
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: PDsUy7nBY1FJDsrkQ56ZqH/KSQvx1oTGKD50P18k+ps=
Subject key identifier: 09:8D:ED:6B:B7:43:46:84:4D:AC:08:61:0C:17:5E:1D:30:AA:6C:0A
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 0199FE472AA7293CA71471A1CDE1F5A17CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 014E
Signing time: Sun 19 Oct 2025 21:01:40 +0000
Manifest this update: Sun 19 Oct 2025 21:01:40 +0000
Manifest next update: Mon 20 Oct 2025 21:01:40 +0000
Files and hashes: 1: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (hash: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: GxQRmtdoAFVxUOeJQIKohXBK7FBCE1wgvGaC2oXhPMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:2a:a7:29:3c:a7:14:71:a1:cd:e1:f5:a1:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Oct 19 21:01:40 2025 GMT
Not After : Oct 20 21:01:40 2025 GMT
Subject: CN=098ded6bb74346844dac08610c175e1d30aa6c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:11:4e:e0:7b:d0:db:af:b4:e9:31:62:fa:
5c:88:40:76:f0:bb:e1:de:f9:a9:4b:7e:88:fe:45:
57:de:e4:91:80:3e:7d:12:98:ff:3a:dc:f6:48:65:
c4:a9:b5:fa:7e:be:22:0c:8c:2d:f9:ac:ab:c4:29:
ed:a4:40:17:5e:5e:cd:ab:ff:c2:bf:cc:ef:36:ea:
e7:98:ce:41:b9:07:b3:5f:32:f8:67:96:07:00:ca:
ef:45:ee:5f:7a:ac:fc:63:0a:2b:d0:54:d4:88:14:
9d:2f:7e:85:47:59:c4:ca:4c:cf:8f:ec:6c:a8:ed:
a8:2c:c7:a4:73:1a:52:c5:35:ca:d4:3a:f6:20:17:
46:d7:fb:63:17:81:47:a3:cf:e5:28:a9:75:71:56:
ba:01:ab:66:ff:1f:99:4a:71:c3:7a:06:64:5f:99:
c8:4d:86:da:9b:30:37:11:79:f5:15:1b:f1:4b:f3:
75:41:f4:24:33:63:46:2c:82:be:28:a2:9c:86:24:
09:3a:48:dc:67:dd:97:ff:b5:b4:0f:b0:22:13:3f:
f0:58:00:24:b7:4e:37:6d:72:8d:a9:ab:d8:94:8a:
c3:2b:39:9d:34:d9:c9:ae:26:b6:85:ac:5d:e8:ca:
a7:6f:b7:08:ba:5a:3a:d4:e6:31:a6:03:bd:9e:b5:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:ED:6B:B7:43:46:84:4D:AC:08:61:0C:17:5E:1D:30:AA:6C:0A
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b6:5b:6e:a8:85:c7:63:a2:cc:83:f6:1b:29:01:fe:e5:17:
9b:94:be:88:59:92:1a:95:47:91:d6:6f:10:a4:33:7c:10:bf:
a9:aa:28:27:1b:7e:39:91:3f:69:7f:0b:04:03:6e:53:3d:09:
8a:78:52:35:91:de:94:25:dc:93:8a:a7:4f:90:78:93:22:fe:
76:33:c1:d1:90:c6:04:7b:c9:f7:0d:c3:46:b2:23:0c:6b:3c:
0f:9e:bf:35:bd:12:d1:8c:de:fc:54:ac:9d:bc:34:5a:17:4e:
c6:ed:6c:4b:a3:5a:de:8f:41:68:a6:d5:87:4e:57:5f:1a:d9:
b2:82:97:2d:aa:1f:ab:34:9f:1c:87:83:04:4d:ca:ac:b8:5d:
2a:5c:31:9a:df:9b:4b:01:2f:c5:2b:74:58:29:a7:76:e7:2e:
24:6b:22:7b:e8:f7:c0:87:70:ae:51:89:ae:63:96:8e:95:31:
05:24:4b:95:cb:2e:e4:01:c7:65:4b:6d:ce:be:3c:dc:05:62:
d5:90:65:aa:1c:f5:3d:10:54:5f:58:6e:8f:87:eb:4a:ce:6f:
98:a9:83:8c:ab:7c:1f:ed:a2:11:28:1f:89:3a:4f:b9:07:b6:
c9:38:0d:06:a6:46:45:00:d6:e8:0f:9d:ac:62:e7:39:92:47:
b0:80:70:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:41 2025 by rpki-client