Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: SwcU0m8Ep889jNd/xIHHeyv5xSqqyKDPaxoTem0glNI=
Subject key identifier: 51:5A:0C:5B:5C:9A:14:10:26:69:5A:E9:62:93:24:ED:71:CD:DF:EF
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 0199FCC605A488787DC8378801424EAAD7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: Q+VkQtl23yKDdjpWwSLtbvX9rtYRnz+Q8rQua6dsUmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:05:a4:88:78:7d:c8:37:88:01:42:4e:aa:d7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=515a0c5b5c9a141026695ae9629324ed71cddfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:64:e7:fd:ee:b3:fc:e0:e6:51:d9:c7:be:
eb:4d:5b:79:db:93:51:14:97:d7:8c:b9:1e:91:7f:
f5:9d:ed:9f:03:ee:d2:97:37:72:20:44:c3:79:d9:
08:1a:34:40:d5:2f:14:5f:c1:0d:8d:71:4f:89:e0:
eb:0e:9b:b8:8c:52:b6:05:69:ef:97:af:82:31:af:
cf:66:e8:98:25:ec:f2:46:36:87:d7:c8:17:b1:81:
47:65:93:80:6e:95:69:21:e2:7e:7e:5e:b6:f1:ef:
1e:50:fd:25:ea:b0:ae:52:b8:e9:3d:b9:16:dd:6f:
a2:e2:bf:4d:88:4f:12:36:69:68:a4:89:b4:c1:28:
e0:44:c8:88:8a:ff:54:84:f7:ae:bc:0b:07:f8:83:
ba:1c:de:9b:67:5f:26:93:55:1b:b8:dc:76:4f:07:
d5:8a:d8:c2:b4:b5:f6:5a:8d:75:5a:dc:cd:0a:0e:
d8:8f:32:67:41:bb:3e:ef:d6:35:1f:5c:74:05:40:
98:af:f3:8d:24:2e:72:52:44:ac:3b:c5:a7:49:78:
83:fb:4a:7c:82:0b:f1:98:7b:9a:a1:44:13:33:12:
ac:28:9d:54:5b:79:a7:23:c2:bb:4e:32:6c:15:70:
48:0d:fc:6c:26:bf:ed:1a:47:3d:89:c4:af:ea:24:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5A:0C:5B:5C:9A:14:10:26:69:5A:E9:62:93:24:ED:71:CD:DF:EF
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:68:44:59:e2:2e:ff:b0:92:73:22:79:e0:dc:fe:05:20:
b7:66:42:e3:b6:db:ff:a0:e8:40:74:3f:4d:f6:4e:b7:bd:bf:
06:82:c4:85:64:0e:56:0b:b8:4b:d0:e7:8d:aa:ca:b7:87:c0:
6e:e8:6f:ca:70:01:b1:6a:9f:4a:f9:b5:19:52:fd:ed:97:27:
59:60:1c:e9:b1:9a:f2:79:d2:6e:a1:60:02:69:72:22:de:a7:
38:ab:95:6e:cd:14:ed:41:dc:3e:93:1f:a9:ca:c6:7c:36:00:
a8:3d:e9:12:ff:6a:0f:dc:07:16:ef:2a:15:f3:dc:32:9d:e7:
c1:f3:de:7d:b8:7f:d0:46:e1:73:f1:3f:30:b1:e3:0c:b3:f2:
69:4a:b1:52:6a:fe:e0:b4:e1:64:75:1c:1a:6b:d2:71:59:0e:
1c:a6:4d:23:0f:cd:81:b8:13:6f:13:be:6e:69:2b:25:2b:0b:
90:d5:4b:32:1a:0f:32:d9:58:6d:bc:ed:0d:5e:94:c0:03:d6:
e9:be:05:75:14:d6:30:41:7d:9a:b8:21:28:3b:0d:a7:dd:25:
21:60:88:94:af:f8:16:c7:b5:9f:d3:12:3b:dd:f7:1c:9a:22:
75:ab:6d:88:57:77:d9:7c:ad:21:2c:48:bb:ee:67:9f:b0:db:
3d:da:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:29 2025 by rpki-client