Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: 73UnNXsZet4CUPpViWvTE3ebdh+Icic8HD3CdVlfF+I=
Subject key identifier: 72:36:11:32:64:66:46:FB:18:B3:B9:8E:21:37:3B:76:29:14:E2:79
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 019A71B7A84519A2A9746F55F610C8438EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 1686
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: NRKz5o49kBflO50RBv++4fyomP7qKCDJoq/v5O0JUdU=)
5: d3EPcUHwT-eSSFHDekbKgpmD0zI.roa (hash: 3ir0iA/sdHESvEm5pfGD8XuZyzc0Szw0kMT36A+NUSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a8:45:19:a2:a9:74:6f:55:f6:10:c8:43:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=72361132646646fb18b3b98e21373b762914e279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:67:9e:18:bc:9b:62:07:29:4a:3e:a2:76:
a1:fe:23:08:0c:19:11:60:2d:74:ee:8f:eb:bc:75:
d1:55:72:06:66:f6:04:cb:b2:d2:ed:91:2a:84:0f:
fb:ee:51:90:ab:98:2e:a1:95:35:4e:fd:67:ff:de:
42:81:8d:e8:75:09:f5:44:de:a8:39:52:5b:f0:95:
fb:06:27:d8:76:b0:b5:17:0f:ab:08:a1:51:31:92:
bf:10:d8:4d:cc:45:6c:6d:98:bd:e0:fd:16:8c:c6:
e0:62:90:66:bc:b7:e8:b3:b7:9e:5d:59:4e:3b:16:
13:73:96:38:c9:1a:98:ad:4f:ce:27:f9:bb:d9:63:
05:b8:81:2e:5c:bd:0c:c5:7b:26:cb:23:63:23:87:
ec:98:5b:d3:c8:95:78:76:c9:93:27:eb:11:6a:6b:
02:07:67:60:00:97:7c:a5:a0:a6:b6:96:6d:13:07:
08:e4:db:38:5a:55:f7:44:bd:72:80:01:22:33:65:
c9:ef:3a:ba:64:20:4d:8f:18:31:30:0d:e5:46:e7:
cd:d5:9e:87:aa:fc:2c:62:ee:b7:30:c7:cc:28:5e:
4b:d0:d9:4f:1a:53:eb:7f:b3:48:13:df:b5:32:c8:
aa:ba:fa:51:56:cd:6d:c6:20:a6:20:87:08:eb:ee:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:11:32:64:66:46:FB:18:B3:B9:8E:21:37:3B:76:29:14:E2:79
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1d:ee:58:17:a1:61:65:66:77:ad:07:ba:7b:18:a0:0c:fd:
84:b1:80:9f:ed:7c:3f:fe:4f:ae:ae:e9:e0:47:b2:67:ff:42:
0e:3d:ed:41:f0:99:91:e9:db:a0:94:ef:b1:1b:23:41:50:94:
4d:2c:b1:4a:c6:eb:c0:02:10:ae:cd:11:54:f4:1e:4c:6d:e0:
d3:1a:c7:4f:de:54:23:1f:35:90:0f:66:19:b7:68:00:10:ec:
52:68:9e:64:7d:81:b6:4b:47:a9:7c:97:16:24:1d:09:de:17:
8d:6f:65:c1:62:e5:30:d2:ec:3b:3a:43:dd:91:ed:76:81:b6:
e7:81:de:1a:46:6d:de:5c:83:bf:2a:a0:7c:1f:e2:a4:e3:fe:
02:e3:b3:4a:4b:29:37:71:4f:0f:67:98:39:5e:96:9d:0a:4c:
4c:3f:4a:e2:d3:ab:1d:46:d5:c3:af:fb:93:88:4e:b8:26:7e:
e3:92:50:84:8a:08:c4:7a:6e:9d:e0:8f:c1:91:dd:ce:3f:2a:
73:8c:05:3c:69:16:9c:c0:89:92:18:8e:d7:d2:79:29:d6:f5:
e7:21:90:ff:98:e3:28:ed:6f:34:53:da:1a:98:78:3a:83:b3:
85:aa:31:4d:8e:4c:a1:e2:36:df:02:43:a3:e6:3c:19:1f:49:
97:cd:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client