Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: wC5DO0MKS713cV0x7E4CcfR2WAQl4HmOQ77yNQ+QI4A=
Subject key identifier: A3:FC:AE:0E:62:09:9D:08:CD:AE:7F:E4:EF:1E:5D:B4:7C:DE:88:97
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019A24E5F0BBA94E53C8CD508A81EC6008AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0B2E
Signing time: Mon 27 Oct 2025 09:00:40 +0000
Manifest this update: Mon 27 Oct 2025 09:00:40 +0000
Manifest next update: Tue 28 Oct 2025 09:00:40 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: 5iVR61Yi6I1Wx2+M8mjjK4jKA3CjAcbybHkqQ3QFwOA=)
2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:f0:bb:a9:4e:53:c8:cd:50:8a:81:ec:60:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Oct 27 09:00:40 2025 GMT
Not After : Oct 28 09:00:40 2025 GMT
Subject: CN=a3fcae0e62099d08cdae7fe4ef1e5db47cde8897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:6f:63:3d:4e:a8:eb:82:d0:fc:51:9e:2e:
7a:10:6e:93:6d:ee:bb:db:c4:c3:f9:e4:b7:8e:f7:
75:d4:dc:45:45:c8:dd:cb:2c:3b:01:fa:31:42:44:
ab:f7:19:9f:f8:52:88:5e:b4:cb:b5:d9:6a:0c:71:
c0:d3:e6:5c:a7:07:8a:66:25:59:b9:2e:a1:da:19:
9d:6a:05:b5:d3:8f:ec:5c:4a:be:5f:33:9f:13:9a:
d0:3b:d1:34:3c:6f:ca:88:2e:72:4e:75:c8:1c:be:
ca:7e:e7:29:af:d8:1d:d9:f5:d8:f3:60:27:ad:20:
dc:66:c5:17:95:e7:6c:a5:b2:49:df:8f:89:19:a5:
7e:9c:db:5a:f6:ee:b8:07:c0:93:82:54:d0:dc:c1:
98:4f:f6:b2:8a:39:23:8f:40:4f:9e:13:3c:d3:7b:
13:8f:1f:31:dc:fd:d7:ec:39:c3:87:16:f0:5f:1d:
aa:14:db:e1:c2:be:27:1a:aa:7d:2a:f0:5f:75:c9:
13:ff:1d:34:b5:95:6f:54:cd:a7:02:a5:fb:d3:30:
1e:7c:2a:da:9e:8a:bb:52:47:c8:39:70:05:74:94:
75:7c:84:10:79:d0:75:14:2e:2f:fa:d5:cf:f0:d8:
3f:96:76:83:64:29:c4:8f:48:e6:27:b8:a7:dc:a3:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:AE:0E:62:09:9D:08:CD:AE:7F:E4:EF:1E:5D:B4:7C:DE:88:97
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:51:8b:79:3a:70:96:99:57:12:ab:72:df:43:84:26:81:
d4:22:14:f2:28:81:7a:5e:93:eb:f8:8e:70:88:76:af:a3:df:
bd:11:af:0b:5c:f5:4e:1e:54:af:66:91:5b:fb:0a:17:6d:d0:
98:de:cb:28:ae:44:86:9b:59:06:de:cc:91:de:cd:25:b1:15:
9b:6c:d0:34:00:ce:72:ce:0d:2d:e2:bc:e0:f7:f1:a9:3d:6f:
66:cc:82:9e:54:d5:b9:95:21:37:e3:0e:f2:60:ff:af:4b:f7:
15:e0:0a:1a:65:41:c4:61:c0:43:65:0b:d3:7a:e9:bb:5c:55:
64:f7:7b:6b:a1:40:43:50:8b:6a:2a:c4:2a:03:ea:53:3a:91:
da:2c:20:c3:9f:7e:f8:d1:7b:f1:6a:6f:a7:f9:b5:0c:41:35:
75:04:13:5b:ed:fb:af:3a:56:57:a8:01:73:07:64:ad:b8:22:
37:8c:ca:34:cd:b7:73:d7:17:60:de:28:74:24:7f:1d:09:25:
6a:75:d7:34:eb:48:e8:1a:b7:2a:8f:3a:4f:c2:cf:71:6c:f7:
bc:4a:8e:2d:1c:e3:50:64:53:5c:59:e6:67:e0:06:ba:2e:e9:
f0:bb:2d:a8:d9:88:0f:77:c1:ac:ce:0a:5f:e2:f1:b0:07:8e:
ae:1e:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:02:42 2025 by rpki-client