Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: uolRpXRcRbEtpPNgr3/6WkwSbovwWp820jRzphoYNDE=
Subject key identifier: 35:53:74:73:EA:D5:85:8B:87:61:EE:81:98:DF:6D:85:AE:56:C2:67
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 0199FB7C8CC4B26478AA059361B9FD71ABF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: HzLequ4y/C5ogo2lo9q2JAUrdSrz7cQAtIHgar3xuGg=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8c:c4:b2:64:78:aa:05:93:61:b9:fd:71:ab:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=35537473ead5858b8761ee8198df6d85ae56c267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:a9:7a:23:10:36:fb:b2:ac:b7:a3:6d:52:
fa:21:d3:43:f0:01:6a:2f:fd:38:4a:e9:ba:1b:a2:
14:24:60:a8:11:5c:42:d3:89:0b:94:cc:fc:df:56:
c2:8f:6e:d0:42:7e:c8:ed:d3:21:36:6f:54:cf:72:
ef:02:3f:89:50:27:58:63:d4:f2:ce:6e:21:c9:d1:
ec:b0:90:2d:19:e3:63:8e:c8:27:f8:e3:9c:41:07:
46:c3:01:2c:3e:ab:b9:16:ff:01:52:eb:e2:5b:63:
ff:7d:da:12:23:c5:f6:df:b2:ff:2b:61:ba:73:59:
3d:de:d9:70:57:6c:23:71:96:15:36:5e:6d:79:db:
fd:e9:db:3e:7c:64:e9:8d:99:d1:17:cf:fd:03:ee:
3f:12:16:7d:9b:fd:f1:f9:b0:e1:d5:ea:af:6e:b7:
a7:ed:22:87:99:d5:cf:02:e5:5e:d9:c1:09:c2:8e:
3d:32:05:02:de:33:f3:86:31:92:3e:52:5f:80:cb:
73:7b:70:41:65:41:6c:a7:6f:47:ed:af:b1:bf:35:
fe:1d:55:96:0b:85:2b:a7:a5:c9:77:1c:aa:38:87:
d2:91:d8:35:31:f1:ef:21:a5:5f:99:24:c3:f9:1c:
f1:89:5d:6f:b2:32:d5:1b:60:39:a0:27:88:0f:65:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:74:73:EA:D5:85:8B:87:61:EE:81:98:DF:6D:85:AE:56:C2:67
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e8:51:c1:2c:56:d0:e9:1f:ea:83:5f:75:c8:30:73:ab:6b:
3e:b7:a6:dd:58:50:66:e4:bd:ba:e5:a5:3b:78:1e:f2:ae:59:
6b:ae:05:a2:cf:a4:23:05:0e:53:10:e8:bd:35:8b:34:f3:55:
ab:dc:25:9b:16:0c:29:20:26:8e:f8:e2:66:96:35:f4:5b:a7:
44:13:08:b6:97:47:88:04:b6:ed:f8:b3:d6:8c:77:e5:db:f8:
67:1c:0d:7a:ee:6f:7b:92:41:f1:ce:b9:91:4f:21:b1:6d:f2:
03:bd:50:8d:4e:1b:f8:0b:8f:44:9e:cb:09:4c:94:12:56:52:
35:90:50:e8:c4:5e:cb:2e:ec:44:b1:58:03:ba:97:05:90:80:
fe:09:38:d1:34:80:b1:b8:3f:64:50:18:a3:19:3c:0c:91:f2:
ab:98:29:4e:a6:1b:98:95:c1:25:85:2e:ac:64:52:7e:0a:cb:
00:21:f3:e1:87:94:03:8d:7b:82:1b:b6:f0:aa:56:6c:c1:f2:
de:97:12:bf:0d:bd:97:86:ed:73:7b:95:42:eb:ea:f4:1d:04:
ef:84:0b:ea:7c:b4:4a:70:24:cb:37:07:e5:9a:92:44:2f:54:
57:03:9d:41:96:82:7e:67:4f:28:82:28:ee:4f:03:34:fe:ae:
60:26:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:58:20 2025 by rpki-client