Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: ejmUu9+is4n/8GmM9za6TBGKAroGc397cVaExx2JgQI=
Subject key identifier: 63:BF:E2:00:48:9F:1D:5C:6F:94:17:BC:1A:61:EC:D0:52:85:C1:38
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 0199FC5901132FD6CDAF0C2833450E0F53FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0B46
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: ngupG5v5a8AhI4IxwcR/YHa1p89lr6n/prhCZDJ+r50=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:01:13:2f:d6:cd:af:0c:28:33:45:0e:0f:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=63bfe200489f1d5c6f9417bc1a61ecd05285c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:af:3e:8e:72:9e:5a:73:5f:e2:f1:5d:af:
33:3c:41:69:fc:8c:d1:30:b6:48:c7:36:6d:2a:e3:
5a:10:54:d1:3f:e3:00:c1:42:4c:56:7c:a3:05:3b:
4b:91:51:0b:0f:56:2e:41:6e:5b:fe:d7:cc:70:06:
a2:cb:ce:9e:0c:41:ed:3f:5e:0b:5a:44:33:71:22:
c4:03:a0:22:fa:a2:b9:6a:45:3c:3b:97:04:8a:7e:
ff:6b:4b:fb:a6:7b:83:b1:56:14:09:48:a8:11:eb:
2e:1c:00:f7:f0:44:d1:3d:f2:7b:8b:64:de:4f:8f:
44:77:bb:82:c8:06:3f:6f:f2:fe:53:1b:b3:63:6c:
90:54:a1:15:47:b2:b3:69:2b:4e:fe:31:56:74:82:
28:8d:30:e6:89:e0:ed:a4:8b:72:7d:45:ec:43:8b:
dc:22:db:c4:f1:84:6b:b8:db:df:50:87:d6:4b:28:
3f:f2:e4:5a:50:aa:26:1a:ee:d8:f2:12:36:d0:0b:
1f:65:4d:de:9c:fc:29:86:f6:e9:a7:30:20:3a:39:
47:20:8a:3c:de:15:f4:4e:38:4a:97:da:17:dc:d6:
4a:4b:84:2e:fb:53:cc:50:d7:e3:4e:f3:42:96:33:
0d:39:5c:fb:93:8a:43:31:07:7f:cc:9e:ca:54:5a:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BF:E2:00:48:9F:1D:5C:6F:94:17:BC:1A:61:EC:D0:52:85:C1:38
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:13:ce:bc:cf:46:0e:c6:1e:05:ee:d1:a1:f1:1f:93:e3:
0a:dd:28:b0:4a:a3:ea:dd:11:99:c2:cc:a4:9a:b5:c1:cd:bf:
79:d7:bc:d3:6a:f4:e6:8d:d2:ba:c8:46:93:5a:be:69:eb:ec:
14:1b:5a:b8:40:01:50:1c:e1:7a:17:c1:e2:89:58:fd:f4:8a:
b6:81:74:a5:0f:b1:1b:05:4a:af:e8:33:57:78:cf:57:51:ba:
73:84:74:d5:25:35:d0:0e:d4:55:9a:ee:cd:b9:d4:80:d0:69:
5a:24:0f:d3:eb:32:09:72:0c:6b:33:13:b9:67:7a:97:58:89:
34:bd:0f:49:f2:7e:ef:92:4a:2e:38:98:ce:4d:6a:5d:f0:01:
81:01:f2:22:50:cd:c2:92:c8:ed:7a:8f:87:a4:7b:91:75:7d:
87:c1:6b:61:1a:c9:13:c1:73:3b:69:a4:2a:9d:5f:cd:97:ee:
28:d3:ec:a4:f4:08:8f:11:83:72:30:3a:68:82:4e:74:f5:bb:
04:97:1d:45:e4:97:be:5a:c8:1e:f1:70:03:6f:df:73:04:e1:
32:c9:0e:87:ce:39:18:7d:8c:28:e3:fd:db:8c:ed:57:06:a4:
7d:f9:c9:fb:e5:db:ab:7e:85:5c:ca:79:fa:22:88:16:04:21:
21:2e:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:44 2025 by rpki-client