
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: ybUlSzpqopyHYIYt3dQ9Ih5pbPy6VvpKefiP825J0gw=
Subject key identifier: BB:60:65:B9:20:F7:01:F0:78:BC:9F:FF:E6:60:E2:E7:8B:19:EB:C1
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0199FBEAF40E7CA8ADAA9273D32E7F3ABD24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 0879
Signing time: Sun 19 Oct 2025 10:01:43 +0000
Manifest this update: Sun 19 Oct 2025 10:01:43 +0000
Manifest next update: Mon 20 Oct 2025 10:01:43 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: 9Gj7d/vw1BFGuH5sMFmoip8y9RWmIYHzp8hWvw5rwq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f4:0e:7c:a8:ad:aa:92:73:d3:2e:7f:3a:bd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Oct 19 10:01:43 2025 GMT
Not After : Oct 20 10:01:43 2025 GMT
Subject: CN=bb6065b920f701f078bc9fffe660e2e78b19ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:d4:2a:f1:1b:e1:fe:33:51:38:65:87:a7:
fe:66:76:9d:8e:8b:be:71:ae:b7:d8:69:78:2f:d3:
16:d7:21:ae:ad:f8:49:e4:71:69:06:be:ba:b7:72:
c4:57:ee:9c:cc:03:96:0a:28:33:79:25:84:c1:9b:
31:52:87:c5:87:fb:7e:b9:0d:fa:9d:89:5a:34:0d:
b2:28:bd:76:f3:6b:f4:a1:00:96:13:68:0b:17:7e:
d8:43:d5:28:0e:05:9c:7a:c9:fa:d0:c5:fc:d9:25:
bf:c6:93:0d:88:27:89:be:08:82:28:e0:00:e8:7d:
ac:8f:ef:e1:52:b3:d4:e2:a6:71:ed:7c:cf:99:2d:
2f:d5:d8:9c:5e:ea:a7:93:06:fd:67:2e:6e:39:ae:
2b:36:4b:fb:d2:8d:aa:a2:56:b5:4d:cd:c0:6d:f8:
ea:e7:28:b2:ed:8c:35:06:00:e0:e2:d3:ec:97:87:
53:5e:21:5d:57:cf:8b:cb:4b:81:89:2d:42:ea:2b:
dd:5d:9d:3b:13:e4:e0:74:47:a5:ed:59:4d:62:08:
cf:f0:33:76:18:12:9e:7a:37:40:a5:d2:f1:e4:a7:
60:a7:d9:dd:5e:c8:10:b1:a0:25:26:b9:13:2a:1d:
29:b5:d3:a4:ea:9f:9d:64:67:3a:61:45:a4:85:c8:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:65:B9:20:F7:01:F0:78:BC:9F:FF:E6:60:E2:E7:8B:19:EB:C1
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:4d:5f:19:9a:f2:b1:09:ba:fa:f4:60:44:f9:c5:f0:e3:
fb:1a:98:32:06:f3:e9:ab:42:c7:07:07:eb:98:af:46:38:bb:
cc:62:14:f8:27:81:60:46:88:74:c8:06:1a:a4:8d:93:81:d7:
d0:75:28:9f:c1:a8:93:c9:39:5b:18:4f:92:41:02:30:ad:8a:
32:d9:d0:06:64:5c:8f:7e:b1:cb:df:e3:1c:ea:17:a3:5b:de:
20:32:1f:a9:fd:ce:1f:83:e7:8e:0a:0a:4f:ad:b0:0c:6c:57:
6c:65:e6:60:01:3b:3b:e6:01:db:83:64:0f:9b:cc:89:b9:eb:
7b:66:af:24:e4:3b:8b:fa:bd:d8:34:d3:72:8b:4a:28:00:e9:
5a:ba:dc:0c:83:e9:4d:d7:a7:5e:d5:bd:78:67:02:8f:c7:be:
31:f3:a8:6b:4b:ab:ed:52:a6:86:dd:b1:62:a0:89:a3:01:48:
4a:16:58:18:9e:cc:98:70:52:5e:55:f2:9d:e4:78:ce:fc:ec:
cd:74:4b:d1:78:fa:c8:38:6d:71:f3:a9:8a:1b:ca:6d:78:6e:
7e:12:7f:ad:27:f5:74:db:34:57:72:43:8e:20:8f:7b:99:ad:
93:01:f9:0c:43:31:fb:5e:34:42:df:51:73:d2:36:31:b0:d6:
70:21:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:36 2025 by rpki-client