
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: WhHWMuf77EoUAtY+vJp1v4SS7e67JKG5P2c2NU1PWj4=
Subject key identifier: 2E:D5:10:15:AA:B9:09:A5:66:26:FF:52:B1:BB:D2:F0:CD:D7:28:2B
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 0199FF2289DBC4C131D2DF448E0D8A2E8FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 13DD
Signing time: Mon 20 Oct 2025 01:01:17 +0000
Manifest this update: Mon 20 Oct 2025 01:01:17 +0000
Manifest next update: Tue 21 Oct 2025 01:01:17 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: fvciwmR2zRmKd7Czke1eTN+W3st7AZUvjltvFBQoU5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:89:db:c4:c1:31:d2:df:44:8e:0d:8a:2e:8f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Oct 20 01:01:17 2025 GMT
Not After : Oct 21 01:01:17 2025 GMT
Subject: CN=2ed51015aab909a56626ff52b1bbd2f0cdd7282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:2a:2c:1a:60:82:2a:51:00:6e:6a:5f:be:
66:89:37:05:93:86:76:ae:db:3e:d7:24:b0:f4:1a:
64:72:3c:bf:e5:27:a4:c7:dd:66:fb:18:18:bb:27:
78:12:8d:2c:a5:45:8b:fe:ac:5a:44:e9:59:41:04:
d1:f0:65:d4:ec:44:ae:b9:84:30:0b:95:42:6f:fd:
7d:71:be:a2:9f:2b:58:38:d3:02:ab:85:60:52:ff:
23:b0:54:25:f4:89:f5:a9:f0:ea:0a:41:4e:fe:43:
bc:e7:00:97:d5:9b:31:58:54:76:3f:30:b6:9d:84:
1d:9d:10:8d:f4:ea:38:3d:f6:91:b5:9d:21:29:6f:
67:85:20:d9:fa:cc:03:ea:1c:bc:c6:0d:d1:30:18:
aa:90:81:10:c1:d1:1b:26:0e:78:33:a6:84:f6:ac:
b5:64:b9:33:64:85:e7:f6:b2:6e:cd:33:b8:9b:d5:
14:ac:34:b7:7b:d9:e8:6f:c1:b9:30:4b:a0:18:9c:
75:f8:52:e9:03:68:12:c3:19:97:13:b6:e2:cc:3c:
df:a5:1b:13:79:67:de:1c:6e:63:7e:e9:2b:58:ac:
5b:d9:38:29:7c:c2:fb:e8:1a:3d:a4:ee:91:2e:d5:
ab:6b:25:e8:2d:e5:57:ed:5b:90:1e:46:5c:fc:46:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:10:15:AA:B9:09:A5:66:26:FF:52:B1:BB:D2:F0:CD:D7:28:2B
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f9:f3:d0:72:f8:a4:a4:b8:a7:af:6e:d0:4c:62:7e:e1:57:
bf:de:fe:08:d8:42:e1:19:af:08:bd:a1:f7:d8:4b:52:a9:c0:
58:5f:10:55:7b:7b:38:99:d2:fa:06:67:2f:f7:bd:ab:dc:0f:
6e:54:57:27:f7:34:4f:a4:36:90:36:e7:36:af:a8:cd:aa:22:
96:66:5b:83:dd:a4:e6:40:1f:ff:f8:31:38:ae:63:40:51:a9:
52:7f:ca:ba:b1:58:89:92:d8:67:23:0f:56:6a:7e:ae:a5:08:
42:76:8c:97:a0:9f:68:32:97:a9:82:bb:d8:46:74:43:39:68:
f4:ec:7d:b8:d3:96:f0:04:c3:87:2f:c3:bb:6c:b5:32:d4:66:
88:be:7e:94:20:69:51:f1:9d:3c:88:d6:e2:fc:51:1e:9e:17:
b5:2b:2b:ce:f1:1f:d4:66:9e:d9:2e:49:ef:4f:56:0b:94:a0:
ff:c0:5a:eb:da:f4:88:2c:a4:7f:61:4a:3b:4e:ce:cb:09:5e:
0d:45:e5:d1:69:88:94:17:2b:1d:a9:50:e3:d3:6a:ea:52:a2:
e5:2f:79:2f:da:7f:62:a7:9d:e2:17:ff:a2:67:2f:9c:84:03:
8c:75:ad:da:c3:dd:af:3f:5d:0b:10:ee:c0:cd:65:91:a8:fb:
1c:90:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:23 2025 by rpki-client