Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: uFbAiLxDcNMEr0U1SkKhhlfOc6UhzuVa0ZxdaXkCmNQ=
Subject key identifier: 5D:60:FC:5C:CB:D9:BA:45:5D:DD:63:C7:14:F0:DB:47:C7:8C:89:77
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 0199FBEB14BFC96EB28B68F5EC1FACE94081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: tZBCf5pXBmBFEUwXafFBPnREXZK4feuPEXE+jUMRuf0=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:14:bf:c9:6e:b2:8b:68:f5:ec:1f:ac:e9:40:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=5d60fc5ccbd9ba455ddd63c714f0db47c78c8977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:2e:63:c0:0f:05:ee:fb:b0:17:14:b1:29:
b1:3d:cb:56:e3:ba:98:14:d5:c8:4d:09:10:82:f0:
a6:e8:08:94:78:4c:a3:aa:d4:b8:9b:e3:44:8e:20:
ad:12:78:fa:a7:a0:3a:f0:5d:88:fb:38:41:c1:e5:
2a:73:49:7b:d5:ea:5d:7b:d9:a7:b9:af:0f:15:f9:
da:56:b6:e4:78:a2:69:76:20:b6:e0:32:a7:ff:4f:
fa:ff:15:29:cf:6e:24:0e:fc:1c:1e:f7:a0:79:49:
b2:35:1a:dd:e0:66:45:b2:21:82:ba:3c:c6:d4:b6:
c4:ed:5e:f8:57:d2:06:72:4b:3b:29:b0:aa:4a:5d:
d3:8e:ab:38:dc:84:82:83:ea:68:81:50:1b:e7:06:
f1:45:8b:fb:b4:6d:20:ed:fc:17:ef:ee:3a:81:19:
1f:7f:6f:e8:54:fd:9b:6b:aa:8e:43:5a:13:a9:31:
68:c3:24:01:ae:12:93:9f:2b:dc:63:98:fe:c0:84:
01:53:cd:31:9f:43:30:1f:4e:a8:ef:89:57:75:2e:
5f:aa:f9:70:90:60:70:35:5a:36:fb:d7:d9:c2:c9:
89:a1:9c:4f:2a:98:19:90:26:a5:7f:d2:43:f3:5e:
9f:b6:b1:f5:d5:c0:8e:de:e7:69:17:d8:c7:68:d9:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:FC:5C:CB:D9:BA:45:5D:DD:63:C7:14:F0:DB:47:C7:8C:89:77
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:0f:36:92:ab:f1:3c:65:16:3c:8d:9f:65:0f:55:b8:6b:
ee:82:53:ef:a9:a3:43:f4:db:4d:54:9c:ba:9e:8b:24:45:2b:
01:b4:63:08:99:71:47:5d:33:74:70:7f:e6:28:1f:19:51:c2:
30:c2:dd:66:d4:a5:15:7f:50:a5:d1:58:64:d3:b9:00:dc:41:
dd:f1:8b:73:05:64:3b:22:a9:3a:25:18:90:ac:65:8a:85:88:
2b:e8:1e:82:5b:d1:73:6f:76:ff:68:d4:15:8d:dd:2d:ac:c4:
0a:a0:80:53:d4:de:fa:4c:70:b6:01:2d:eb:02:35:b9:3c:a5:
4a:8f:fa:ae:19:fc:eb:05:c0:f2:20:2c:74:79:71:90:10:e8:
47:e3:91:cc:42:8e:56:e3:c8:00:2e:86:42:01:47:33:19:68:
eb:e2:a1:4b:52:3c:9b:b8:e2:9f:9b:e1:e8:9c:da:5e:69:c3:
98:a1:2f:86:36:e6:85:2b:8c:ba:fc:d8:8d:63:94:54:3b:90:
49:6e:d0:4d:04:17:4b:20:ca:52:70:e3:09:67:82:24:45:cc:
60:66:9c:66:e5:dc:ba:d0:4f:7b:8f:9d:4e:97:4b:37:b4:13:
a0:71:8b:2f:a7:36:27:23:c7:ba:14:c2:46:52:4f:ad:59:ad:
57:a9:46:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:56 2025 by rpki-client