Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: nKmnenPZAs1M3kDtMIrYzEF8I4f7xR4K1C/Q4BeY8NI=
Subject key identifier: BC:03:93:79:04:46:3C:20:38:2B:F2:AD:44:52:A0:26:9B:F0:5E:CA
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0199FCC61ECE5A55A1C920D36BB9961D46AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 142E
Signing time: Sun 19 Oct 2025 14:01:06 +0000
Manifest this update: Sun 19 Oct 2025 14:01:06 +0000
Manifest next update: Mon 20 Oct 2025 14:01:06 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: Xpra9S0YVjoOG7Jh4/1G0RTLX5UwYQTrZsT3Dk/B1+Y=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1e:ce:5a:55:a1:c9:20:d3:6b:b9:96:1d:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Oct 19 14:01:06 2025 GMT
Not After : Oct 20 14:01:06 2025 GMT
Subject: CN=bc03937904463c20382bf2ad4452a0269bf05eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:c1:82:bd:a8:9d:d0:0b:b3:cd:c2:ac:a8:
40:76:09:ae:a8:1d:9f:02:a8:ae:6d:f2:53:76:b5:
b2:32:da:59:43:d0:fc:94:ab:3f:fd:a9:bf:dd:20:
76:95:c4:14:88:0f:62:0f:b6:67:a0:94:f5:b6:98:
8d:a4:83:28:b4:25:20:e6:dc:3c:37:b6:64:20:e5:
ee:9b:a1:3b:de:81:28:f3:a6:1c:4e:18:74:be:78:
a5:eb:5e:37:e1:cb:93:4c:07:f7:15:b3:50:d9:e4:
23:8a:a4:73:c5:60:36:ed:f1:94:8b:60:c3:83:93:
cf:31:1d:a4:4a:7d:1d:d9:fd:4d:90:bb:21:72:2b:
11:f6:27:30:c0:c2:e9:ac:a3:1f:6a:c3:9c:6b:3a:
2d:ed:1c:0c:01:ba:81:21:d1:e0:a4:75:33:a3:b7:
da:42:5d:d9:a7:bf:b3:03:f8:5c:98:9c:61:b3:54:
a7:25:8b:a2:66:47:2e:3f:28:fb:6e:2d:13:13:9f:
83:b4:00:27:2a:63:25:4c:a1:cf:87:bd:8c:d3:d0:
68:76:6f:31:f3:0c:ae:ee:70:cd:1f:9c:8e:40:e3:
98:90:9c:dc:b1:fd:6e:9b:df:db:e9:1d:86:34:70:
e0:f3:45:1a:5b:b2:dc:96:40:14:5b:74:7a:08:22:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:03:93:79:04:46:3C:20:38:2B:F2:AD:44:52:A0:26:9B:F0:5E:CA
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5b:84:20:9c:da:e4:a5:36:90:39:4a:90:43:a5:0e:97:83:
51:a7:2c:9e:bb:cd:ab:72:bc:fe:7b:49:d6:71:49:ef:99:6f:
3d:a0:74:88:e9:56:59:8d:e0:ba:22:fe:db:8b:bd:c8:93:5e:
ad:4a:b0:dd:f1:d5:36:6d:ee:6d:14:5f:71:b5:1e:b7:ce:2f:
08:dd:36:94:a8:5b:82:db:fa:d1:61:77:d9:ba:93:c8:29:7e:
16:af:20:51:91:6e:2a:27:26:a3:ba:4f:bb:67:52:04:33:74:
6b:cd:37:27:db:97:9e:54:ef:d5:94:6c:f6:d8:1d:cc:38:ad:
f9:fb:f6:7e:45:47:e9:62:64:ea:d6:13:42:40:7b:03:ac:64:
d0:ad:1c:7d:ed:60:22:9e:2e:36:a4:30:af:ea:b9:15:3c:dc:
ad:ec:00:ea:c9:f5:f1:a6:6e:a7:67:7a:68:82:6c:b5:2d:98:
d6:40:7f:b0:73:16:ea:c1:42:d4:0e:70:d2:06:e8:80:84:6c:
3b:2a:aa:ab:a9:75:8b:80:00:fb:20:1e:22:89:ab:dd:66:30:
54:51:d8:fd:e9:11:eb:a0:b7:6c:ad:21:b4:0c:10:ad:b2:34:
d5:3c:ae:3d:2a:0b:8c:79:13:53:19:08:89:01:a8:9c:ec:95:
63:68:00:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:19 2025 by rpki-client