Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: +pHvHqU+zWhwBJIeANkwqGUUKi7q+OeNolqwtKrl2UA=
Subject key identifier: 89:9C:41:A7:0F:25:63:B9:DE:C2:99:BD:D8:1A:AD:C9:5F:C7:75:F6
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 019A50077EE4B0C88DE549D6293D2C6E3D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 07FE
Signing time: Tue 04 Nov 2025 18:00:59 +0000
Manifest this update: Tue 04 Nov 2025 18:00:59 +0000
Manifest next update: Wed 05 Nov 2025 18:00:59 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: mYtLlsVzMXqrbxE3GXLHkNEdIIf8zUv4vj5ZQIh2iSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7e:e4:b0:c8:8d:e5:49:d6:29:3d:2c:6e:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Nov 4 18:00:59 2025 GMT
Not After : Nov 5 18:00:59 2025 GMT
Subject: CN=899c41a70f2563b9dec299bdd81aadc95fc775f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:08:62:0d:86:83:11:c4:fe:12:78:2c:05:
d4:ac:20:99:a6:af:e9:6b:24:bc:3c:af:e2:fe:7a:
c9:ca:be:9b:dc:65:dd:31:0a:85:e5:5f:03:e5:d8:
82:a0:f7:b6:74:18:36:d2:aa:a4:b0:e5:b1:3c:60:
f7:f4:85:80:82:15:ee:4a:db:29:d9:b7:4d:d7:ad:
7b:6d:fe:98:2c:ea:3a:42:ca:72:6e:02:de:92:67:
d7:60:d0:21:79:b4:2d:f7:50:f9:71:06:75:8c:d7:
cc:df:bc:28:7d:ea:87:c0:5b:84:d1:25:26:1f:c8:
08:8c:2d:2d:08:d6:52:af:36:da:72:41:62:05:60:
d8:35:57:22:8d:d6:89:12:cb:ed:b9:5b:7b:d0:9d:
3d:82:fb:30:b3:90:c3:a2:13:4d:c8:e9:d8:59:cc:
0c:d4:09:98:79:1b:12:87:eb:ee:e8:f7:aa:7a:b5:
7a:0c:8a:b0:e6:75:dd:d9:9a:15:f9:20:a7:75:66:
bf:8b:43:6f:25:bf:a5:b2:c2:4c:74:57:90:01:d2:
d7:2e:f3:80:d8:c2:10:17:1e:8b:30:da:b7:a3:fa:
7a:f8:67:91:ec:38:07:f3:f0:34:25:8a:30:91:a4:
b5:c7:4e:bc:d1:5a:f6:57:de:75:ae:5c:02:d9:50:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9C:41:A7:0F:25:63:B9:DE:C2:99:BD:D8:1A:AD:C9:5F:C7:75:F6
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:69:9b:01:bd:a8:1b:f3:da:b2:36:c8:86:ec:80:d7:74:
db:8c:72:ad:e2:1c:3a:de:05:a5:ab:1c:73:65:6a:a1:4a:75:
1b:e5:ac:4e:e7:fd:b9:a7:93:56:11:0a:4b:35:d6:b4:f3:6e:
01:b6:55:59:c3:48:17:e3:13:bf:e1:fd:a2:aa:38:ac:dd:80:
8a:c1:1b:13:6b:72:ce:ea:6a:00:6d:1c:37:fe:1e:80:e7:91:
df:66:01:9a:38:ce:5f:86:9d:76:ea:07:f7:d4:d5:39:f1:cf:
7b:12:23:6f:21:e5:f4:d8:9f:04:ed:22:a5:d0:75:1a:85:1f:
41:0a:5f:24:d3:a0:55:e1:97:e5:b7:53:7b:13:49:57:f2:90:
fa:b2:fb:f5:d0:60:e8:9a:07:d9:3b:02:4c:de:d0:a6:25:64:
3d:af:a2:e6:2b:a1:f6:94:94:5e:aa:dd:51:35:8e:f6:36:fb:
e3:65:8a:30:8d:33:87:68:9f:25:75:ab:e0:d8:ef:b0:87:5d:
6b:82:5e:34:f6:4e:22:f4:1a:18:b5:ef:bd:f7:2f:60:7d:8f:
26:77:40:e6:4a:df:42:2b:6e:e8:6f:39:17:56:14:aa:9d:09:
cf:d9:ed:49:f6:e6:95:53:dd:95:97:cc:6a:05:a1:18:f9:5b:
9e:89:67:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:40:58 2025 by rpki-client