Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: sk6E/FRhEVSFPw/eALvxwFHy3CGHR8OFzUqW3ItLOpw=
Subject key identifier: FB:B5:9E:31:0E:41:97:68:E2:48:FA:80:19:E9:11:CA:BE:4B:99:BC
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 019A4FCFE1C6BA503F02B212FCCB21696E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 0734
Signing time: Tue 04 Nov 2025 17:00:14 +0000
Manifest this update: Tue 04 Nov 2025 17:00:14 +0000
Manifest next update: Wed 05 Nov 2025 17:00:14 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: g9cbUb8UdA9T9h7Sk3iu/PzdkBbs5+pntIIwaCcwb4E=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e1:c6:ba:50:3f:02:b2:12:fc:cb:21:69:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Nov 4 17:00:14 2025 GMT
Not After : Nov 5 17:00:14 2025 GMT
Subject: CN=fbb59e310e419768e248fa8019e911cabe4b99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:db:15:5d:53:fd:02:63:61:45:cc:09:60:
2e:46:8c:f9:bd:94:81:2c:da:36:d1:2c:60:45:36:
a1:f2:3d:ee:e8:af:7e:04:67:9a:3f:49:6c:fc:91:
ec:e2:23:fb:e3:a4:6e:40:b2:5c:13:5c:91:bc:4c:
28:f1:d3:df:8f:96:26:a5:68:c1:54:0e:f5:7a:76:
a6:09:1e:1b:6b:2a:e4:5e:4f:de:59:37:50:f6:11:
ad:f0:cb:b6:30:64:0f:f7:d2:90:76:c2:28:75:07:
fc:53:61:51:0e:f2:c2:33:77:e4:8e:77:3a:55:02:
4d:9c:c0:8d:39:ef:74:93:f7:99:8e:34:6e:ee:f1:
b0:be:f7:28:d6:01:94:ce:f6:e1:da:ec:5e:6e:8e:
22:84:30:cc:5a:c0:8e:b4:d6:98:4f:53:8a:d7:16:
98:68:1c:58:4d:94:3c:33:fd:22:f2:2e:bb:80:45:
08:5d:ce:58:29:06:4c:0c:eb:eb:c2:c3:fa:cf:c1:
03:cd:68:1f:a3:89:94:64:4a:03:50:5c:ab:00:11:
4e:61:38:63:5a:45:ad:f2:d7:7c:1e:2c:fb:a4:a6:
a6:1d:39:e0:c7:91:a6:bf:47:f8:2d:ab:b1:1b:e2:
dd:b3:9f:83:c0:a4:1a:ba:ec:3a:cf:ec:d6:4e:37:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:9E:31:0E:41:97:68:E2:48:FA:80:19:E9:11:CA:BE:4B:99:BC
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:91:41:91:d5:a8:49:09:d1:d3:44:89:17:62:fb:b3:6a:
51:2d:1a:5c:7a:83:b1:5d:86:88:e0:d3:44:26:a1:ba:6d:cf:
37:74:a0:1c:a9:6c:08:d3:6b:59:5b:d5:82:95:e7:39:17:bd:
a6:c3:55:50:b7:66:e3:a3:89:90:95:fa:23:5e:e6:2e:25:52:
23:e5:f8:6d:16:71:c1:b7:c5:66:1b:0f:7a:e4:40:c2:60:ca:
ea:84:18:6a:83:61:d7:95:91:29:cd:97:9e:1c:23:67:a6:6d:
9a:04:61:56:59:b2:71:6e:7a:33:73:e2:eb:24:e6:fe:42:98:
e2:ed:10:68:16:e1:a1:46:7f:40:a9:c3:b7:48:2b:1d:8f:2d:
8a:14:99:df:e3:8f:16:3f:18:30:fd:06:f7:19:f2:b2:ad:f6:
2c:83:ee:6f:fe:3f:a8:d5:11:9f:48:36:bd:fd:c3:65:8e:b3:
b5:b3:b0:8f:44:cc:5f:4d:65:d6:0b:5f:4d:90:19:bd:32:a8:
75:17:eb:73:2f:d7:aa:50:14:27:bc:75:1c:5d:24:6c:9e:a6:
a6:dd:e1:34:97:b4:8f:d8:44:c3:0c:10:50:4e:53:cc:d2:d9:
d5:a1:69:47:73:04:a4:fc:2f:08:7f:5e:b3:3f:1f:3a:ca:3b:
1b:b8:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:22:39 2025 by rpki-client