Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: 8DKVFKKASU+DspYTNMddPcuBd8JZj8xtYk7H6+dcGEg=
Subject key identifier: E0:84:EC:C5:78:AE:A5:57:FD:C7:12:30:41:42:72:36:44:B6:BD:05
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 0199FEB4A86929FE24FA1717525A5C6B9E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 23:01:16 +0000
Manifest this update: Sun 19 Oct 2025 23:01:16 +0000
Manifest next update: Mon 20 Oct 2025 23:01:16 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: 6HRWvhlVedAs0gRbJPOMnDaP1tfDltKwgDeqE81Bt6Y=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:a8:69:29:fe:24:fa:17:17:52:5a:5c:6b:9e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Oct 19 23:01:16 2025 GMT
Not After : Oct 20 23:01:16 2025 GMT
Subject: CN=e084ecc578aea557fdc712304142723644b6bd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:77:ff:6b:3a:3c:3d:eb:e0:55:c1:e7:15:
4e:4c:8a:62:11:eb:d3:83:07:89:7f:f7:a9:c6:bc:
e8:f7:f8:27:b4:ce:ed:ac:d3:db:c4:a9:0f:7b:39:
31:78:ca:df:87:55:be:a9:33:66:7f:8f:e5:6f:87:
fb:3a:cf:88:43:fa:e7:39:7f:3f:b2:32:21:d2:34:
82:2f:d6:5d:5d:f8:f9:69:ff:3e:2c:e0:17:9d:4e:
c4:36:3d:c5:e2:54:25:76:df:0e:07:ff:fc:88:e8:
21:96:ae:10:9e:70:0f:58:a6:5f:6a:4e:63:cc:17:
7a:0a:2b:58:88:25:0c:e1:4f:e4:ac:53:88:15:17:
76:38:b9:2f:15:a8:04:78:e6:51:d9:aa:39:2e:6e:
12:6d:2d:99:d3:f7:cd:6a:c5:4f:ef:be:cd:0b:22:
7d:bc:aa:8c:bf:f7:59:35:9f:01:95:f5:ed:3f:d3:
30:b6:05:68:c9:09:d0:6c:5b:40:6c:4f:d8:a7:71:
fe:a0:be:2b:15:e5:6c:a0:32:b2:fa:14:b3:ec:5f:
f9:b9:e6:cb:7d:c5:52:d9:d9:6a:1f:ba:f0:a0:1d:
cd:f1:01:cb:4c:7f:71:2f:46:be:21:09:56:91:98:
aa:9a:89:ed:34:a1:ff:5b:56:29:16:bc:7f:fe:90:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:84:EC:C5:78:AE:A5:57:FD:C7:12:30:41:42:72:36:44:B6:BD:05
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:79:8f:89:56:a9:9b:23:5d:c7:49:a2:5a:81:94:bf:c3:3c:
16:06:2e:22:b2:33:98:56:0f:c5:7c:61:61:ce:b0:c0:3c:da:
1a:2b:37:57:40:bc:e1:4b:78:79:cc:55:6f:62:02:21:a0:61:
f5:6f:05:63:84:db:b4:42:49:bf:aa:28:6a:19:44:1f:f9:90:
82:5c:30:26:73:e7:be:43:ae:8a:59:98:1e:50:35:ec:ff:25:
e8:9f:d2:cd:ae:d7:13:15:da:68:dc:6d:fc:62:11:15:d1:d4:
45:6d:1c:c5:e4:f5:3a:cf:76:c8:d3:fd:21:49:2e:da:13:f8:
70:57:14:b4:1e:2f:09:d6:b9:ad:73:da:7f:fd:a2:8c:1f:95:
fd:05:9a:4d:3a:20:5b:df:14:eb:d2:04:14:2e:ef:22:7d:cf:
a8:dc:3c:b5:2f:a8:50:7a:c7:5b:cf:90:a7:8a:b5:05:1a:14:
95:43:e5:5a:fc:56:ff:49:85:5e:a8:28:0d:42:93:53:f9:e7:
bd:f5:85:50:a5:8a:66:f4:11:9e:b6:7f:bf:b8:84:79:cc:14:
2d:4d:e6:49:d2:04:0e:4f:d0:0d:34:2e:b8:24:61:e1:4f:64:
5a:cf:71:82:57:27:22:d1:7d:07:f0:63:98:3f:d8:3b:d8:15:
85:52:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:39 2025 by rpki-client