Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: kTxLRcTGnG3YKPpsH1B/l2fZ8vGMB/24JkYt5uiCSKI=
Subject key identifier: 7E:A2:96:13:F0:F9:C7:92:6A:EE:89:28:71:B8:EF:ED:1A:DC:00:B0
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0199FF595D01ED00EE5A35C21D438F7213E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0E98
Signing time: Mon 20 Oct 2025 02:01:10 +0000
Manifest this update: Mon 20 Oct 2025 02:01:10 +0000
Manifest next update: Tue 21 Oct 2025 02:01:10 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: xL63d1hFMzeYT5NQkqIRUPcgJSE8+LJvgbt2Y6buuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:5d:01:ed:00:ee:5a:35:c2:1d:43:8f:72:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Oct 20 02:01:10 2025 GMT
Not After : Oct 21 02:01:10 2025 GMT
Subject: CN=7ea29613f0f9c7926aee892871b8efed1adc00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:91:99:2a:01:92:22:ba:41:ff:51:5f:29:
d4:6f:b1:ac:73:d8:e3:c8:5a:1b:fc:b8:70:85:85:
76:3f:de:cc:f7:c4:b8:e8:a3:3b:b5:0e:10:9c:8f:
41:bf:3b:f2:a1:a8:b2:a7:fa:32:1a:fc:6a:41:42:
6c:c0:84:da:15:11:f9:53:82:b0:c9:be:4e:65:de:
ae:48:78:04:dc:b0:be:01:cb:c0:4b:22:73:ab:c9:
d1:4d:dd:32:c0:d8:4b:f9:78:b9:27:14:a6:5b:bd:
65:f7:52:f5:80:20:94:6f:5a:36:4d:73:12:7f:4b:
79:7d:10:23:11:1d:d0:38:65:61:c5:2a:49:ba:51:
a2:d8:de:ae:55:82:fd:0e:df:b7:3a:9a:3f:9a:9a:
88:ba:ec:31:fa:6c:ca:fc:a9:75:9f:f2:ae:cc:07:
e3:db:1d:c1:e0:76:e3:f3:61:8c:e7:be:08:45:a0:
4e:28:8e:25:c3:5d:16:69:2d:a6:bf:9e:62:7f:78:
7c:a9:9a:a4:27:36:c1:a7:ae:c9:28:5b:09:b6:55:
9b:f8:8f:18:a8:34:8a:66:b3:a5:bc:6a:d6:5d:26:
af:b2:d0:85:d2:77:42:fe:17:83:4b:cf:17:bc:07:
22:33:6f:ae:9a:3d:f2:47:2f:e5:77:f4:73:10:1c:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:96:13:F0:F9:C7:92:6A:EE:89:28:71:B8:EF:ED:1A:DC:00:B0
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e8:69:97:09:9c:47:00:d9:aa:1d:33:c1:43:95:5c:db:f7:
d2:29:a7:da:98:5f:f3:c1:be:81:21:f2:d5:63:dc:c6:a5:c0:
36:82:d7:c7:a8:bc:a3:12:e7:8b:c5:ae:44:6f:70:71:f5:f4:
fb:69:b7:36:12:67:5d:0a:50:fd:72:d1:57:ac:fd:28:e1:15:
02:b1:6b:f6:64:d0:e7:10:79:15:c0:35:5d:0a:d9:a8:3f:e6:
be:e2:10:fc:62:27:a3:fb:e4:06:0f:c4:b7:29:0c:d9:75:d5:
c1:70:c3:cf:a4:69:37:4b:b2:e6:a5:ae:93:60:6a:bd:bf:c7:
2b:59:dd:27:3c:60:0d:17:b0:47:ba:7f:11:74:12:9f:0c:dd:
ea:98:c6:51:90:4d:3c:23:3c:b2:f3:a9:c1:8c:09:44:5f:dc:
52:78:e5:ef:60:e5:fd:f8:31:1f:4b:e3:68:22:38:a8:47:35:
7d:53:6a:55:fa:32:9d:ca:ca:e5:31:e5:18:e9:66:52:1c:33:
0b:47:49:34:5a:a1:36:dc:22:19:9f:10:64:c3:d0:16:e0:b6:
53:55:c2:6f:e5:2f:a5:8d:ca:c5:bb:f6:51:9d:56:b3:2b:3e:
ce:b2:fc:41:e7:39:f6:62:e5:e8:5f:a4:d7:69:25:42:11:02:
72:2e:68:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:56 2025 by rpki-client