Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: 9nVncpDOnGw7flUWKQobhX9hMeRMJ3pVvXUIlH0aOkw=
Subject key identifier: 97:E7:FC:42:6C:32:C4:15:48:CB:A4:BB:26:6C:84:A6:4E:26:FD:10
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019A240A3AC546785D1C8B8C55BF1D9F240B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 15F9
Signing time: Mon 27 Oct 2025 05:00:41 +0000
Manifest this update: Mon 27 Oct 2025 05:00:41 +0000
Manifest next update: Tue 28 Oct 2025 05:00:41 +0000
Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: ybWUBJbeZ4/vwPmGuZIJuM/12FxAuxkByvMvqkAHHBs=)
2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:3a:c5:46:78:5d:1c:8b:8c:55:bf:1d:9f:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Oct 27 05:00:41 2025 GMT
Not After : Oct 28 05:00:41 2025 GMT
Subject: CN=97e7fc426c32c41548cba4bb266c84a64e26fd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:96:b0:02:bc:08:ea:17:1c:71:75:25:0f:
e0:62:7d:30:64:cf:89:66:d7:08:af:89:bf:38:28:
51:5d:52:c1:75:fb:23:38:43:63:87:bd:cd:23:fe:
16:eb:cd:7c:33:36:17:9b:12:69:93:fe:dc:8c:0f:
92:ce:58:6c:c7:ab:fd:a9:4f:67:f5:6c:74:5b:ab:
7f:b7:ff:92:fe:b3:f8:4f:29:d7:be:89:c1:c3:03:
63:ae:70:2a:a9:21:9e:ae:b8:20:1e:ec:63:9d:ec:
b6:96:78:5f:b5:19:07:85:bb:5c:e4:16:ca:21:f8:
b7:74:50:42:78:51:36:b9:7f:78:11:c5:7d:8c:ef:
35:3f:7b:ae:92:a8:6c:89:84:4f:0b:89:28:7c:a8:
22:ad:84:f9:36:99:d1:87:fa:dc:02:30:80:2e:d7:
c4:58:7d:be:e4:50:a7:a1:58:da:d5:1b:8d:1c:13:
4e:30:ee:b8:70:52:8d:23:c6:8e:43:cd:da:96:47:
a1:84:49:0c:a5:7d:7e:df:61:4e:b2:d0:21:be:1b:
18:d8:e3:52:2a:e7:85:86:ad:98:78:8c:a9:94:6e:
e5:37:99:f5:ea:01:7f:17:19:5e:dc:16:2a:71:f3:
44:76:6d:e0:52:0d:2e:39:6b:1a:0a:74:bc:12:2e:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:FC:42:6C:32:C4:15:48:CB:A4:BB:26:6C:84:A6:4E:26:FD:10
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:6c:33:2f:2f:18:39:7b:93:87:5d:01:7a:a1:44:8a:84:f7:
8e:d1:4e:10:a8:f5:6f:67:4d:e6:83:89:a0:d8:54:e3:a6:ca:
bd:aa:c1:15:6d:1d:a4:63:2b:86:8c:ce:d3:29:21:ee:36:86:
61:14:78:ca:bd:41:5e:fa:85:66:ff:ab:5a:cb:6f:aa:79:11:
37:8e:50:4c:b5:c9:3b:f2:a3:45:60:92:5c:7e:d2:91:61:cb:
f3:a8:5b:ac:24:d3:61:44:43:14:c6:05:c1:10:9e:30:28:78:
fe:f2:b7:1e:26:37:15:a3:e5:56:35:63:dd:da:d1:96:ec:c6:
d8:e7:33:f0:24:0e:c8:b4:2e:04:b8:32:4c:85:b2:95:78:06:
02:eb:c9:c6:eb:21:c8:95:54:70:ca:a7:b9:a8:fe:10:a0:0c:
3a:3c:5c:73:99:31:f4:3c:96:e7:e7:dd:18:6b:44:fe:22:de:
cb:e8:31:41:88:40:e3:09:8f:c4:b6:ba:c2:22:da:a0:f8:f8:
8c:cd:d3:c8:09:32:d2:be:2d:d0:df:f4:d6:d9:ad:df:99:fb:
c2:aa:d5:08:3b:61:e8:ad:7e:ae:97:5b:12:a7:f8:18:7c:31:
3e:d3:39:b5:bd:f7:70:85:f1:57:88:be:04:ee:04:cf:2d:97:
9a:38:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:12:31 2025 by rpki-client