Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: 4mOK8oP1Dxv/dhqSVsxgFbJigRgIkE6X35duRtINiVo=
Subject key identifier: 68:16:8C:73:25:EA:27:5A:7B:01:3B:76:81:81:25:F0:10:5F:D3:C0
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 0199FCFD8179603A8DA6E4BF27FFD2F03E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 07D3
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: 9Q4vi3Od+AMjRl0cirxjDyPrt90rV48yqnSiovYpLfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:81:79:60:3a:8d:a6:e4:bf:27:ff:d2:f0:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=68168c7325ea275a7b013b76818125f0105fd3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:3d:fc:26:f8:2a:02:b8:42:3d:d5:ae:61:
b7:39:d1:ef:7f:2b:ff:67:ce:5b:ae:c6:96:7e:ee:
d4:f4:e6:c2:5f:5a:a9:04:22:93:bf:ff:d2:b3:73:
80:c4:b1:f7:c6:47:61:f6:41:71:1a:63:45:bc:06:
06:86:57:af:db:81:c1:fd:3a:90:7f:03:1f:c5:76:
89:fa:40:a8:39:cb:b5:02:16:bd:e3:a4:45:8b:3e:
6c:ac:23:45:61:62:3b:ab:2b:38:29:3a:19:48:8b:
0e:63:92:0a:df:59:b6:13:3b:fd:89:6c:c6:3f:dc:
28:7c:f5:74:15:54:7b:a4:27:28:18:cc:8e:9f:a3:
7a:b1:4a:70:3f:4d:88:97:0c:9f:1d:48:f0:39:11:
20:ca:2a:19:cf:1a:d5:38:ed:bf:d8:a2:73:fd:73:
94:37:aa:92:83:df:af:0b:97:ae:84:ce:a1:86:71:
51:2b:b9:e9:ee:1a:92:c0:64:a7:27:49:48:fe:88:
e8:55:7e:15:85:70:86:cc:60:41:9b:8e:62:d7:83:
8d:5c:ce:c1:43:41:0c:b3:51:2c:ba:60:7f:b6:55:
1b:68:66:f3:a1:eb:8d:23:4b:d4:f7:9b:91:e0:f6:
cc:1a:14:60:3d:df:7d:0e:ed:e4:00:e6:e6:95:7c:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:8C:73:25:EA:27:5A:7B:01:3B:76:81:81:25:F0:10:5F:D3:C0
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:02:39:db:88:25:80:eb:38:38:20:72:24:aa:08:1d:0d:06:
7b:b6:46:5c:a5:fb:c7:d8:b8:97:e1:f9:20:c7:00:85:d5:79:
ef:b6:ce:cc:e2:6a:f6:f1:d7:2c:93:0e:20:f1:71:fc:08:f3:
7a:d0:7a:79:4b:ed:e9:d1:40:a4:cc:be:e4:d4:f3:32:16:e9:
9c:4d:83:b0:2e:38:72:47:30:b0:3b:e1:c1:1a:72:9a:14:f6:
34:2e:00:bd:5b:58:51:1e:c9:51:6a:32:0b:1e:39:82:32:76:
e3:bd:91:9a:e1:01:f8:54:b6:75:05:f7:01:8e:c8:d2:48:9e:
b0:2d:9e:47:0f:d6:f2:d4:d8:99:4a:31:5e:80:61:97:10:92:
04:d9:d8:12:fc:c2:dc:29:2e:d9:5f:c1:af:b6:1f:13:0b:a2:
ee:c5:d2:d9:71:4c:a0:14:b3:cd:42:08:dd:e4:9c:76:41:81:
12:a7:ab:b7:fc:97:0e:33:3d:dd:05:bb:50:fd:42:7f:ce:aa:
f6:70:a2:20:bf:86:3a:a1:55:28:8b:44:3d:e3:9e:27:bf:86:
ef:e5:00:25:ac:e2:06:56:92:b0:a8:65:63:fb:23:69:75:d0:
1d:89:7c:99:f0:39:ee:3f:81:56:f9:99:ed:ae:b9:f1:1e:e3:
ec:5a:48:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:26 2025 by rpki-client