Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: /6mFZ7MMJvx6pGWqK3fqI3Vxg6emHQZvyZqxCQaz+t8=
Subject key identifier: B6:C0:8D:8C:04:92:4B:9E:D8:7C:9E:B7:50:C4:99:C6:2F:D8:DC:C9
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019A4E86CC29E23DF84AEA2FA7CF8F2ABC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 1632
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: XaH5xKp0YO0weXq+YTgp3utwlwTaOKF57PhFrNlbr20=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cc:29:e2:3d:f8:4a:ea:2f:a7:cf:8f:2a:bc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=b6c08d8c04924b9ed87c9eb750c499c62fd8dcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:95:b0:bc:04:19:c8:8d:c1:e3:37:ad:ed:
c9:d0:12:dc:05:7b:42:69:0c:81:70:15:74:83:42:
16:85:9f:44:38:5f:e5:c6:bb:d7:57:07:97:88:6e:
95:0a:dc:19:e0:69:7a:33:d6:1a:bb:77:6c:dc:f7:
1e:16:32:ba:80:ec:83:56:fc:a4:ab:46:aa:7e:2b:
df:03:d1:5a:f7:f4:70:e1:a4:07:58:e4:f6:e8:bf:
b6:af:1d:09:56:89:33:dc:2e:f5:8d:f3:86:41:43:
b8:47:00:52:69:c2:ad:04:87:41:1b:33:2a:98:d7:
ab:92:c8:3c:73:91:8c:38:3b:cb:1e:dc:d7:9f:45:
be:4f:d2:50:8a:61:72:53:27:c7:be:db:2b:a2:d7:
bc:e4:27:27:aa:80:55:1b:82:c9:b3:95:2e:8a:a5:
6d:08:b4:9b:99:dc:15:9b:c5:55:c0:af:c0:ea:a1:
64:59:08:5c:11:90:6d:36:08:c1:58:42:25:f4:f0:
0f:74:85:26:4b:f3:2f:eb:6c:22:40:c1:15:76:22:
0a:e9:da:e6:a1:09:49:76:ae:17:92:4f:c1:08:87:
9b:aa:fc:17:2e:08:f2:be:3c:31:44:09:39:a2:fb:
d8:e8:dd:65:68:fa:11:70:e2:8b:46:37:8e:53:35:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:8D:8C:04:92:4B:9E:D8:7C:9E:B7:50:C4:99:C6:2F:D8:DC:C9
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d2:ee:ce:28:7f:bc:fa:3a:8f:8f:a5:9a:45:45:30:ad:4c:
49:1f:bd:98:c7:be:bb:53:0f:68:91:0c:fb:e5:ea:c0:f5:29:
ec:ae:cd:78:0c:45:e9:fb:65:b8:36:97:ef:81:fd:fe:82:6c:
f0:94:d5:86:89:d3:5e:4a:e5:42:36:38:05:00:61:bd:cb:32:
e1:73:54:7d:6f:2a:f5:20:a5:8f:c2:79:82:12:2a:ca:5a:cf:
92:38:b6:11:b3:cc:df:53:7f:1f:cc:35:af:d3:fb:3c:1f:b7:
03:ce:28:00:3d:c4:bc:ed:d8:9d:47:9f:01:66:70:d8:98:3f:
ab:ec:38:7c:66:09:76:ff:ac:56:4a:71:28:10:b8:2e:6e:4a:
99:d6:34:4e:12:4a:a7:47:f9:4a:18:65:58:be:f4:f1:1b:7b:
8a:38:ef:57:d2:cc:b8:98:a0:eb:f2:8d:e3:ea:a7:52:13:7d:
f7:cf:5f:ab:5d:a6:4e:43:4a:0d:6c:2f:17:1d:5c:7e:72:10:
9b:2f:20:81:47:d1:2e:0d:a5:41:0b:b9:6c:cb:db:65:a1:b8:
28:03:eb:b2:31:4b:3c:c5:8a:60:41:0a:0d:a5:f0:35:ea:44:
76:2f:6d:1f:f5:dc:95:e3:6f:0f:8c:58:00:34:ba:3f:db:7a:
67:7e:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:59 2025 by rpki-client