Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: INf/B8ATmtS5FDdp1ftczJTqk30U0wS/9HDzT6JwiNg=
Subject key identifier: 95:D1:C4:D5:66:FC:98:97:1B:93:75:44:C0:76:09:FC:97:D8:18:53
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019A4DE19C3231AB950BEB33FD2A02D4B71E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: zcu1VA0MqVjfXWE4TLT/Cn+lJUNYLkpj/BVoyBO0+MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9c:32:31:ab:95:0b:eb:33:fd:2a:02:d4:b7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=95d1c4d566fc98971b937544c07609fc97d81853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:8b:b6:b8:32:86:9c:6b:4c:3d:b1:bf:07:
b8:9d:07:a3:ce:85:2c:eb:7a:46:fb:d0:16:2c:b7:
87:8e:2d:41:9d:be:fd:80:99:a8:69:4f:2d:fa:f8:
1a:20:ad:a3:58:73:32:87:bb:11:7f:05:3f:52:b1:
2f:72:ca:a0:59:e1:7c:2b:82:d0:e1:a4:2f:67:ca:
4f:39:f3:47:e8:ad:78:cd:10:73:18:b9:fc:94:94:
d6:5f:1a:fd:ff:c5:04:ef:90:08:a6:de:40:93:22:
53:6f:c7:2d:80:9b:0f:b2:c1:a3:6d:55:c0:eb:5e:
6e:e3:ee:4d:16:55:92:45:66:28:3c:d2:32:0d:17:
d5:e5:63:2b:a9:a6:55:4d:ce:25:17:30:d9:5c:79:
3f:78:5b:bd:1b:64:76:21:5e:2e:64:57:b2:fc:47:
ff:57:76:6d:7a:fa:a8:0f:62:7a:53:e5:71:64:87:
70:1d:d8:14:30:31:35:72:cd:6a:d5:f7:81:09:51:
f5:55:bd:25:fe:22:fc:ad:43:7e:b1:1f:35:b9:d0:
a9:1c:92:dd:52:06:48:27:d3:3d:1c:e2:70:a3:10:
82:fa:32:79:0f:e5:d4:a5:dc:54:8b:d9:ae:d0:a2:
5c:10:cc:7f:c4:24:5b:0e:3c:a8:09:35:be:e8:69:
7d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:C4:D5:66:FC:98:97:1B:93:75:44:C0:76:09:FC:97:D8:18:53
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:63:6d:d8:57:e8:88:e8:54:26:ef:03:8f:a9:83:f4:2a:0f:
8d:06:6c:5a:fe:2a:1d:15:aa:f0:d7:37:68:19:c3:cf:1f:ef:
f9:8a:49:20:bf:f7:e9:32:2a:76:70:81:ee:83:bf:89:63:1b:
57:93:bd:53:9f:49:90:1f:80:50:b3:e9:01:e7:5d:a7:76:0e:
ee:55:e1:4e:c8:25:58:cf:fe:87:8b:ce:d5:b8:14:6e:3a:67:
aa:8d:50:83:d0:cd:a9:b4:e0:99:af:d2:f5:4a:75:c0:ff:74:
97:dd:1c:48:8e:f8:ef:dc:42:d2:e8:d4:2c:39:a0:cf:a6:33:
56:9b:68:0b:47:d2:49:c6:1e:88:a0:ae:40:5e:54:1e:b2:60:
ec:2e:1e:35:c8:d1:a0:9b:25:8e:cd:a4:fd:27:77:4b:24:9f:
65:c5:67:ad:31:47:c5:c8:df:4b:a8:20:d5:33:44:38:72:81:
76:e5:56:03:fe:4c:ec:95:87:64:a4:15:70:1b:c3:51:ba:d9:
43:06:e8:72:46:51:d6:59:19:96:f9:d2:4a:32:cd:2c:df:32:
74:fe:6d:65:57:93:b0:dc:f4:a7:5a:44:a7:c3:81:f9:f7:d6:
4a:ae:8d:8f:06:21:eb:88:d9:64:55:a6:a5:6f:3d:09:0d:fc:
6a:b5:c5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:26 2025 by rpki-client