Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: m/4bqjRXwyYpx0k6KkRD2ST+ZTLcW80BXxKkO3UUQac=
Subject key identifier: B5:81:C0:DE:15:C7:D4:05:C3:78:34:85:3B:11:49:26:F4:93:6D:CE
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019A4EF5A02EF6948730AF93C896AA8B2215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0D15
Signing time: Tue 04 Nov 2025 13:01:51 +0000
Manifest this update: Tue 04 Nov 2025 13:01:51 +0000
Manifest next update: Wed 05 Nov 2025 13:01:51 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: R4KxFxpPtnuEzzFEFhLRdHpaKuHsYXF6zHZV0VGt3Mw=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a0:2e:f6:94:87:30:af:93:c8:96:aa:8b:22:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Nov 4 13:01:51 2025 GMT
Not After : Nov 5 13:01:51 2025 GMT
Subject: CN=b581c0de15c7d405c37834853b114926f4936dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:69:89:b8:10:d1:28:18:82:3b:9e:97:d4:
20:40:94:d8:d5:df:92:ff:4b:9a:a6:d0:7c:f3:20:
9f:cb:99:0a:34:e8:9a:a9:9a:5a:28:66:1c:ff:fe:
81:09:25:b1:5f:9c:c6:35:9b:f0:02:5a:fd:a0:9f:
05:d2:d1:c0:7f:a3:99:06:df:39:41:20:fe:96:b5:
82:1f:d0:de:a1:2f:e7:15:4d:89:a2:01:a8:35:6b:
19:e8:f2:ed:12:da:57:1d:32:9b:a5:43:c3:99:53:
ff:b1:4d:2d:24:bd:23:55:cf:32:bb:47:5c:5f:ab:
cf:63:22:de:88:04:50:c6:9e:72:ee:22:10:f9:d9:
1f:6c:22:45:97:01:ee:79:ad:0a:9f:9f:26:29:d1:
3c:bb:79:75:6b:23:67:4b:59:87:4d:24:91:2e:0b:
f5:86:c5:b2:59:9b:b5:21:bd:23:40:e3:9d:57:2d:
4f:1e:8c:22:08:ba:c7:e8:09:81:13:58:68:10:14:
77:3f:30:9c:7a:15:ed:a0:3f:a6:ef:a7:85:0c:1f:
8c:4c:71:a4:36:cd:ae:90:f6:58:85:62:b1:48:80:
87:96:38:95:b1:79:ba:b4:ba:ae:60:40:12:0e:4e:
0b:26:11:8b:be:bc:90:aa:8c:30:47:b8:a2:2e:6f:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:C0:DE:15:C7:D4:05:C3:78:34:85:3B:11:49:26:F4:93:6D:CE
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:1e:02:97:26:55:8f:77:be:a2:c3:ee:24:ff:85:2b:66:
f5:50:6d:ce:42:da:bc:e7:23:b2:6d:52:0c:f5:eb:17:26:46:
f0:b6:95:d8:e5:3f:e0:b3:6c:86:92:d2:25:92:4f:0e:71:55:
44:82:0c:b1:82:bb:82:93:5e:95:e9:e0:2e:dd:c1:00:0f:02:
a7:8e:4c:ac:16:c7:a5:39:dd:7c:24:72:a6:94:af:f8:f6:cc:
9e:47:1b:d4:b1:14:f4:ab:84:78:8d:e4:a6:01:e1:64:ec:b8:
c7:90:48:bc:ad:55:dc:a7:f4:3a:14:93:09:ef:3f:c8:94:64:
37:c2:bf:88:b5:2b:0a:52:5d:35:18:a0:94:56:76:d4:f9:a2:
f6:70:07:15:9a:56:42:cb:5b:9b:ab:03:0c:5a:82:fa:ab:5b:
10:d6:98:73:45:94:2d:55:2a:94:b3:21:eb:71:4e:c9:78:13:
99:79:42:1f:4a:cc:86:57:f3:ca:a9:ee:8c:39:2d:e9:57:d0:
21:4c:98:ea:a0:f5:ad:f5:a9:0f:42:3e:18:c5:7e:cb:48:c9:
32:96:b1:14:e0:6b:0b:4c:56:53:c1:ad:9a:01:6d:27:84:c5:
0e:0b:e5:94:a6:07:03:a3:b7:4b:ce:d6:6d:52:47:c5:be:61:
b3:14:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:39 2025 by rpki-client