Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: lIBnZ9zsBPNOSNbzJd766+IO+WTxLW8mPQeYgR6p16o=
Subject key identifier: 17:B6:E1:FB:BF:AC:8F:E8:B8:88:2F:6E:4C:3D:67:A8:49:13:A5:EE
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019A4FD0860766961D7CEA7155906DCAAF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 1459
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: vBKfnIqx3o9r/CuiDkMojQEzapwYhiRh68UVJZs0qMQ=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:86:07:66:96:1d:7c:ea:71:55:90:6d:ca:af:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=17b6e1fbbfac8fe8b8882f6e4c3d67a84913a5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:b9:95:1b:02:a0:df:36:ca:f1:6d:56:9c:
dc:85:0b:7a:06:b4:1e:76:36:52:22:be:7c:f5:36:
8e:28:0a:e8:ba:1a:d5:99:f1:b3:75:56:10:bd:b1:
05:0b:cd:7f:74:c5:02:c7:6c:ce:8e:4f:c6:ca:53:
a5:42:8c:2d:07:f3:27:b2:2c:0d:3e:2f:3a:a1:ec:
4e:4a:dd:4a:84:0f:76:81:5f:d4:6f:29:79:3d:ca:
92:34:d1:87:38:c5:e4:54:ba:a9:6f:e2:ab:5a:3d:
54:ed:a2:6c:b0:43:11:b8:13:6d:26:17:ce:b9:b5:
07:0e:8b:78:fc:43:3e:a9:58:3c:63:14:bb:91:e8:
9a:4d:52:af:51:01:cc:5c:de:31:55:74:83:c4:cc:
38:85:6a:01:cd:91:bb:9a:75:f3:69:54:58:2f:31:
9d:16:16:c7:7f:91:83:7e:e8:be:82:76:fb:9c:a6:
28:a0:59:8e:03:12:6d:34:98:30:9d:f2:35:5b:9a:
7d:2d:81:84:3d:d9:b5:77:b5:92:37:c7:11:3f:e2:
22:56:c3:90:f8:c3:80:51:01:e1:16:ff:db:93:03:
8d:39:ef:8d:b0:82:b7:39:0b:af:31:6c:bb:b2:86:
99:89:f8:30:db:b1:6a:81:88:90:39:96:1c:e8:e9:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:E1:FB:BF:AC:8F:E8:B8:88:2F:6E:4C:3D:67:A8:49:13:A5:EE
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:be:c2:aa:da:51:fc:95:bb:70:35:7d:80:ff:55:50:74:37:
da:08:32:62:16:df:0f:9f:e3:2b:80:2a:8b:86:3b:33:10:39:
b4:86:cf:9a:29:bf:e8:4e:0d:e6:49:78:2d:1f:9a:da:f7:47:
3d:0e:91:ac:cc:a7:3a:6d:60:f8:3a:8d:0b:ab:7e:9c:10:6f:
c4:2c:95:77:7e:c0:73:09:5e:40:97:a2:9f:6d:9f:2b:04:5f:
19:38:11:a0:07:48:50:e1:03:20:98:f6:fa:90:31:1a:63:57:
f9:4c:dc:a8:bd:d7:ac:b6:44:fe:aa:70:2f:5b:08:62:3b:13:
61:7b:b3:16:95:3f:48:10:71:fc:a0:3d:28:68:b2:d6:a0:5f:
fb:a0:ec:ad:0b:5d:7e:08:52:2a:f6:51:9a:8e:c8:32:75:3a:
28:92:b3:42:03:ea:c2:83:0b:a6:80:da:8e:ec:cd:d6:30:9a:
6f:ce:2e:35:98:78:2c:f0:2f:73:ba:e9:97:2b:3b:ab:9c:3c:
97:4b:ce:09:e3:d2:c9:40:ec:ed:3d:16:a1:5e:8d:5f:fe:db:
f0:35:99:57:e8:8c:40:a7:c6:af:20:48:6c:9e:6e:75:26:10:
b2:b0:7a:52:e6:c8:31:6f:8a:cf:40:e3:43:6b:7b:ee:9a:6c:
f4:5b:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:44:01 2025 by rpki-client