Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: wGXYIfCRH++aXAoOaU3Mv/sCkdzLcKT77eYd6hT2o+s=
Subject key identifier: AA:72:46:1C:13:B5:92:2F:D0:B2:04:1B:27:34:15:23:0F:C5:EC:6E
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019A4F996DE593A154293B74A914B6D9B275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0A91
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (hash: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: Iz6q6T8xCGPqsUVKH1lNIYOyihO90xXEwsyfTT70b5g=)
3: f1Yqi8lvwcIpnbg2hTJqBii1euQ.roa (hash: thrb8BU441zB2iuhJJ9dbE9Q7lmEZNGWAp0dWfYSQoY=)
4: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (hash: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6d:e5:93:a1:54:29:3b:74:a9:14:b6:d9:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=aa72461c13b5922fd0b2041b273415230fc5ec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:f1:c3:ae:72:f2:d1:43:5c:69:67:92:75:
c9:b5:b5:cf:a6:91:84:17:95:84:3f:ba:a5:bd:cc:
d9:e4:53:a6:b4:c0:15:b3:bd:92:ed:00:50:e5:63:
5a:4e:b4:b3:e6:5b:3c:dd:bc:39:04:b5:25:c3:ad:
8c:dc:da:e4:a2:2a:29:bc:75:33:a6:fd:93:4a:56:
f6:6b:60:97:f9:cb:15:9b:3f:b0:20:c7:43:86:a9:
6c:30:a2:d8:c3:f7:93:0d:94:3f:d2:5d:2c:e7:ac:
ea:9b:de:fb:52:54:7b:d7:c3:70:93:dc:eb:0a:b3:
c5:ea:a2:39:23:b1:6a:a0:b0:d0:ad:2b:21:5a:99:
d0:2f:4f:81:41:05:e1:f5:f0:44:22:9a:10:ea:68:
f8:43:10:ad:d3:4b:0e:28:58:bd:1c:62:2a:68:c1:
11:a5:9f:e0:c2:cb:f9:0c:d0:24:ae:56:50:25:00:
35:16:23:76:5c:4e:19:26:19:4e:b2:6f:0d:68:ac:
d3:5a:3c:42:47:9c:17:ed:84:73:0a:1d:66:e3:17:
11:25:15:d1:dd:f6:9b:29:39:fd:43:cc:60:f5:81:
7e:5a:16:6b:31:c7:18:ee:53:ec:0d:4f:e2:19:40:
74:23:12:16:ea:69:85:07:66:d2:55:cb:fb:b7:65:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:46:1C:13:B5:92:2F:D0:B2:04:1B:27:34:15:23:0F:C5:EC:6E
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:b7:15:6c:dd:71:98:36:f1:48:86:32:37:c7:1f:07:81:
c5:20:ff:a0:c4:4c:9a:e2:91:cb:d0:cf:ca:6e:d9:ad:8f:a2:
6e:ef:7e:5a:68:e3:75:09:90:50:e4:a4:da:87:86:75:19:28:
7b:b3:7a:12:d6:9c:73:8a:6e:d9:20:23:d7:e2:33:6d:4c:62:
a3:d5:3a:46:e3:7b:a8:fe:5b:86:ed:52:2c:e0:1f:11:91:5e:
78:48:82:03:74:55:fc:12:60:61:e4:7b:17:60:be:4f:24:00:
79:d9:16:46:fb:e6:b7:8c:8f:3b:b6:4d:53:00:e2:7d:12:91:
a9:bd:ad:5f:6b:84:6d:8a:fb:82:92:81:ff:10:d7:f4:74:3d:
3d:9a:92:86:41:22:02:47:6f:f4:8e:67:9c:9d:b8:d0:be:1e:
df:0c:69:93:80:46:d2:d5:bc:bc:02:60:1e:80:a6:e7:35:c0:
88:81:5c:86:09:6a:d8:d5:13:66:88:b3:ab:42:b8:6f:5b:35:
6e:e8:b8:e8:7f:d8:b1:2b:5a:16:a8:0a:a2:71:1e:db:64:fe:
03:53:36:4e:f4:74:0e:1c:45:fa:d3:7d:c4:14:ca:34:ca:4b:
ec:4b:e6:36:b2:a9:54:ee:69:9c:09:b7:c2:7b:79:39:51:21:
e3:53:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:03 2025 by rpki-client