Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: 1e0u1dkti9bhItYYZMk73ZQhTaVunvQxTLxO47N34Es=
Subject key identifier: 27:42:CE:27:A7:0F:42:FC:96:3D:F2:D6:A4:99:A1:45:CE:74:81:22
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 0199FDD8E82B9507047D51B5579D4951C17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 1542
Signing time: Sun 19 Oct 2025 19:01:14 +0000
Manifest this update: Sun 19 Oct 2025 19:01:14 +0000
Manifest next update: Mon 20 Oct 2025 19:01:14 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: YEVNGADlesQh0gwNrIr+H/0m5JSBZ89UbEEQXHuvttU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:e8:2b:95:07:04:7d:51:b5:57:9d:49:51:c1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Oct 19 19:01:14 2025 GMT
Not After : Oct 20 19:01:14 2025 GMT
Subject: CN=2742ce27a70f42fc963df2d6a499a145ce748122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ae:07:02:1a:36:ba:37:08:b1:26:06:32:f6:
ee:c7:b0:1b:a7:04:12:a7:16:26:dd:4a:20:83:6b:
d6:03:33:ff:35:bf:2c:d8:4e:6f:71:21:b8:c3:d6:
c6:d3:c9:d6:38:ef:08:da:d8:08:f7:55:f5:dc:a9:
11:41:03:44:1c:7a:c9:f0:4b:ce:63:ff:ea:d0:96:
5b:33:f8:95:92:1f:5d:4a:70:97:8a:6e:8c:95:79:
ca:b4:e2:23:be:04:24:40:3b:0e:2f:2b:5b:d1:4a:
8f:7f:5b:26:82:4d:45:0a:32:35:c7:f5:ac:60:4f:
01:03:bd:bf:1a:1c:b5:3c:aa:38:85:6f:b4:15:d9:
22:32:ea:81:17:af:c9:77:7f:d6:c3:49:f1:f7:c8:
57:34:95:02:3e:65:bd:1b:79:60:8c:70:a7:9b:ef:
f5:71:28:b4:97:23:bd:74:78:e4:76:f9:71:c3:3a:
7a:ca:e8:99:e4:bf:e5:b6:b5:fb:67:2e:a2:af:a5:
8f:8c:32:ed:40:e8:4f:77:4a:a7:0a:83:b8:a0:8b:
7e:d7:95:de:e0:53:4b:7f:75:b9:55:03:d2:d7:f4:
2d:39:cd:0f:ea:e4:75:c4:03:99:4c:5b:74:f8:e1:
20:c7:fb:7c:74:c6:a0:b8:35:43:8a:27:aa:19:a6:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:42:CE:27:A7:0F:42:FC:96:3D:F2:D6:A4:99:A1:45:CE:74:81:22
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:11:8e:a3:56:83:ea:ab:bc:3f:de:e5:b3:33:35:33:89:0a:
8e:2b:d0:7e:60:8f:86:33:1e:b3:8c:e8:2b:93:a9:e1:60:de:
c2:04:93:ee:9a:a7:0e:9d:d7:ad:95:9e:d0:ff:91:a1:f7:43:
26:e0:8e:9d:c0:e7:02:a7:e5:4f:fe:68:77:ba:cf:69:f2:db:
55:6e:1e:64:1e:0e:2d:4f:47:ef:a2:48:f3:ef:12:dc:2c:8c:
1e:2f:04:bc:45:b6:fe:81:0c:98:d9:84:87:d8:0b:9c:7a:76:
a2:07:13:5e:3b:b2:5d:dc:e5:32:ee:cc:13:b5:08:6f:f2:d6:
03:f4:d1:e1:36:80:ad:c3:88:ab:ee:0c:0f:37:89:19:40:21:
bf:d2:f1:85:df:f3:20:df:8a:7d:a0:92:92:de:fe:b3:c9:92:
2a:8f:c7:d4:25:29:c5:68:bf:ca:ac:ac:83:d9:5c:8c:6b:f4:
b2:6b:95:4d:02:19:c4:12:44:2f:88:e9:1e:6e:f1:45:d0:08:
13:d9:a5:9e:cb:8d:96:bf:3b:57:e6:cd:f0:b1:61:f6:7f:34:
ea:a1:c1:7c:4d:2b:f8:ef:fd:24:56:96:14:7c:70:f3:ef:36:
f9:4c:d2:57:b4:35:65:a9:7b:76:0e:89:f5:5e:ab:2e:93:95:
80:85:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client