Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: +G2u0eIyCcXphGZbBOQ9pRH5LzvMgiO1m2yqSx67c1E=
Subject key identifier: 00:41:B2:74:96:BD:DF:99:50:3A:D5:92:70:C8:A7:00:3E:15:7E:BA
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0199FC587FEB26D459B8E2AD4E65187B7EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0850
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: AjX++kCVInJvTzFuFLFmRprxns9FSLSR5OfPQKXYIYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7f:eb:26:d4:59:b8:e2:ad:4e:65:18:7b:7e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=0041b27496bddf99503ad59270c8a7003e157eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:4f:ef:5f:07:53:29:7a:c7:b9:da:2b:0d:
8d:8a:ad:f4:59:60:b3:e5:24:de:0e:0f:e1:84:38:
9b:47:12:14:a8:71:22:2e:ea:c7:13:73:cf:31:b7:
32:b3:49:a1:14:59:f5:3f:72:e7:49:de:de:f9:b6:
e5:88:a1:ff:05:3f:1a:09:cd:6d:91:86:ac:72:db:
f7:2e:e1:4e:b7:cb:ea:61:36:6c:5f:f2:f5:d8:e7:
a3:32:81:1d:f7:f5:58:66:4a:63:77:87:03:10:19:
84:47:a4:84:8d:6d:89:cd:9a:9b:e7:78:69:38:0f:
f9:ca:63:ad:2c:be:e6:98:ce:49:1c:b7:00:51:bc:
4e:0e:86:ef:74:e5:62:9a:6b:ac:22:04:06:02:f3:
51:33:1e:10:1a:35:f1:cc:6f:29:e4:98:ac:a5:d8:
ad:3d:01:2e:77:98:98:16:b3:3d:52:b8:88:b1:51:
10:6e:6f:a3:41:d4:ac:02:05:d6:60:44:23:77:79:
55:74:29:32:a9:62:6a:ab:21:2a:58:b4:13:b9:28:
12:00:5f:91:b4:60:27:ca:6f:00:12:24:1b:6d:7c:
f8:6e:e9:c3:95:0d:69:e9:5f:90:4a:34:9a:00:a5:
c9:2e:63:81:18:54:e9:4c:6f:be:bd:65:28:d7:b7:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:B2:74:96:BD:DF:99:50:3A:D5:92:70:C8:A7:00:3E:15:7E:BA
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ea:97:ff:ea:98:94:7b:ae:af:97:01:ce:ae:25:9f:1a:46:
58:0b:cd:c6:e1:a8:b4:da:d2:3f:d3:97:d0:f7:35:fe:fc:bf:
60:5b:b5:2e:15:c6:55:6a:88:f4:89:c9:24:83:d0:2e:53:fa:
06:85:68:c8:22:d2:ee:33:e0:bd:6a:ec:58:7f:3d:89:a1:05:
f1:e3:76:c5:be:6d:a9:d0:0c:f0:0e:3c:01:ba:14:c8:cd:cc:
f5:33:0d:f8:c4:e2:e2:97:28:45:ad:16:fd:fa:7c:8d:56:a0:
e6:33:c7:ab:81:e9:c1:1b:64:1a:05:cf:59:25:44:85:f1:39:
80:0f:ea:35:fe:1b:4e:d1:b3:3c:de:ed:36:bb:91:7b:9b:9d:
94:4f:16:46:ee:94:fd:93:bf:7a:27:af:08:44:b9:0d:49:b0:
ac:9b:14:ab:b9:48:54:1a:53:bd:0e:04:02:85:67:69:d6:c4:
89:62:65:8d:01:1e:fa:7e:1a:79:ec:88:b3:d7:0b:cb:e5:ed:
38:84:da:a0:7a:87:5b:f5:32:c0:86:de:2d:71:bb:f5:b5:2c:
52:0a:1c:88:06:c5:4a:88:b9:e3:75:5b:f4:28:15:84:9b:f8:
7e:23:f8:08:da:96:5f:2e:7e:6f:58:5c:06:2b:fb:d2:0e:82:
5f:00:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:58 2025 by rpki-client