Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: uI0A+N6ChuXx2jlHLWVrx8Bo5J8OGGK5vhiLS+C3aX8=
Subject key identifier: 75:3F:1E:2A:66:0B:63:DF:4B:AB:A7:40:18:E0:C3:75:B8:68:94:CD
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 0199FC214266CB52672A1D38BDA3B8B3A3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 1671
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: jb1OKJa74jyN28VJu33BNGYXrjeV+wZyeoPnLOcavAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:42:66:cb:52:67:2a:1d:38:bd:a3:b8:b3:a3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=753f1e2a660b63df4baba74018e0c375b86894cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:ca:df:28:66:1f:c0:bd:e7:d0:d8:2d:00:
58:15:d0:1a:cb:ca:3e:ff:dd:27:3e:7b:71:ed:e3:
3b:93:c1:cd:70:55:0f:85:3e:1f:95:1e:8d:a1:63:
9f:2f:3b:02:f6:b2:e3:84:c2:3f:69:2e:f5:83:69:
58:3d:48:3a:bd:a7:10:70:7d:fd:78:7d:cb:61:1e:
c3:74:1a:63:55:b3:4e:63:a6:15:4d:d7:25:e0:4a:
96:87:ad:65:8e:b9:15:a1:8a:10:03:4b:11:11:d7:
cd:b2:1b:f6:52:31:ee:97:2e:ae:45:52:fe:40:5f:
f0:71:0f:62:80:82:44:ba:0d:10:f2:72:94:05:97:
73:ed:bb:43:a6:98:6f:99:03:e5:d2:a2:69:65:1f:
51:be:3d:3f:07:6b:d3:2d:9d:3b:f3:89:ab:4a:d6:
3f:17:56:b9:2b:76:5a:87:6e:a8:59:47:86:d8:e0:
ae:ba:97:e6:03:eb:23:c7:af:a0:27:ad:1a:ed:02:
5a:62:34:6e:0a:f2:62:44:39:f3:f4:b7:23:a8:29:
ec:cd:a1:41:ed:55:45:c1:33:26:1f:6b:c2:5e:4d:
27:54:55:08:72:97:a3:e9:e3:31:16:25:2e:a2:c5:
68:a0:bc:25:59:09:ab:34:1a:b1:d1:e2:68:41:48:
a7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:1E:2A:66:0B:63:DF:4B:AB:A7:40:18:E0:C3:75:B8:68:94:CD
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d6:40:78:86:d9:d7:bf:55:1d:4c:5b:95:1c:a7:08:9e:93:
8b:04:e9:0e:80:41:26:be:aa:b2:6f:07:07:bd:bb:11:7a:35:
92:ed:9d:76:67:c7:80:0e:78:ec:95:20:54:2b:5e:cb:51:44:
c7:f9:9f:97:8f:a4:91:25:22:38:df:66:11:df:b4:46:fb:5b:
f1:57:fa:74:af:51:cb:25:1b:63:32:c3:81:62:5c:25:cb:c8:
da:dc:c1:77:8d:e6:33:61:a6:ae:9c:3b:88:c1:fe:49:b9:a0:
02:1c:e7:77:04:6f:ef:ea:97:ab:04:50:94:88:63:1b:5a:33:
2d:eb:de:f4:44:cf:6e:63:82:51:14:db:e3:9d:e0:fb:c1:6d:
0c:c7:ad:d0:d7:52:bc:e0:9f:f0:01:3c:71:61:d5:f4:c3:67:
54:3a:8e:89:f3:63:be:d6:9b:ee:3a:92:0f:ae:7e:54:39:28:
b6:6e:ca:48:64:94:fd:76:35:a9:67:c7:44:f9:21:26:d0:88:
ab:a5:9c:ce:6e:fd:3b:8e:70:51:68:b8:14:f1:a3:23:22:74:
87:43:3f:c2:d9:82:52:29:52:d7:e3:0a:41:0c:0f:19:cb:07:
58:7b:78:64:ce:21:95:44:a7:ff:14:cc:98:e4:34:c8:6b:05:
25:4f:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:09 2025 by rpki-client