Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: AJzDgZp57q8tg9jY5y9gWICDMNTQnbyd3fRgHyhzqvE=
Subject key identifier: 14:64:DE:F7:4A:A7:9A:9A:63:9F:69:AB:C3:55:BD:09:9E:D6:75:E2
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019A4C61A3E0E24E592FB2A500C1069173E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 01:00:58 +0000
Manifest this update: Tue 04 Nov 2025 01:00:58 +0000
Manifest next update: Wed 05 Nov 2025 01:00:58 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: xw7shdHa6huR6IYpljv0/aW4/UYoUtUCICY0xgLHJZw=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:a3:e0:e2:4e:59:2f:b2:a5:00:c1:06:91:73:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Nov 4 01:00:58 2025 GMT
Not After : Nov 5 01:00:58 2025 GMT
Subject: CN=1464def74aa79a9a639f69abc355bd099ed675e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:20:f7:64:3c:70:94:fc:ad:d2:89:e0:f9:
2f:3c:df:73:fd:01:fd:16:d7:2d:fc:d0:12:0a:de:
20:26:5d:5b:39:15:8c:a8:6d:ed:03:07:9a:15:f5:
67:6e:35:a3:37:65:2b:2f:3d:cd:83:f1:28:09:4d:
d3:03:26:e3:7c:22:87:9c:6e:99:1a:11:82:50:25:
78:2c:48:52:d6:eb:92:e0:ae:c6:66:16:9c:d6:64:
30:cb:12:e4:de:e4:c7:ea:18:1f:1b:e0:48:18:ba:
f7:0c:e0:49:6d:e4:c7:80:e2:37:28:7d:a6:b4:43:
af:30:4e:f9:54:63:f7:31:0b:52:81:75:df:5b:96:
c4:c6:67:ad:1e:1b:3d:a4:54:f7:2c:d1:31:ae:26:
6c:51:0c:2d:fc:93:0c:1c:a8:40:f0:65:ac:36:03:
f4:3d:71:45:c9:60:b5:30:40:00:d0:41:5d:14:43:
65:3e:d2:78:6a:bb:7a:02:57:de:ff:06:5b:f8:a3:
0b:80:f0:57:4b:02:44:17:2e:d1:8e:b2:a4:fd:87:
55:43:8e:a0:d5:12:38:a3:ce:a2:4d:4a:ee:6b:56:
03:06:d7:f5:8b:f1:4f:77:50:2a:13:04:bc:41:25:
99:aa:f7:70:35:53:8f:e7:ca:86:3a:f6:34:a8:33:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:DE:F7:4A:A7:9A:9A:63:9F:69:AB:C3:55:BD:09:9E:D6:75:E2
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:6f:76:43:a2:99:12:b6:57:3d:56:13:be:d3:df:3f:75:
07:fe:e7:b9:96:b7:e7:09:ee:3b:75:86:e1:0f:f1:0e:10:2e:
23:23:92:aa:65:87:c4:f3:f1:74:81:94:06:9e:4c:35:75:bb:
f6:c4:0b:c2:11:75:33:cb:99:50:06:3c:e1:23:8e:43:a9:d1:
44:c6:20:09:a2:7d:b2:90:53:17:65:2b:c4:94:e5:ec:99:8b:
62:0c:99:61:6d:9a:48:0d:41:4b:71:58:92:21:75:30:0b:73:
c0:d8:32:82:a5:3c:b6:bd:2d:e0:49:bd:47:ee:19:a8:04:08:
50:9b:5f:66:57:65:07:34:8c:ee:a0:ac:62:d3:bd:08:14:ba:
e3:93:1d:38:15:d3:ac:cc:29:b5:89:c5:36:d1:e8:15:80:fa:
af:37:eb:8a:11:e4:61:f6:ae:91:c9:88:13:a6:40:3d:f8:50:
f8:fd:88:a5:c3:72:57:6a:cb:4c:d3:aa:10:2b:c6:a8:ac:e1:
00:db:39:98:9a:e6:46:81:e2:01:1d:4b:8e:0a:f6:cf:97:31:
10:a9:a2:dc:72:dc:09:5a:07:76:23:18:3d:93:5d:e3:34:1a:
16:31:da:14:68:0a:28:ee:fa:67:ba:b9:41:f3:92:d4:b3:a1:
83:ce:be:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:58 2025 by rpki-client