Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: oOY4dB9oH9giNNQmAXxx6LXkSxpdwJwA+gMWi02Va8A=
Subject key identifier: 99:8A:71:DA:87:BC:F1:AA:54:37:9F:77:9D:E5:99:64:9E:26:A3:7D
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 0199FC21919993D3CCA19F8A20B70D7C60D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0FF0
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: vi3FsGni0OngyIRlRfLztCYd5z1+pZdi30bq6ZRizbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:99:93:d3:cc:a1:9f:8a:20:b7:0d:7c:60:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=998a71da87bcf1aa54379f779de599649e26a37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:da:86:ec:c9:47:d9:5f:8b:a8:45:9d:e3:
05:6c:e9:af:b3:b0:9a:67:7e:20:1c:04:61:16:4e:
06:37:94:f1:f2:8f:e0:de:e8:f1:a2:25:da:1d:f3:
d4:95:fc:70:16:b4:de:d2:05:d7:94:5b:99:10:05:
e7:69:d7:96:9d:3d:d9:e9:16:8f:d2:67:84:2a:c9:
c7:51:48:02:74:e2:65:37:34:7b:1c:78:7f:f8:4e:
f4:d4:16:ac:c3:89:75:bf:2d:0b:dc:a9:ae:2a:7e:
77:54:9d:1a:2d:ba:84:eb:78:61:5b:51:cf:a1:86:
44:d2:c3:db:c8:19:d0:a1:5d:89:a8:7e:8e:27:ce:
c7:cf:8e:ab:21:80:d2:32:2c:71:e6:0a:d3:3e:b3:
92:0c:53:76:28:1a:6e:15:22:2b:c5:16:c7:e9:f3:
87:5e:54:2a:6d:96:0b:b8:87:00:76:29:df:29:91:
f2:7f:35:3f:99:93:d3:5b:c0:bf:8f:15:be:f5:63:
95:51:27:f6:73:73:36:0b:01:11:ff:d5:b8:bb:02:
e3:21:34:aa:19:e6:1f:6e:d8:6d:02:0b:68:7c:90:
f0:32:a2:f5:38:80:76:5f:a3:f3:60:a5:36:fb:1c:
80:db:41:80:91:cf:45:58:31:79:b5:eb:42:e3:1a:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:71:DA:87:BC:F1:AA:54:37:9F:77:9D:E5:99:64:9E:26:A3:7D
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c2:3b:fd:79:04:4b:a1:be:7d:39:a9:c2:12:f1:2c:63:35:
e0:5e:58:e2:18:4c:b5:8b:a7:9f:2f:4f:4e:a3:37:8b:8b:a5:
18:41:8d:ee:3d:4e:66:40:2e:73:05:68:75:b1:1f:f3:db:74:
e1:f6:e2:2d:bf:02:da:99:2c:0a:77:4f:f1:06:d4:30:ff:98:
85:64:ab:f8:34:56:20:d4:4c:a3:5e:bd:b6:75:1a:6a:77:bb:
ec:de:58:5e:f2:0b:9f:e6:ba:b0:99:c4:84:80:ca:d2:0e:50:
9d:bd:7b:c6:ab:10:38:b0:ef:a3:d4:a7:6c:bf:ba:f2:9e:94:
2e:21:93:85:bb:2e:32:bf:90:21:43:53:57:8f:82:8d:ab:f5:
3e:77:5d:85:91:a7:94:56:ee:2f:29:22:b9:3b:3a:de:12:c0:
85:97:34:06:78:c7:b9:06:5d:d4:01:86:39:fe:12:a8:f0:70:
d8:a4:8f:cf:cd:70:24:7e:73:2c:a7:9c:6f:a9:9f:03:3c:0e:
7e:2b:5c:5b:cc:96:bb:0a:28:84:fc:6a:e7:e3:88:cf:54:83:
86:dd:11:bb:63:34:f3:32:1c:a0:51:80:52:7b:9d:54:0a:b9:
86:0c:2a:47:98:97:f0:62:5a:39:a2:ee:85:1b:33:e9:c2:f3:
c9:40:7d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:59 2025 by rpki-client