Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier: GJVM5NX3KUP1O8+1gHLvwVEWs747wN1c/vSApcA2sok=
Subject key identifier: 67:0D:32:B5:4E:24:34:45:5C:95:B7:CC:39:66:88:27:68:F6:83:53
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial: 019A4D7381942F91A337D7282538AA8E26F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: Yf5FkW+hOpaQqbdFzykBkIVgmX0kidhQYb1v44S+VtI=)
2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:81:94:2f:91:a3:37:d7:28:25:38:aa:8e:26:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=670d32b54e2434455c95b7cc3966882768f68353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:ab:72:f5:dd:3e:77:e1:6b:04:e0:87:6c:
56:51:ae:55:8c:e0:72:54:fd:7f:40:7e:f1:81:34:
6a:20:a6:2f:11:2f:77:fe:35:6a:19:a3:65:44:48:
4e:e1:e3:d5:a6:7a:7d:d9:a3:d3:92:3b:af:99:e9:
05:df:1f:d8:03:c2:f0:ec:46:cc:54:e6:fa:0b:90:
21:34:f6:02:3a:09:c1:54:77:52:fb:43:94:86:69:
25:66:79:4b:ae:1a:52:dc:fc:4a:3a:d5:92:f1:dd:
a8:7a:aa:d0:fb:f3:57:08:78:42:6f:6b:05:51:fa:
c6:75:51:50:8c:b8:aa:e6:34:e9:a5:04:e1:27:4d:
e2:2b:72:6d:eb:f0:ec:55:5b:e9:8f:50:6b:21:9b:
86:90:d3:04:18:10:c4:36:57:8a:b4:f4:bd:e0:42:
ed:d4:45:f1:24:22:48:e5:c6:fa:26:f3:9f:15:59:
97:e7:f7:69:2b:87:6a:8d:50:6e:8e:44:7f:e2:25:
0c:85:76:a3:92:d3:fd:0f:ec:e0:c0:3e:b1:5e:47:
9f:51:9d:92:cb:af:95:05:a4:24:b6:1e:99:a5:28:
51:e4:ef:1b:33:e3:ec:74:79:65:71:f7:c4:ac:ea:
6f:23:9f:38:cd:44:c3:b2:93:5d:34:ac:fe:da:d4:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:32:B5:4E:24:34:45:5C:95:B7:CC:39:66:88:27:68:F6:83:53
X509v3 Authority Key Identifier:
keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:02:70:e4:a2:5a:cd:2f:5a:c7:e3:c6:20:b9:f4:a8:84:
27:40:96:4e:55:10:c5:5f:a3:b9:32:25:46:47:4a:99:2c:d9:
e3:f2:34:3e:92:c1:84:10:84:5c:91:c5:a2:27:12:a3:a4:b3:
de:38:68:a4:15:72:fe:01:e1:e9:84:72:ca:77:22:49:2f:a5:
e7:0d:33:dd:1b:85:34:b5:d2:b3:31:62:af:cd:e5:e5:c0:58:
45:69:fe:f4:ff:32:c4:c9:5b:d1:f2:91:f5:f6:1c:e5:64:d6:
3f:98:71:8c:5a:a9:1c:e1:25:9a:37:1e:82:da:de:3f:ec:48:
ed:7c:55:b3:40:8d:f9:e5:9b:ef:a0:ea:d8:4e:32:67:33:6a:
f9:b1:52:5d:71:58:e4:59:53:4a:1f:e9:9a:2c:cb:f1:8b:05:
8a:e2:92:55:df:94:47:7b:2d:0c:5a:58:6c:c9:53:28:49:be:
a1:1b:95:b6:3e:3a:4d:d1:12:31:94:0b:26:96:32:d6:b3:a9:
ea:71:90:e2:83:d6:03:78:4e:7e:9b:3a:67:91:5f:16:f4:99:
cf:a3:99:e5:91:45:15:3a:05:2b:ea:d2:75:93:f6:08:ce:75:
cb:64:d4:ff:35:c9:8d:94:9a:1e:ea:91:1c:a5:6d:a8:56:8f:
b3:e1:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:00 2025 by rpki-client