Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: K3spWOy51+wXxDJLoyiVqPofWDAW+xstcrL+pAuFemE=
Subject key identifier: 08:AD:C9:A2:D9:AC:4E:C6:F8:80:4F:6A:D6:55:00:E0:CF:D6:DC:C6
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019A50E32FF8A7BC316F13CCD10F19D6A38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 08A5
Signing time: Tue 04 Nov 2025 22:00:57 +0000
Manifest this update: Tue 04 Nov 2025 22:00:57 +0000
Manifest next update: Wed 05 Nov 2025 22:00:57 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: RKmJqZfwIGCQ+5Fz1lFUU9wKF9bSivqnSUg0QazbmJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:2f:f8:a7:bc:31:6f:13:cc:d1:0f:19:d6:a3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Nov 4 22:00:57 2025 GMT
Not After : Nov 5 22:00:57 2025 GMT
Subject: CN=08adc9a2d9ac4ec6f8804f6ad65500e0cfd6dcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:b4:8c:0d:fe:09:d9:67:95:89:15:ff:54:
6a:5c:90:00:7e:0c:c6:64:9e:f8:b1:87:82:53:1c:
35:1d:43:d7:c0:b7:01:95:85:31:79:7e:21:23:69:
1d:25:b2:2e:44:03:c9:b9:29:c0:e6:51:65:65:8e:
bd:c5:57:3e:09:a4:5e:0b:cc:80:e3:52:85:29:be:
d6:32:12:8a:ab:6e:07:5c:47:c9:2a:50:5f:39:43:
85:de:b0:d4:5d:47:b1:f1:96:d3:7c:cc:49:c7:61:
31:7b:b0:a9:1b:65:08:86:87:e0:33:df:32:07:49:
51:96:c3:38:f8:0f:2c:57:e7:a1:5f:11:b7:3a:55:
5f:ad:90:d2:cd:74:3c:7e:5f:58:b1:76:ae:8f:92:
d4:71:46:bc:b1:64:fe:b4:31:eb:0a:13:ad:e2:12:
06:2e:a7:80:1c:fd:61:63:20:f3:13:52:8e:a4:df:
cd:2c:0e:d6:80:14:31:7d:dd:9d:fb:a2:a2:07:79:
75:76:0b:5b:98:a1:8e:a8:35:62:ec:aa:68:fa:24:
84:74:b1:a2:19:e5:bd:8f:4f:9d:d6:a7:ef:69:dd:
ea:db:b3:99:db:71:b5:81:6c:f5:d8:d4:0f:c7:94:
5f:6a:41:a4:76:26:a4:e9:04:4d:dc:9b:16:4e:45:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:C9:A2:D9:AC:4E:C6:F8:80:4F:6A:D6:55:00:E0:CF:D6:DC:C6
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1e:dd:77:dc:9c:44:ef:07:8b:3f:06:30:44:fe:b5:54:e3:
54:d3:9b:1c:d6:7d:0b:14:2a:7d:d5:8b:32:3b:66:a7:05:9a:
54:b4:4d:bf:5a:76:83:8c:f8:c4:0a:a0:36:8b:5e:ae:9d:ac:
2f:db:d1:c1:c8:47:d7:41:8e:78:bb:db:30:52:0c:b3:16:3e:
bf:4a:5b:a3:77:af:05:c0:75:34:05:63:f4:d9:3d:e5:af:52:
c5:79:b7:f6:0f:1e:d3:a4:4a:29:bd:d5:54:0b:7d:05:0a:c6:
1b:ab:0e:fa:5e:6e:1c:a4:c5:5d:65:93:72:55:0e:23:50:d0:
29:ae:65:c1:68:4a:f3:c4:6b:d3:52:0d:87:68:46:81:b2:94:
ad:c5:f4:24:8d:cc:f0:c4:82:40:c8:ef:42:0f:7c:ff:5a:2b:
19:b4:8d:ce:70:6a:3a:8b:1c:ea:56:0d:f6:e9:8c:08:1b:2b:
41:30:e6:ab:2e:ad:c5:23:b1:14:7c:5d:a5:c9:29:31:e7:44:
62:1b:e9:3c:c9:fa:77:16:e0:06:16:ea:15:88:68:28:c3:c9:
31:c9:32:da:9b:53:0e:26:2d:45:5e:18:0c:6d:b2:fa:4a:f5:
5e:ef:0a:dd:09:63:ee:cc:e7:b4:f7:d5:a7:d0:d8:e0:48:57:
42:3c:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:13 2025 by rpki-client