1d:11:f0:2b:e2:e8:42:19:94:85:d7:
59:ce:b9:8a:97:67:2e:00:c0:9a:88:8a:73:7c:f1:
ad:84:d2:5f:73:04:11:02:4a:37:95:35:c8:cf:c8:
45:26:39:d8:fb:fe:77:6f:02:21:fc:97:22:e0:60:
2b:45:d8:42:ce:45:fc:5b:08:bb:db:d5:4f:8f:43:
e6:e9:64:8c:b6:a2:92:f7:fa:ef:e2:64:14:a3:ec:
c1:54:2c:78:29:5a:04:67:75:02:8d:a8:fc:ae:7a:
0e:74:61:eb:78:3e:e4:a2:41:46:ef:5c:72:50:9a:
26:e5:8f:21:37:46:59:32:e7:f2:32:cf:bf:af:b0:
24:cd:99:53:00:e8:ab:78:dd:fb:8a:8a:26:a5:5b:
8f:a1:19:cf:14:8a:2a:60:d0:84:c7:51:5b:1b:fb:
00:96:80:b5:ef:66:73:5a:8c:ed:c0:ae:58:93:d8:
c8:ed:d8:47:d4:25:65:75:75:4b:fb:03:c2:5e:36:
ba:36:8a:ed:25:d2:5d:1e:20:b2:5b:f8:6e:85:a3:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:E4:36:D0:4D:38:01:5C:AA:03:19:23:E8:1D:11:BF:FA:16:6C
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:bd:c7:97:a4:ef:01:ec:de:c1:5d:b9:d9:d8:1f:e1:23:
cf:b7:d1:3f:9e:b0:ac:71:c2:9a:a9:b8:fe:3d:f7:92:bd:29:
f7:20:4c:be:b7:09:20:1c:c9:0c:9f:39:0c:db:46:b6:b3:b1:
93:39:a1:9b:31:40:e0:5c:1a:a2:13:b5:4a:9e:5b:c7:17:d6:
1b:69:23:69:f9:9a:92:ac:86:ba:4c:17:c4:66:15:3f:89:d8:
b7:e6:11:61:c0:92:cc:90:69:6e:80:61:56:97:13:33:35:3f:
77:e2:42:70:2b:8c:32:b5:6b:dd:92:19:90:53:63:61:d4:c7:
83:93:52:9b:8d:2a:ff:85:e1:68:78:bd:d3:6f:5e:30:20:b1:
06:d5:61:b4:57:e8:63:9a:f6:fd:91:94:30:de:6d:94:d5:0f:
bf:cf:f5:55:39:df:e0:4e:7f:46:f9:fb:da:d9:2c:80:27:bc:
27:64:7a:48:cb:58:a2:bc:b8:7a:2b:48:8f:27:44:90:bd:f8:
6d:7a:c3:ae:9b:f9:88:00:ec:1b:93:7b:e6:1f:45:90:32:a6:
de:a0:57:92:8d:5b:a5:99:30:61:d2:19:77:5f:08:1a:10:f2:
bc:98:20:a8:2e:a7:02:c9:f2:a8:fe:7d:35:6e:4d:9c:ce:29:
c7:a4:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:32 2025 by rpki-client