Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File: bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier: AeUvPCV1bijTb9Nl4TpJ7i0JvtdVH8O4rOKRdqQ7uGE=
Subject key identifier: 6B:13:7E:CB:4A:DB:A6:2E:FA:34:3C:D2:19:45:C4:D0:31:A6:14:45
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial: 019A51877BDE3D6ECDEA8E5903BE96FBDDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:24 +0000
Manifest this update: Wed 05 Nov 2025 01:00:24 +0000
Manifest next update: Thu 06 Nov 2025 01:00:24 +0000
Files and hashes: 1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: /+zRPW4T/UNUdn9kEOzjmV0Z+BsYq4V8vAv/4yI4d0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7b:de:3d:6e:cd:ea:8e:59:03:be:96:fb:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Validity
Not Before: Nov 5 01:00:24 2025 GMT
Not After : Nov 6 01:00:24 2025 GMT
Subject: CN=6b137ecb4adba62efa343cd21945c4d031a61445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:54:af:6a:2b:2d:4f:3b:fd:3d:7c:41:0e:
27:3f:41:6e:8a:e3:0f:35:26:1f:61:d2:d7:20:7a:
3b:5a:e4:73:27:69:cc:05:53:b9:53:4f:dd:81:86:
6a:ed:78:f0:cb:15:a0:2f:13:00:7a:bf:63:3b:8c:
a9:74:f0:9d:ef:d7:4e:7b:6a:50:7b:ce:d1:a1:ca:
09:7a:2f:df:10:69:b3:64:2c:7a:6d:d4:d6:f2:ec:
f0:e1:3f:ae:a2:2d:4a:05:7b:26:eb:ee:9c:2c:2f:
db:d8:96:b0:90:e3:aa:26:9a:98:1b:e9:2b:08:29:
64:6c:52:08:ba:c5:79:ec:c1:9d:55:c3:54:4b:37:
14:3f:e0:83:e6:63:cb:af:24:02:fc:f7:ff:a0:06:
a2:d7:bf:69:1a:3d:17:2c:21:fa:54:7f:31:78:62:
2e:7c:81:91:aa:cd:8a:0f:77:b0:3e:f4:e5:84:79:
25:c1:bf:23:4a:0d:37:11:c0:75:a6:53:4c:18:ce:
b4:78:8e:b6:fe:f0:1e:88:fc:16:e6:83:58:36:0d:
58:14:68:5d:7b:eb:eb:d9:1d:3c:41:ae:39:3e:78:
a2:df:8a:87:c0:cd:6a:65:5c:9d:12:68:af:09:d0:
8c:8b:94:c1:66:e6:1d:59:0b:48:1c:21:9a:d4:5a:
44:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:7E:CB:4A:DB:A6:2E:FA:34:3C:D2:19:45:C4:D0:31:A6:14:45
X509v3 Authority Key Identifier:
keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:d7:32:7b:81:f1:da:ca:dc:b0:00:2b:7b:16:10:2a:2b:
44:48:52:6a:05:2c:2b:46:49:35:85:f7:66:1f:bc:cc:fa:dd:
16:6a:b9:fc:5f:93:dc:4d:ca:ca:0c:b5:00:c8:e6:ea:db:ef:
a7:69:ab:01:34:5d:16:0e:a1:e3:46:fb:3e:f3:5e:78:ff:7f:
23:4a:e7:fb:b5:79:60:cb:3a:c8:6d:a4:ce:18:08:e3:9e:b0:
b5:5d:55:82:cf:b7:f5:49:8f:c4:bb:bf:45:22:0a:54:07:f7:
2d:84:5f:76:92:fb:5b:48:17:36:7e:05:8a:b7:9c:7a:29:be:
8f:fe:0e:86:62:b2:73:19:6c:36:60:33:c5:92:a4:52:30:22:
0b:ea:8b:4d:8e:bc:b0:a8:0b:10:bd:03:74:62:ce:ee:fa:67:
10:b4:93:04:d7:7f:a3:fd:3e:0c:99:0f:b2:63:88:41:71:86:
71:c0:56:72:23:72:ab:5a:34:4d:b2:5d:37:d5:b2:7c:47:c9:
b8:e4:4e:c9:e2:0d:76:e5:81:5e:a7:f6:4f:9f:0d:3c:8a:94:
95:35:01:32:5b:ba:de:be:55:bd:4b:5d:e0:9c:8e:e6:ad:45:
a6:27:52:ea:aa:c5:83:3d:03:1f:b6:a0:95:7e:0a:2d:b1:dc:
7f:0c:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:06 2025 by rpki-client