Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File: bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier: 9ROxBobl1I4Ymbj2+ACt6eDGOAt8cQr6c4myQ6iCmAw=
Subject key identifier: 80:FC:18:85:C5:D8:DD:23:EC:1C:DC:66:EE:CD:FF:1A:5A:5D:17:28
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer: /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial: 019A7113190298E921F299DC3AAB7607C6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:08 +0000
Manifest this update: Tue 11 Nov 2025 04:01:08 +0000
Manifest next update: Wed 12 Nov 2025 04:01:08 +0000
Files and hashes: 1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: gEgikXSLkKjuerrjPUTPB/je7ww7WmQqlCGpzN9VWaA=)
4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:19:02:98:e9:21:f2:99:dc:3a:ab:76:07:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
Validity
Not Before: Nov 11 04:01:08 2025 GMT
Not After : Nov 12 04:01:08 2025 GMT
Subject: CN=80fc1885c5d8dd23ec1cdc66eecdff1a5a5d1728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:63:b0:fa:96:be:56:2a:a1:75:9d:71:12:
7c:64:2b:32:4b:fd:88:c9:21:47:cb:4d:0d:21:a9:
cd:89:04:b0:e0:80:0a:f1:9d:30:08:12:82:58:f7:
9d:0f:c3:8a:18:3d:73:fd:fd:99:a1:75:8e:7f:02:
91:7b:36:1a:52:59:6a:a7:fe:b8:77:c2:f6:c7:b9:
35:a7:32:87:47:9d:32:09:86:c3:33:35:4f:04:50:
81:76:3d:f6:ba:10:77:2f:6c:06:dd:42:4e:3d:0c:
c8:d3:f3:f8:6a:c9:65:8f:4c:1d:2b:3d:3c:f4:43:
9a:63:e5:25:8f:b1:90:38:93:ba:0e:98:2e:8b:15:
95:c4:bb:21:e8:68:30:1f:56:8a:0c:9d:66:ec:c8:
a9:22:6f:8a:82:32:c4:42:e0:9a:12:cd:ae:30:37:
8b:55:db:dd:c6:12:6a:c1:fa:15:e3:1d:b1:20:c5:
20:95:3b:1f:3a:e2:f8:a8:97:7d:ae:f5:7d:cd:12:
fc:44:f4:fd:05:95:cd:cb:3a:e9:67:44:4f:44:5d:
7b:a9:7f:70:17:9f:5f:29:e5:55:b9:16:0f:04:e2:
44:b5:55:24:1b:05:f8:42:eb:3a:e5:53:37:3f:83:
b4:18:be:a9:14:06:31:c3:8b:eb:bd:6b:71:87:74:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FC:18:85:C5:D8:DD:23:EC:1C:DC:66:EE:CD:FF:1A:5A:5D:17:28
X509v3 Authority Key Identifier:
keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6e:ed:b0:a4:71:47:ed:a2:fe:d4:e6:f5:b0:6e:c3:0c:66:
e9:99:db:b3:cc:6a:12:df:9b:88:19:09:0f:4f:42:0e:3d:0f:
ff:be:29:42:24:08:cd:ab:51:12:f0:8a:99:ce:7a:c9:ea:99:
e2:c0:c0:80:f2:a3:2f:c4:4f:17:26:b4:87:a1:8c:e3:27:53:
99:58:39:d9:2c:96:5d:99:3c:c1:d5:90:43:3a:8a:d7:1e:48:
aa:e4:a8:c6:67:31:77:3d:82:35:4d:7b:7f:ed:5d:8e:c3:94:
28:d7:72:fa:cd:df:96:8c:75:f7:1b:60:c9:2f:c8:5d:f1:dc:
a1:b5:80:5d:b8:e4:21:b3:c8:ac:bb:e5:57:de:d3:b8:45:40:
3b:7a:9a:c2:56:1d:30:e1:2f:5e:2c:ca:14:54:76:dd:13:f1:
7e:d0:64:f2:9f:ff:a6:b0:46:09:cb:52:af:3c:71:19:c1:07:
40:c9:f7:49:5b:bd:4e:6b:e0:39:f6:95:af:cf:83:c7:16:c6:
36:61:7a:21:1b:c7:80:c3:5f:0c:ba:8d:bb:d4:b6:13:5d:11:
c7:61:16:39:3c:d0:39:e5:a9:f2:48:65:e6:16:2e:49:44:d5:
7a:39:e3:f6:bc:02:00:b4:cd:a2:c7:66:60:c7:32:1a:8e:5d:
cc:84:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client