Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
File: BmNp4nBctDPbBlirZm0ItnsVUdw.mft (raw, json)
Hash identifier: gatLTOqU9SceuB2igGUT/LMJoE3eOquFfBEdsuXPpk8=
Subject key identifier: C3:63:D5:56:7F:CB:F1:80:D2:40:DC:B4:9E:D7:14:63:39:5E:E6:79
Authority key identifier: 06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
Certificate issuer: /CN=066369e2705cb433db0658ab666d08b67b1551dc
Certificate serial: 019A29D4F6929D0DF14DB9B2B7CBB15648F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
Manifest number: 161F
Signing time: Tue 28 Oct 2025 08:00:13 +0000
Manifest this update: Tue 28 Oct 2025 08:00:13 +0000
Manifest next update: Wed 29 Oct 2025 08:00:13 +0000
Files and hashes: 1: BmNp4nBctDPbBlirZm0ItnsVUdw.crl (hash: i2MB6wc8WaOxPX5IOJrfuWisP1vxpabBO0PjbuWHxQM=)
2: jCf5g0MNk7dChvixSvofxX26UqQ.roa (hash: EtFQAu+QfH/I3yhnfzxyM188HrZPVxzTPSpuxFHhJDw=)
3: osJ9_DR-TYLXPhwmG2ma04NJTWc.roa (hash: J9O9DuXjiOjoHZT0sNnMyGnclsGi579GC3bqlBQWEYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:f6:92:9d:0d:f1:4d:b9:b2:b7:cb:b1:56:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=066369e2705cb433db0658ab666d08b67b1551dc
Validity
Not Before: Oct 28 08:00:13 2025 GMT
Not After : Oct 29 08:00:13 2025 GMT
Subject: CN=c363d5567fcbf180d240dcb49ed71463395ee679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:77:49:2d:9a:b1:be:ce:23:f0:94:db:03:
6c:33:83:dd:03:18:8c:35:b3:d8:d1:0a:67:70:55:
95:55:16:ab:24:d2:cd:ce:72:87:86:21:42:52:01:
5f:66:74:c9:05:83:7a:2d:a0:1d:a8:83:2e:f8:c9:
ac:ac:af:e2:81:33:45:12:62:13:df:d0:c0:57:f8:
70:13:61:13:62:61:e3:e3:91:26:c1:1b:db:3e:78:
fa:d8:c9:55:83:d4:7f:99:c0:e0:b3:a2:33:53:be:
71:c2:a8:69:8b:47:5f:19:4b:ec:cb:bd:fb:36:f3:
db:ee:9c:37:78:43:ca:a2:54:d6:f0:fb:03:6b:72:
ec:86:a3:ba:84:84:c3:13:d0:5a:ca:e2:aa:ea:17:
97:81:7b:82:32:51:1e:af:d1:09:6b:a1:83:1b:f1:
6b:d5:69:5f:1e:c9:f9:7f:a9:44:a5:12:bc:49:30:
3b:9b:db:97:a9:ed:13:90:02:68:57:fb:c6:9c:b1:
d0:b3:93:6c:5f:d8:9b:f2:58:e8:5e:e8:8f:c6:59:
9f:8a:d9:35:4d:d2:bb:a8:75:9a:78:fb:d7:63:e9:
5b:bc:68:75:0b:2f:1c:54:86:e3:10:4d:cb:95:08:
0d:86:16:50:d7:ec:69:7d:13:7f:7e:54:77:d7:b1:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:D5:56:7F:CB:F1:80:D2:40:DC:B4:9E:D7:14:63:39:5E:E6:79
X509v3 Authority Key Identifier:
keyid:06:63:69:E2:70:5C:B4:33:DB:06:58:AB:66:6D:08:B6:7B:15:51:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmNp4nBctDPbBlirZm0ItnsVUdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/64e49a-5fe1-45c2-8310-34a9e98a5f86/1/BmNp4nBctDPbBlirZm0ItnsVUdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:85:49:b7:b4:d3:43:3f:8b:58:2d:b0:b8:88:1a:f5:3c:31:
65:8d:af:0b:fe:33:da:25:78:51:6f:c5:a2:d1:68:22:44:be:
6c:da:11:39:67:a6:b9:1e:04:b7:14:50:65:ca:6e:e8:b8:de:
66:e3:d4:9a:99:0c:54:19:c7:34:42:6c:d4:46:59:f0:24:a9:
05:f1:be:0f:d3:e4:f6:61:c5:ad:6e:f1:39:68:56:cf:af:7b:
17:21:fe:42:a5:dd:59:64:92:6f:64:81:78:b4:93:43:9d:9d:
3d:23:40:2b:a0:24:be:a3:9c:d7:4d:ac:fd:dd:77:1c:25:f0:
68:a2:d0:2f:85:23:0d:c6:3a:10:26:db:51:2b:da:f3:10:fc:
1e:72:eb:fa:e6:dd:e9:69:50:3e:b9:7a:f8:8c:7c:21:85:41:
ce:7a:23:d8:8f:bd:5f:86:d3:e8:3d:16:ce:a4:34:d2:71:8c:
c0:b4:56:e9:65:6c:42:9f:93:58:70:c0:f6:32:70:ce:b7:52:
90:6b:72:ca:82:fa:f3:36:8e:63:9f:b0:e3:80:a1:d8:93:c5:
1c:a6:cd:e0:6c:1c:77:79:89:31:a8:e6:14:5f:c0:0d:6e:fa:
33:31:5a:e7:9d:c3:09:c8:82:fd:12:89:5f:11:71:84:1a:70:
7a:f3:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:50:14 2025 by rpki-client