Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: FKhFQCRKdQJOHsB6AFYuSE81c2HT6RdtAouYfmPJxP0=
Subject key identifier: FB:96:13:67:FC:88:07:77:1F:2B:CE:61:95:9E:E2:EF:EB:D1:E2:A8
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 019A4E4FAA0FC717AA6E9DDA44A9F4157216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:34 +0000
Manifest this update: Tue 04 Nov 2025 10:00:34 +0000
Manifest next update: Wed 05 Nov 2025 10:00:34 +0000
Files and hashes: 1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: GqqM6qgWyoG1ssex1MWIjaeEJoPmxqW0YNpU6l3/bpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:aa:0f:c7:17:aa:6e:9d:da:44:a9:f4:15:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Nov 4 10:00:34 2025 GMT
Not After : Nov 5 10:00:34 2025 GMT
Subject: CN=fb961367fc8807771f2bce61959ee2efebd1e2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:2f:aa:61:34:47:ed:4e:1f:8b:48:f1:c3:
2b:8a:28:68:1d:d9:ef:c9:8e:69:10:9b:a0:78:93:
b9:22:2f:aa:50:87:36:d4:27:36:5e:77:5d:b3:86:
90:ca:47:9b:bc:48:7a:e6:2e:d2:07:f0:48:fd:8c:
b7:b0:f5:0a:c6:0e:6f:3a:ed:e5:97:86:64:2a:b9:
01:e0:2a:3d:94:6f:69:38:48:9c:aa:c7:2f:10:47:
49:bc:e5:d3:85:39:f1:77:78:dd:e1:da:02:b3:93:
e8:5c:ed:75:16:2e:5e:1e:a6:7e:3c:27:aa:e7:a9:
70:3d:0c:84:29:2f:b2:d2:7e:f9:b3:67:75:ce:5e:
04:20:8a:8d:f7:e5:1e:db:6e:e8:7d:2f:46:3b:ae:
e8:66:29:4a:7f:cb:14:d4:3d:ad:1a:64:ab:f9:1c:
82:12:8c:7d:ff:5d:f7:e3:49:89:ed:73:6b:a5:8a:
79:5b:22:f7:8d:89:ee:8b:01:96:51:80:b7:3e:cb:
53:53:aa:2f:d8:f9:81:f0:7f:e2:a6:73:ca:1c:60:
0f:84:2c:3a:0e:01:ad:23:5c:ea:95:f4:6f:ff:b7:
4d:ce:59:b6:2a:f6:ef:7f:53:54:73:83:1e:7b:36:
56:ee:d8:5f:f3:63:0d:a6:55:16:23:f3:77:6f:6c:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:13:67:FC:88:07:77:1F:2B:CE:61:95:9E:E2:EF:EB:D1:E2:A8
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:e4:0c:59:9f:4d:ac:22:8c:b6:7f:16:da:b0:5a:b7:0c:
cd:c1:74:62:6d:4b:e1:52:f6:79:6f:c2:2f:73:f5:0d:d8:c9:
e8:14:15:79:79:d2:99:3e:0b:9f:24:43:86:e0:4d:84:b2:19:
35:bf:b8:2c:ea:16:fb:2f:93:35:b6:16:85:ea:6b:72:8c:9e:
6c:f8:bf:1c:11:1f:65:91:ca:08:a9:64:8d:d0:ab:12:88:11:
ce:62:91:ea:f9:9b:c8:60:25:2b:2a:06:cb:2c:a3:42:8f:78:
84:48:e6:08:a7:33:a2:e2:cb:1d:54:2d:41:87:5a:12:53:7b:
d7:5d:20:b1:62:b4:52:54:8b:2d:c5:fd:df:75:39:fd:fb:18:
6e:71:37:f2:e6:41:58:2c:1c:08:69:61:a3:ca:60:e3:ae:35:
2f:ce:cb:8e:fe:e4:d0:eb:8d:6b:e1:ad:2c:c5:cf:18:07:82:
87:1a:37:05:74:da:34:64:13:c6:9f:4c:84:43:7f:8b:39:50:
01:7a:35:69:af:36:18:75:b0:ef:e7:b7:f5:6d:10:fb:08:7d:
f1:14:cd:97:62:34:65:db:78:96:d6:54:e0:3c:62:20:d9:4a:
e6:e9:8f:bc:15:1c:e7:39:99:fe:83:92:5c:65:c7:94:b6:32:
33:b1:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:56 2025 by rpki-client