Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: hBpGGZQ6Sn4M2OAuPxx5+XMNhZhrTkqpWY2dAprleNA=
Subject key identifier: 1B:D5:D6:FC:88:0F:A2:A6:BD:81:F9:66:63:EA:2B:33:52:D7:ED:62
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 019A4EF44F71F27EDB919F4654EECDACC4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 1674
Signing time: Tue 04 Nov 2025 13:00:25 +0000
Manifest this update: Tue 04 Nov 2025 13:00:25 +0000
Manifest next update: Wed 05 Nov 2025 13:00:25 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: xbwAtoELqPxIyoxEWe36jZvccpOddZwCZ4pAomsd/Ek=)
5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4f:71:f2:7e:db:91:9f:46:54:ee:cd:ac:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Nov 4 13:00:25 2025 GMT
Not After : Nov 5 13:00:25 2025 GMT
Subject: CN=1bd5d6fc880fa2a6bd81f96663ea2b3352d7ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:c6:ae:26:0a:a4:3a:60:d3:8b:c7:ff:90:
8f:17:fe:30:10:5c:c2:6c:d5:0e:e9:38:42:9b:17:
e3:b2:01:fb:8e:95:8f:6f:f4:01:ca:01:81:f8:ab:
ac:8d:56:cb:10:81:51:ba:31:19:92:54:ca:82:6a:
82:44:a7:30:8e:4d:27:69:c4:46:ec:b6:16:29:62:
72:01:5f:19:20:1c:08:72:61:17:a2:0a:9a:fd:85:
59:ae:83:aa:9f:7f:08:f2:fc:8a:3d:ba:17:44:a5:
10:41:1c:11:5a:96:ca:68:85:03:17:f4:e0:5b:fe:
08:05:60:98:bc:27:65:c6:76:ea:8a:89:0b:1d:8f:
e5:20:fe:8f:e9:65:ed:07:64:d2:04:e5:04:0f:fb:
61:20:60:bc:18:59:a0:7b:a6:0f:16:7f:d2:a2:79:
51:73:6d:9b:34:a4:3a:15:62:fd:87:ba:a7:db:1b:
75:b1:32:a0:08:64:ff:c3:23:66:ed:b9:9e:6b:79:
fc:90:7f:fd:07:9c:a5:19:b8:5f:6e:35:97:be:04:
c8:79:25:54:1c:53:b8:85:81:a6:5d:6e:f8:e1:1e:
59:18:6f:62:37:ba:98:34:2f:e1:7e:8e:53:3e:60:
ec:32:2a:59:56:56:e6:f5:0c:1f:33:f0:b9:02:89:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D5:D6:FC:88:0F:A2:A6:BD:81:F9:66:63:EA:2B:33:52:D7:ED:62
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:da:a9:1e:c3:b0:79:82:9d:e2:f1:b8:90:70:77:c4:0e:95:
8c:23:81:cb:41:88:0b:3b:43:62:60:c1:56:45:46:b3:74:0a:
9c:1b:8c:26:bd:c9:3e:a7:61:69:37:c0:4c:48:05:26:45:4f:
66:2d:e3:47:f7:79:ba:7a:c8:f8:cd:1c:a9:92:64:cf:a9:1c:
da:97:d5:0d:56:18:62:ed:ee:f7:4a:f6:f3:62:7d:db:86:cf:
4e:1c:94:18:6f:cc:20:e7:5b:7a:45:60:3f:77:19:59:5e:7c:
51:cc:00:8a:4e:02:8b:b7:16:7f:93:39:06:1b:ac:7d:a6:58:
4b:ab:bf:b4:80:00:af:82:2a:00:9d:63:5b:8b:70:0f:3a:ec:
73:ee:56:06:fc:0d:68:45:7d:33:6a:e0:8a:e7:12:f7:02:f5:
1f:23:d3:4d:ee:3d:ff:b7:ea:90:8d:bb:90:d0:ba:af:34:2f:
3d:bc:5c:81:e1:a5:16:00:3d:c7:03:9a:77:7c:ef:91:2d:e2:
1c:1f:d0:16:27:25:91:50:1a:eb:36:bf:39:74:58:e0:a3:97:
d6:39:a4:5a:9b:28:35:fb:0d:15:d5:fe:22:0a:8b:68:32:17:
a0:05:b0:4a:07:61:e4:1d:44:9a:f9:ee:20:a1:9f:c9:94:b0:
2b:4d:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:09 2025 by rpki-client