Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: IMifi5+fEKehmc1/BH/BU6mb3AZ8GDwq2qEjioY5ksc=
Subject key identifier: 71:A0:B8:6E:E1:94:41:EA:98:6F:2A:5D:65:11:C2:4E:AF:9C:EE:3E
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 0199FC8FB32DE89723BF8875608DD0AB52E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: Ld60l7IbSrLHDCHdYeQ8SL5UHWB6Mv73xcSOi0/OUzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b3:2d:e8:97:23:bf:88:75:60:8d:d0:ab:52:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=71a0b86ee19441ea986f2a5d6511c24eaf9cee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:47:69:11:b1:48:b4:db:a5:0f:de:d5:8e:
2d:05:97:1f:64:7e:ce:1a:0f:41:ba:79:06:96:2e:
bc:fa:57:64:02:38:00:f2:49:d1:08:36:81:f2:87:
3e:76:7d:08:06:17:90:f1:34:51:98:0b:47:7d:a4:
a3:f8:dd:04:6f:0e:b4:d6:e3:2d:20:bf:24:26:2d:
5a:b2:ba:7d:7a:11:06:81:b2:a9:5f:84:9e:6c:26:
34:f0:f8:25:fc:6e:4b:c1:77:64:ec:bc:8f:af:c0:
81:c0:81:36:6a:d2:6d:5b:d4:52:e3:ad:82:48:e5:
33:f3:98:5e:12:d1:2d:a9:20:3f:dc:3a:71:be:eb:
aa:e6:3b:23:e9:28:64:ca:ef:0a:ba:be:4a:15:33:
4b:f0:4c:95:05:64:f9:10:81:fb:2d:25:95:fa:b6:
bf:be:5f:83:60:68:50:3e:b2:04:df:f6:b0:7e:11:
cd:6f:f6:5a:3f:70:58:35:32:93:8f:2d:00:06:7d:
69:59:72:14:8a:3d:8b:f7:83:af:fb:a9:57:7d:22:
0e:78:d3:67:ba:21:c9:24:32:90:8d:81:17:aa:aa:
47:40:96:1e:be:8c:ed:71:d3:17:cf:1c:3c:2f:7c:
38:f1:41:1d:fd:6e:37:c2:fd:c4:a4:30:4f:aa:72:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:B8:6E:E1:94:41:EA:98:6F:2A:5D:65:11:C2:4E:AF:9C:EE:3E
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:55:13:88:cd:23:59:68:a6:29:c3:a3:d6:3f:ca:f3:01:18:
f7:51:01:ce:df:f0:fa:fb:60:40:d8:f9:77:52:60:78:79:7b:
6d:b6:0c:bf:8d:31:6b:ef:02:d5:f4:62:d3:13:4f:f7:0a:a2:
8f:2c:46:b9:c7:cf:6e:2f:d5:e6:96:15:f8:d6:6e:15:35:52:
0b:55:ba:cf:7a:76:9e:a4:7d:cd:48:ce:42:90:8e:9e:f6:66:
e4:b7:f8:2e:62:8e:0e:23:fd:16:be:e3:02:18:a4:85:63:84:
be:29:9e:39:91:a4:d9:7d:fe:30:d2:6c:29:c4:06:64:15:38:
15:06:31:ea:ba:f1:df:ac:7a:26:0a:9b:aa:d1:06:f0:e8:79:
48:4d:9f:1d:30:e1:52:51:9b:c7:91:1c:bd:36:4e:a7:a5:b0:
bf:8f:aa:31:e7:ca:39:22:eb:25:c9:92:f1:43:26:86:8c:fb:
2a:e1:a7:37:5a:21:1d:67:7d:bd:6f:17:7f:3b:33:d0:e9:dd:
ea:d3:81:36:03:a5:ae:6a:92:cf:e0:d6:6d:13:8b:a0:90:bd:
c6:92:ed:71:b2:ac:84:09:12:99:ed:fd:83:a1:66:dc:09:0c:
a1:d7:0e:79:bc:74:00:b0:a7:fa:e2:40:55:89:4b:05:93:70:
e8:b4:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:43 2025 by rpki-client