Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: KGe3Fw8VoYODa9pTZpF65hLyq4ubBIqvXvmFf4cyPlQ=
Subject key identifier: 62:EA:B4:E4:CC:FD:0A:DF:74:87:24:A9:8C:CE:CF:1A:78:85:10:C6
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019A3BA5269B59605689E9028BA469F36CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0D0B
Signing time: Fri 31 Oct 2025 19:01:10 +0000
Manifest this update: Fri 31 Oct 2025 19:01:10 +0000
Manifest next update: Sat 01 Nov 2025 19:01:10 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: wuWqJC2zd2xcXfDYn+WHpqmeINwy+4IIlVjS1p+ugX4=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:a5:26:9b:59:60:56:89:e9:02:8b:a4:69:f3:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Oct 31 19:01:10 2025 GMT
Not After : Nov 1 19:01:10 2025 GMT
Subject: CN=62eab4e4ccfd0adf748724a98ccecf1a788510c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9a:12:5e:5c:8e:53:c8:2c:5b:c1:0c:04:85:
99:91:49:19:11:02:0b:d8:b3:50:f4:b0:2f:5d:38:
b9:82:98:78:55:83:6f:6f:62:94:d1:17:f5:a9:96:
75:ca:0e:dd:0e:80:fa:3d:26:99:ee:3d:dd:0b:89:
af:c3:33:72:09:e1:90:76:53:b3:3f:0c:fd:e3:0b:
21:d8:41:68:1e:95:9c:74:73:9e:c6:8a:ae:01:14:
56:63:35:7f:63:0f:31:b0:c0:74:cf:03:91:28:f0:
ac:54:c0:c9:d0:37:5d:d6:1a:6e:3e:91:35:db:21:
32:18:65:56:a1:52:78:50:87:28:99:b4:32:f7:b5:
f1:f3:36:d5:4f:e0:75:54:cd:9e:c3:d5:bc:d9:fb:
84:33:83:cd:c7:a9:f3:32:f0:12:b2:f2:ea:54:10:
04:2f:b8:13:cf:d4:18:39:06:bb:41:f5:3f:63:d3:
7a:a3:35:b9:79:91:83:15:f9:5f:6d:10:27:3b:26:
22:75:06:55:e7:1f:20:98:19:68:46:ed:8f:3f:41:
6d:09:5c:00:00:68:7b:3f:b6:f0:ab:d9:e0:64:ad:
e6:aa:de:c3:5c:aa:55:5c:12:a3:3c:80:12:30:f8:
e5:80:0c:55:cf:ea:c9:07:7e:06:8a:70:a4:f7:20:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EA:B4:E4:CC:FD:0A:DF:74:87:24:A9:8C:CE:CF:1A:78:85:10:C6
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:81:28:a2:41:3d:56:8c:e0:50:31:7f:f2:42:a5:a9:e4:31:
98:e4:76:98:8b:f0:0e:76:6e:34:da:40:66:57:81:94:75:3f:
02:c2:e2:58:8a:5c:ea:cc:ca:6c:da:e2:e8:e5:e4:d1:41:dd:
34:1d:54:ad:11:9d:9c:48:68:d4:9a:ad:be:f2:86:ec:52:ff:
ad:63:40:6d:5c:2a:7b:0c:91:10:5f:fc:a9:bc:68:83:a6:cb:
ef:55:cf:d9:9a:fb:30:3d:d8:71:f0:9b:aa:ad:63:53:d2:4d:
ca:dd:72:33:fb:77:94:ed:69:fe:b0:e2:b6:7d:5b:05:82:79:
66:ce:4f:24:44:dc:d9:4e:c5:18:40:47:ac:f9:65:62:d2:6b:
79:61:ac:a3:7b:60:87:62:4c:e1:92:43:63:2d:c8:93:91:ae:
da:2e:eb:10:d3:41:ec:5d:6a:af:db:16:c8:46:b8:41:91:0a:
15:6a:09:af:a5:8d:0a:b9:4d:ad:b0:31:06:cc:50:89:c9:72:
ca:80:bd:47:73:c3:3a:7f:e6:45:be:ac:36:7a:ec:03:69:81:
17:71:34:df:65:2d:35:87:06:e2:18:05:45:45:48:e4:05:b5:
11:8a:4b:e2:54:33:a2:34:0d:24:83:12:08:fd:dc:9f:52:cc:
55:e0:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 03:14:49 2025 by rpki-client