Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier: VxPa3BH4hUfgCshyneADQaGxNjJ++Xqn6seXrGUEl+E=
Subject key identifier: C9:2C:A4:3E:28:37:45:3E:91:96:CF:A1:EE:8F:78:C2:FB:61:9B:6F
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial: 0199FEEB84EE81DBE94C7FF2449DF98ED3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number: 0276
Signing time: Mon 20 Oct 2025 00:01:11 +0000
Manifest this update: Mon 20 Oct 2025 00:01:11 +0000
Manifest next update: Tue 21 Oct 2025 00:01:11 +0000
Files and hashes: 1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: Xgnabrm5Q4OmTOWLxy5Phx5RbFnXyXm5GNeeYdDw/uI=)
3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:84:ee:81:db:e9:4c:7f:f2:44:9d:f9:8e:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Validity
Not Before: Oct 20 00:01:11 2025 GMT
Not After : Oct 21 00:01:11 2025 GMT
Subject: CN=c92ca43e2837453e9196cfa1ee8f78c2fb619b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:79:8e:40:f2:15:a2:e6:8d:af:00:56:c7:
25:a6:fe:1a:f2:68:8f:8c:0f:a7:f0:df:7f:30:49:
4f:c7:7c:4a:ad:83:ee:38:a2:9e:21:ed:30:4a:44:
a7:1a:be:ce:c7:b1:94:ee:f5:4d:21:6f:aa:61:07:
ca:ca:a5:23:d1:45:62:68:a0:3c:11:e4:f4:1a:ea:
0c:1f:5d:d9:9c:36:11:a5:e7:0f:ad:2a:fc:03:5e:
38:55:44:2d:03:c3:19:c1:20:38:a6:da:1c:a0:d5:
2b:51:42:a6:10:de:47:c0:dd:ac:70:37:a2:d4:97:
e4:b1:05:86:16:b2:08:1e:92:6f:3e:86:1e:27:19:
42:7b:aa:f2:be:3c:f0:89:8c:83:aa:bc:74:6b:b9:
c1:b5:0c:7d:6a:eb:c0:53:39:f7:1f:55:ac:dd:01:
0c:4a:48:d9:00:8a:1f:4c:d1:f1:26:04:38:00:49:
63:43:7b:8f:02:71:05:c0:0b:bf:30:9b:97:b9:fa:
1c:88:a0:3e:46:eb:e5:1a:c0:55:80:07:1a:69:c1:
9f:9a:16:e7:aa:a9:a5:69:f6:51:e8:4d:32:ce:7d:
a6:2f:46:50:79:e1:70:94:af:fb:6e:4a:84:b0:27:
84:5b:e7:ac:04:11:5c:76:23:66:32:ca:c2:b3:18:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:A4:3E:28:37:45:3E:91:96:CF:A1:EE:8F:78:C2:FB:61:9B:6F
X509v3 Authority Key Identifier:
keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a4:20:99:e7:b2:d1:d7:a5:66:ec:f0:cb:7d:91:ee:32:55:
c7:08:78:aa:e5:d4:b0:04:59:e8:40:7e:64:6e:3e:93:8b:74:
9b:61:08:63:94:19:5d:d8:c4:2d:6f:3f:5f:3c:e0:69:07:16:
a2:db:4c:5c:7a:32:32:b4:bb:1f:a1:f3:55:d5:86:b2:16:54:
be:00:bf:cb:c0:5d:66:dc:2b:f5:cc:86:0e:9d:01:69:f0:68:
f1:5c:07:e3:1f:b7:ae:28:d6:83:f8:07:8d:72:97:72:e5:48:
8c:d9:fb:06:72:59:a5:db:a0:00:b3:4c:7d:f0:85:fc:34:5a:
cf:1b:0e:46:99:73:8f:bb:b2:71:fb:f1:24:83:3f:df:f8:a4:
d3:1f:e7:dc:64:4f:3f:28:4a:61:4e:5e:8c:c5:e6:fb:e1:3d:
3d:7a:61:3a:0d:d3:64:d7:92:10:46:80:9a:11:b5:0f:6b:59:
83:6d:53:a2:2a:3d:b0:a6:3c:22:a9:b9:17:bc:62:db:47:1b:
75:1d:34:f3:47:69:63:ea:5b:bf:ac:3a:27:5f:7d:a1:29:53:
98:4a:db:5a:81:35:b9:5e:ab:95:ef:55:fd:3b:0a:c0:14:41:
db:2e:b7:6a:cb:86:b3:d2:ef:64:8c:b6:1c:ee:3d:7c:02:73:
2d:4a:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:55 2025 by rpki-client