
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
File: _Bmp6bejYMnT_drVgPsSgllp7y0.mft (raw, json)
Hash identifier: g/tHWIm6C0V/lDZkfoxgEQ4Mr3Hhdnlzc0yetmCHNd4=
Subject key identifier: C7:37:0B:19:C4:67:A4:85:13:AE:2E:CA:56:DA:ED:7B:95:97:FB:F1
Authority key identifier: FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D
Certificate issuer: /CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
Certificate serial: 019A01B4C544499D85188A98879C8ACC1EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
Manifest number: 06
Signing time: Mon 20 Oct 2025 13:00:15 +0000
Manifest this update: Mon 20 Oct 2025 13:00:15 +0000
Manifest next update: Tue 21 Oct 2025 13:00:15 +0000
Files and hashes: 1: _Bmp6bejYMnT_drVgPsSgllp7y0.crl (hash: 01nnkOZSBR/yu1H7+h3/bWY0dnERBwNZRLVj+glCRVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:c5:44:49:9d:85:18:8a:98:87:9c:8a:cc:1e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc19a9e9b7a360c9d3fddad580fb12825969ef2d
Validity
Not Before: Oct 20 13:00:15 2025 GMT
Not After : Oct 21 13:00:15 2025 GMT
Subject: CN=c7370b19c467a48513ae2eca56daed7b9597fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:9d:2e:10:bc:17:1c:86:b0:5a:45:1e:99:
ca:2a:52:e9:9b:29:81:76:48:e2:e9:9f:df:7a:45:
df:19:3c:b7:36:ea:fe:6a:54:6d:2a:0b:17:e3:86:
63:8a:64:79:d9:ab:52:9e:81:9d:28:f0:22:81:ce:
1e:93:77:e7:d4:57:c3:75:5a:6a:6d:75:f7:48:63:
62:58:00:f7:18:de:ae:17:8b:65:97:b2:ce:5e:a8:
0b:12:6e:5a:db:60:d5:16:26:56:c9:72:ff:27:74:
85:d2:b0:b9:47:a8:ca:e8:a7:b3:25:59:d5:21:e2:
22:0b:d8:8a:34:0d:61:b5:1d:10:ae:0e:a5:44:f1:
9d:01:97:46:8f:8d:ae:1c:79:26:ae:61:bc:93:2b:
72:ea:63:f0:c1:85:af:1c:41:5d:a3:d3:25:14:2f:
5d:1e:fb:19:2a:2b:e3:c2:97:16:81:b8:f8:90:c9:
9a:6a:1b:0d:dc:9b:08:7b:a5:fa:d4:f2:65:68:e7:
50:5f:b5:98:82:e8:97:11:b3:cd:ef:fa:65:4d:e2:
1f:2e:f1:19:f5:e0:af:bc:93:fe:0b:34:e4:51:5f:
e5:25:a6:2f:44:e8:0b:0f:7e:13:42:39:de:d2:fe:
97:63:b9:af:7b:d2:91:e1:7b:c6:18:54:68:28:7c:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:37:0B:19:C4:67:A4:85:13:AE:2E:CA:56:DA:ED:7B:95:97:FB:F1
X509v3 Authority Key Identifier:
keyid:FC:19:A9:E9:B7:A3:60:C9:D3:FD:DA:D5:80:FB:12:82:59:69:EF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Bmp6bejYMnT_drVgPsSgllp7y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b901b-2363-4080-a0a0-2b15e370fbae/1/_Bmp6bejYMnT_drVgPsSgllp7y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e6:1b:d4:f0:1c:bf:e1:33:cd:5d:4c:7c:18:11:3f:05:3f:
fc:e4:60:5e:ef:60:75:ff:a8:c0:24:f7:c7:5e:fe:f4:a5:f3:
fa:bb:ea:05:9f:c3:df:6c:b8:6e:b2:d8:eb:98:2c:13:7b:f1:
16:7d:ab:c5:13:2b:65:ba:b3:ed:33:1c:07:ac:81:78:36:b6:
97:fd:32:92:0d:d9:71:2a:61:b6:3e:cb:0a:a4:ee:5c:08:da:
ac:51:b3:9a:a7:93:bd:a0:d0:34:b6:7c:7b:47:e9:b7:ed:ae:
ac:5d:24:2f:f2:83:d2:2a:fc:98:4d:a9:3f:2c:8f:b6:96:26:
48:aa:f3:c9:92:5f:a2:be:f0:e2:6c:de:cd:03:88:df:82:c6:
82:cc:98:df:85:cb:0c:4d:bf:f6:81:fe:ad:3e:43:0c:1d:27:
c4:5d:b1:58:c6:c8:e2:6f:0b:ad:65:19:cd:8c:39:1e:d3:75:
62:16:68:0f:a0:ee:98:0e:b3:0c:a4:8d:15:b5:fb:87:3a:30:
5c:0f:87:0b:67:11:66:b4:38:fb:88:34:81:50:d1:98:b1:6c:
27:66:58:bb:ea:3c:1d:6f:8a:ff:e3:0e:d4:be:31:7b:c7:21:
41:fc:c8:65:38:2f:86:47:6a:b0:25:de:e1:db:00:57:b0:ae:
1b:f6:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:13:27 2025 by rpki-client