Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: gloGdRbtpKFv6eJV14gcwHOUmWE4RcQR6bASVqiAAvQ=
Subject key identifier: 8E:58:32:1B:D9:E4:5A:DE:03:C3:B0:2A:B3:BD:04:7C:4D:A1:1B:4B
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019A4DAAB7764EC01B085B8B3581EBE89603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: SxULkHpogVkXXwlevSQItF2nqIIH9IcDIwhS4qXaCrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b7:76:4e:c0:1b:08:5b:8b:35:81:eb:e8:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=8e58321bd9e45ade03c3b02ab3bd047c4da11b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:54:31:44:8a:47:fc:a5:0b:a9:f5:92:f6:
0c:85:23:3c:30:9e:30:c8:15:89:21:8f:d7:7b:dd:
7a:e4:b4:0d:2a:e5:9c:e5:46:10:17:fa:d0:a5:60:
a7:d3:58:4e:fb:66:7b:5c:6a:4e:ac:25:b0:47:d8:
a0:42:32:b3:9a:60:67:47:e0:a7:cc:76:0b:46:08:
a5:f3:fd:da:2d:3e:39:2d:4b:32:e7:19:6c:89:5f:
e3:d0:9e:e1:70:96:50:c9:fb:11:c4:08:3a:25:33:
07:57:74:fa:2b:0b:cb:08:4b:6f:09:d5:02:bf:dc:
a8:4b:1c:0d:ac:6d:99:05:e0:71:12:0f:11:c7:e1:
d1:fb:cf:f6:10:51:56:4c:2d:00:ee:41:bd:59:dd:
25:0d:51:92:04:29:24:4f:68:39:de:7d:d9:8c:d2:
05:4d:03:5d:4e:2d:1b:7f:9d:e6:e5:fa:ec:3f:d9:
7e:1b:ec:21:c6:bc:af:1a:5a:0c:4a:19:b7:fc:c1:
dd:f3:9d:88:8e:c9:1a:14:de:70:40:9e:e5:69:72:
e4:1f:7c:21:75:57:81:10:81:88:a7:d9:38:75:fa:
78:3a:ca:4b:bc:00:43:60:00:1a:13:62:28:37:df:
67:b2:5f:27:1d:aa:c5:b8:6f:3c:b7:69:a9:a5:11:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:32:1B:D9:E4:5A:DE:03:C3:B0:2A:B3:BD:04:7C:4D:A1:1B:4B
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a1:ee:2a:15:e6:b3:82:a9:43:50:a9:2d:32:5c:36:73:57:
98:0d:62:20:28:bf:b5:f1:7d:c6:a9:62:63:e0:56:c8:69:8c:
67:d8:65:ec:3d:c0:02:4d:fc:79:08:26:8e:5f:0f:cc:b7:d1:
69:ab:07:db:46:61:4d:cf:81:bf:4d:f6:10:20:9b:7b:0d:63:
98:bd:14:f1:f0:74:2a:5e:57:8f:39:65:b7:8d:82:59:16:fb:
3c:be:6a:cf:08:d6:27:13:ed:8e:ff:2c:e9:6a:19:cb:1d:d1:
b8:68:dd:16:ac:83:93:c9:e1:e3:d2:0a:0c:6a:40:21:56:fd:
19:c5:be:4a:d9:ac:34:00:42:18:af:14:25:6d:74:a0:62:2d:
7b:84:8b:0a:d7:2e:89:47:da:33:f2:9b:68:96:57:54:0f:57:
01:38:9c:2e:de:32:11:b8:df:d5:b7:16:cf:74:12:ec:47:c6:
fa:60:31:49:75:b6:48:6f:68:eb:5c:75:12:05:75:9d:57:5a:
56:70:6b:b1:68:e1:92:9c:4c:e5:43:9c:a1:e5:db:4e:1e:ee:
78:f2:15:d7:c9:61:a0:78:2e:5b:e5:30:54:11:87:05:6d:1f:
a1:50:09:59:ee:98:d4:03:28:e2:8f:0d:19:e6:7c:3c:84:20:
c5:49:b2:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqrd2TsAbCFuLNYHr6JYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjUxMTA0MDcwMDI0WhcNMjUxMTA1MDcwMDI0WjAzMTEwLwYDVQQD
Eyg4ZTU4MzIxYmQ5ZTQ1YWRlMDNjM2IwMmFiM2JkMDQ3YzRkYTExYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNUMUSKR/ylC6n1kvYMhSM8MJ4w
yBWJIY/Xe9165LQNKuWc5UYQF/rQpWCn01hO+2Z7XGpOrCWwR9igQjKzmmBnR+Cn
zHYLRgil8/3aLT45LUsy5xlsiV/j0J7hcJZQyfsRxAg6JTMHV3T6KwvLCEtvCdUC
v9yoSxwNrG2ZBeBxEg8Rx+HR+8/2EFFWTC0A7kG9Wd0lDVGSBCkkT2g53n3ZjNIF
TQNdTi0bf53m5frsP9l+G+whxryvGloMShm3/MHd852IjskaFN5wQJ7laXLkH3wh
dVeBEIGIp9k4dfp4OspLvABDYAAaE2IoN99nsl8nHarFuG88t2mppRG0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5YMhvZ5FreA8OwKrO9BHxNoRtLMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6HuKhXm
s4KpQ1CpLTJcNnNXmA1iICi/tfF9xqliY+BWyGmMZ9hl7D3AAk38eQgmjl8PzLfR
aasH20ZhTc+Bv032ECCbew1jmL0U8fB0Kl5Xjzllt42CWRb7PL5qzwjWJxPtjv8s
6WoZyx3RuGjdFqyDk8nh49IKDGpAIVb9GcW+StmsNABCGK8UJW10oGIte4SLCtcu
iUfaM/KbaJZXVA9XATicLt4yEbjf1bcWz3QS7EfG+mAxSXW2SG9o61x1EgV1nVda
VnBrsWjhkpxM5UOcoeXbTh7uePIV18lhoHguW+UwVBGHBW0foVAJWe6Y1AMo4o8N
GeZ8PIQgxUmyAg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:03 2025 by rpki-client