Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: rRmQkS+bWGAglply1+m129fCrhvBkB5e3sQ+OF18b0c=
Subject key identifier: A9:0F:A8:82:65:D3:F8:26:67:9B:76:AC:77:32:4E:B4:D0:BA:BF:0D
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0199FCC6CA88DDBCB64AD9ACA2FF8B31C420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0A61
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: xYCYMmQnxSBMC7V0D8qc9Y9TeOc/CAznUJxdwChzDx4=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ca:88:dd:bc:b6:4a:d9:ac:a2:ff:8b:31:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=a90fa88265d3f826679b76ac77324eb4d0babf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:b2:9a:e8:2e:e4:8f:d9:67:9e:05:fd:41:
ba:6e:1d:f7:bd:35:eb:22:ea:f1:3f:83:af:61:c8:
5f:1a:7a:48:fa:58:90:0a:0f:a1:9a:53:07:1c:cc:
81:6a:ce:69:28:90:69:89:80:41:29:15:65:76:ac:
c6:e7:42:01:7d:6c:3f:92:51:44:60:1b:dd:e8:a7:
fe:78:4e:cb:91:cd:d3:02:30:2a:a0:e2:83:88:e0:
d5:18:78:42:43:07:91:2a:57:d7:d2:c3:1a:c1:a8:
ab:fd:ac:f1:df:c7:d9:1b:bd:42:2d:24:98:72:0d:
2a:8d:e1:1c:a9:26:07:78:ec:29:11:ba:d0:8c:81:
b4:ac:61:6a:67:4d:94:e9:7a:fb:39:54:37:1f:42:
ce:67:9d:19:d7:be:83:a2:01:1e:78:0a:03:f1:93:
ba:c5:6b:14:bf:73:b2:a0:95:7d:f9:95:e0:f4:b3:
94:63:2c:91:e4:f7:6e:44:85:9d:30:b0:00:63:a6:
f0:b7:d8:3b:0c:64:91:c5:74:df:ee:88:a3:af:bf:
df:25:24:73:fb:a2:13:bd:bf:fe:70:97:0f:ee:1b:
b7:37:7c:1c:e4:48:33:1f:d5:ea:0b:7b:8c:9a:78:
d2:c9:b4:f7:73:d2:4a:d7:be:1e:0e:f5:6d:6f:76:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0F:A8:82:65:D3:F8:26:67:9B:76:AC:77:32:4E:B4:D0:BA:BF:0D
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:96:7f:d6:40:d1:10:51:e9:32:9f:66:64:a1:64:7c:53:
61:64:2a:cc:fa:2d:80:b1:a3:8d:93:57:1d:df:73:34:ca:84:
d3:c4:33:b2:69:1b:e8:e9:a5:e3:cd:7e:fd:9e:92:09:6a:1b:
40:ce:0f:7c:aa:c0:cc:a0:a0:89:cc:14:40:e0:e9:28:28:47:
33:2a:23:27:f3:c5:19:c7:b7:cf:cb:b8:c6:23:8f:4d:99:b1:
fa:31:c7:3f:66:e2:b0:5a:1f:4a:a2:97:c9:37:b4:69:78:a4:
78:2d:fb:bf:ea:43:9c:65:93:52:5f:a5:27:ef:79:50:50:5b:
3b:b4:7d:c0:a5:4a:be:8f:76:3d:a2:ca:d8:49:95:cf:6c:5d:
f8:e1:74:e0:e9:58:d8:fb:ae:c7:89:bc:9f:fa:79:67:38:f7:
01:af:00:60:b1:6a:a9:2f:a5:df:9d:ef:fa:62:fd:bf:33:8a:
d1:59:5b:f5:34:ab:45:89:ce:84:4c:62:84:5c:aa:a4:0b:71:
67:91:ff:19:19:ed:10:eb:a0:cd:d9:35:2d:79:17:0d:d8:17:
3e:0b:18:62:3d:d8:af:7a:df:64:1a:02:88:29:cf:79:9b:54:
cc:66:41:a6:ca:e9:85:67:d4:ab:47:9c:23:e3:d4:41:b5:61:
ee:15:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:10 2025 by rpki-client