Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: Tf8xgfg/upB4ofVhFdF2SUpanNTCW3fsvy2pZYKWSJo=
Subject key identifier: 17:6C:38:D0:8E:EB:61:1D:1E:2E:22:C6:7E:19:B7:6E:A8:0F:FC:D1
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 019A50072122C81221A90E3C0D84CC8EC6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: oi/PY80d7SHKMVUn1LL6romUu/1pNzq1s6oZyAZshHs=)
3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:21:22:c8:12:21:a9:0e:3c:0d:84:cc:8e:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=176c38d08eeb611d1e2e22c67e19b76ea80ffcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:5f:2e:8e:c2:18:e9:d1:8a:cf:57:c5:84:
8f:be:4f:c4:4f:03:38:7a:8a:ea:58:a8:f4:7c:ce:
e7:86:fc:d6:9f:c0:16:35:64:b2:18:71:98:bd:d6:
6e:6c:80:85:af:6c:57:20:c1:2b:8a:f9:88:db:9f:
00:b0:71:3f:a6:12:fc:51:8e:77:cd:c1:fe:71:00:
09:6e:d0:ae:22:a1:f5:1b:a2:d6:ec:d4:55:2f:01:
84:a4:21:ce:47:2e:79:21:2b:69:88:76:c5:8c:9d:
5b:6b:c5:e6:fa:02:e2:a6:96:bb:7e:6e:19:82:65:
e0:c8:7a:2e:36:0b:96:0c:87:87:0c:f4:3f:ee:fc:
53:7a:23:48:78:71:4c:79:80:9d:85:77:39:aa:f9:
10:61:1a:d0:6d:fb:a6:39:5f:a1:f0:8e:02:42:67:
03:01:ac:34:17:df:9c:2e:e7:93:c4:e3:a5:22:e0:
bd:6e:a3:55:59:1a:09:59:bc:91:26:05:6c:f4:f9:
15:1e:cd:8a:6b:a2:cd:0e:c0:c6:f5:44:cd:44:28:
17:4d:85:7e:74:88:1e:15:0b:62:a7:7f:44:d2:61:
58:5d:93:77:e0:c2:ad:be:ab:b5:ac:ba:3e:fc:1b:
bd:af:a1:ff:83:30:f7:b8:b8:bf:75:46:c2:f1:84:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:38:D0:8E:EB:61:1D:1E:2E:22:C6:7E:19:B7:6E:A8:0F:FC:D1
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:e9:6f:17:6d:b4:14:ce:33:be:51:9b:a4:f8:04:01:63:
07:59:ca:c0:50:44:a4:44:1e:70:6d:56:b2:41:13:31:26:43:
1c:57:00:17:e7:85:0f:77:bc:7f:69:6d:d4:18:4c:26:52:8a:
9a:09:3d:12:d7:8a:4d:3d:0c:3c:de:15:14:62:ff:9d:fa:d6:
c1:f1:53:e6:e5:37:48:a0:26:c0:6d:dd:13:43:c1:1d:a2:a0:
8f:4a:7c:77:dc:cb:63:d8:14:d1:cb:f9:74:c4:a4:1a:46:73:
12:f7:91:05:a2:92:54:a6:b6:48:41:c1:ef:0d:bd:4d:9c:f5:
57:bc:e3:db:fa:21:59:2e:14:d1:3c:9f:52:72:3b:bc:9d:ca:
6c:d2:66:eb:29:8a:e8:2a:fb:3c:74:42:86:0c:e1:ef:fa:13:
d1:cf:d3:f5:c4:96:1a:33:7f:74:32:4c:5c:1c:48:e8:0f:7f:
10:77:d4:ed:f0:78:36:b2:d8:32:da:c2:92:dc:ce:ce:ce:32:
00:90:01:7c:de:fb:88:30:c6:32:64:aa:b8:4e:ef:d0:56:90:
80:49:1a:8c:9f:6a:d4:dd:38:6f:70:f2:21:d1:a3:ac:03:31:
b9:d9:70:64:a9:bd:28:81:14:ec:0f:cc:d2:31:69:d8:e3:43:
c8:eb:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:33 2025 by rpki-client