Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: FhllyN6bmRMwzC3jph4tXZ+C1G4AuU5iWOlarTbDB6s=
Subject key identifier: 60:FC:49:76:D8:95:95:0B:E6:D8:7E:D0:29:61:4C:CD:1E:17:42:CC
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 019A4EF4B41FE1144C05469EA73B572BADAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: lFUYWq5i+NGRSt9jJFFz4HXfbRCegHvh1AFEuyVaGWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b4:1f:e1:14:4c:05:46:9e:a7:3b:57:2b:ad:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=60fc4976d895950be6d87ed029614ccd1e1742cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:7f:ed:ee:39:50:00:fe:08:e5:65:5c:ba:
05:41:a4:33:6b:2c:e6:2d:48:9b:d2:71:74:bb:ad:
b7:54:9a:30:15:e0:b2:33:3f:7f:a7:4b:13:28:4f:
a8:43:8f:ff:58:3c:69:dc:6e:18:a4:5e:2e:db:a8:
82:db:c6:ab:33:0b:8b:bb:c5:70:9f:ed:2d:c1:6c:
3f:4a:7f:02:e7:ef:1a:87:c1:e1:d3:4b:a9:18:f5:
61:7d:78:94:45:24:9f:d6:1d:9d:ed:4e:7d:4d:b9:
c0:20:44:43:e6:b9:04:00:25:97:ee:86:ce:07:b5:
9d:c7:62:92:77:22:36:59:88:21:f4:cf:0c:8f:58:
00:2b:8f:98:8d:94:e3:c8:c2:e2:da:fd:c2:46:94:
ed:fa:b7:9a:c8:11:24:d8:b4:30:4c:7e:b8:f3:a6:
6a:6e:3b:18:a6:5a:e1:6f:15:43:f0:7f:7d:0d:97:
8c:bf:d3:5f:62:6a:96:85:db:60:04:f1:22:32:6a:
4f:e7:e4:c6:61:66:4a:33:46:88:0a:8f:d9:2c:be:
83:f9:16:7d:7f:53:36:0b:f0:b4:0a:28:37:45:52:
f8:da:56:b0:7a:b0:a4:78:3b:25:fc:99:62:39:c0:
7e:0b:13:7f:f1:92:71:99:83:9d:fb:95:de:fc:78:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FC:49:76:D8:95:95:0B:E6:D8:7E:D0:29:61:4C:CD:1E:17:42:CC
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:bb:a3:3d:8f:5f:1e:c6:27:63:5b:76:19:22:7f:2e:cf:df:
0b:7c:bb:f4:dd:b2:09:96:96:ff:cc:62:8b:9b:84:dd:ea:60:
15:9f:31:10:f4:c2:8a:b0:c4:53:d3:e1:25:c1:64:10:d8:ee:
fe:ed:36:14:e0:54:6e:fa:b5:65:a1:ba:f4:e9:ab:a6:8a:4b:
2d:84:3d:bb:30:63:ca:4d:70:03:e7:90:5e:62:20:b1:05:0c:
39:48:f6:ed:43:c2:60:c8:a2:b0:91:d7:c0:85:a1:10:64:89:
50:1c:df:34:5a:50:9b:24:70:5b:bb:e4:e4:47:30:f2:db:22:
68:eb:cb:e3:d0:38:23:f0:88:81:56:74:2c:c6:5e:0f:4d:6d:
bf:10:7d:a0:60:7d:e3:35:1d:d7:21:af:e8:42:e7:f5:ea:da:
e8:0a:3e:22:d4:a9:e2:ae:9a:53:77:73:f7:e5:5e:3a:bb:ce:
ad:94:e1:e7:e1:b5:c6:c1:80:23:02:66:d2:df:bc:57:1f:dd:
f9:53:19:a7:42:cc:93:ff:3e:27:66:fb:1b:22:ab:0a:c4:ef:
21:27:fd:1e:4e:47:f7:a8:a1:c7:84:99:6b:eb:b7:32:5f:6c:
8b:3f:00:8a:7f:28:2d:e7:5d:61:a5:52:85:93:3b:b3:73:f3:
b3:bf:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:06 2025 by rpki-client