Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: s+BUABiWpx13+hZYTccHmYd7RObt3IGlocVIBRu3ttU=
Subject key identifier: 5E:E1:4A:20:E4:EE:7A:D5:C9:E0:31:67:FD:9C:C4:BA:37:48:AA:FE
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 019A5119F8DF6F334675C95CB64E13E62304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 23:00:47 +0000
Manifest this update: Tue 04 Nov 2025 23:00:47 +0000
Manifest next update: Wed 05 Nov 2025 23:00:47 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: b1bGhLBJIaOAV9Ca0wqAjn26bo2Uk8DBAF+lzZtKwJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:f8:df:6f:33:46:75:c9:5c:b6:4e:13:e6:23:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Nov 4 23:00:47 2025 GMT
Not After : Nov 5 23:00:47 2025 GMT
Subject: CN=5ee14a20e4ee7ad5c9e03167fd9cc4ba3748aafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:95:59:44:bb:44:48:00:39:34:d1:db:62:
45:44:4a:70:0c:fa:de:2b:84:57:af:2a:8a:d5:78:
56:fa:40:e3:85:71:5f:8b:18:a7:a3:79:e8:73:1e:
c4:ef:80:1b:88:40:30:56:58:44:2b:0f:2a:03:87:
7d:67:b1:8b:85:0b:36:90:15:30:a6:64:ab:50:5a:
79:20:2a:f5:e5:40:45:b9:7e:c0:97:e4:e4:37:f1:
1d:f2:f2:7d:de:61:e0:86:d4:49:e9:66:8c:f6:f1:
a7:3d:3a:7e:96:e2:34:ce:e6:e8:27:ed:cc:0e:8c:
bc:b3:66:0f:58:c0:94:57:09:2b:ec:f6:f2:69:8d:
d4:fd:84:a9:e9:8f:2a:d8:aa:04:8d:52:7f:ac:4d:
20:13:8c:23:fe:b7:a7:9f:f5:cd:d9:c1:f0:3e:d5:
24:c8:38:42:1b:4e:ec:5b:47:7a:72:c2:99:19:d6:
e3:40:61:75:98:b4:19:c3:9d:c1:9b:39:d2:2e:9c:
9f:c2:ee:09:b8:b3:fc:8c:7d:b4:e3:5b:37:ea:3d:
3d:5c:59:d7:6b:bb:4f:b2:d8:06:06:1f:31:9c:32:
2f:97:49:23:4f:76:12:d4:bd:3a:02:a5:16:24:05:
77:62:d8:81:b5:ae:a9:a8:88:14:1b:87:c9:6d:f8:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E1:4A:20:E4:EE:7A:D5:C9:E0:31:67:FD:9C:C4:BA:37:48:AA:FE
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:6c:25:f5:28:7e:52:dd:d0:e2:36:9e:c9:01:3f:ac:56:
c3:5c:79:60:68:c3:29:4d:78:30:c1:9f:6e:17:e3:47:b0:71:
50:88:76:bc:58:6d:c8:5f:e5:d9:c2:57:bf:89:87:76:4b:dd:
7d:f9:8b:e5:63:ec:fb:29:bf:e9:af:ce:68:10:17:83:85:09:
9b:fc:1f:d4:52:46:42:05:fb:c3:d4:e5:98:01:8b:29:3d:ef:
7b:be:3e:85:0f:0c:f6:fb:a8:72:d2:11:5c:f0:3b:0c:0c:69:
9b:69:ea:bc:8b:ce:b7:14:a1:ab:fa:cc:d6:42:85:a2:1f:18:
a7:71:52:a9:f5:75:36:f6:f0:b7:42:9c:12:2a:4a:c4:65:3b:
84:95:58:bf:92:0a:c6:63:3d:00:e3:d9:88:c8:91:fb:86:79:
8e:a7:b4:b1:ae:36:f6:64:fa:1d:7f:9a:e1:fa:19:a2:65:bb:
75:ac:64:fe:b2:61:dc:77:ae:29:21:90:7e:b6:8a:0c:a8:35:
ba:a2:3b:73:a6:3b:f4:f8:9f:4f:53:b3:a4:61:c2:6f:1a:01:
1f:ab:c2:68:69:ff:ac:96:3d:b0:11:1c:49:1e:0c:c5:bb:66:
cf:ae:38:ce:cf:54:56:1e:07:31:01:03:4e:05:4a:17:9d:c8:
c6:54:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:36:58 2025 by rpki-client