Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: 1T2NL7SmNcchKdA/oq8HaJQbMDfLOiV5aS+nPUh9tEY=
Subject key identifier: 57:E5:7F:E5:E5:4A:40:AF:24:25:85:3B:01:34:8C:9E:BA:67:60:39
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 019A0E954B8B9C56584615F84ECC78692196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 16F2
Signing time: Thu 23 Oct 2025 01:00:56 +0000
Manifest this update: Thu 23 Oct 2025 01:00:56 +0000
Manifest next update: Fri 24 Oct 2025 01:00:56 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: X5kAKi3S/wqkR4Se5cji9B3raQahRvCDguyIRTKgZy4=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:95:4b:8b:9c:56:58:46:15:f8:4e:cc:78:69:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Oct 23 01:00:56 2025 GMT
Not After : Oct 24 01:00:56 2025 GMT
Subject: CN=57e57fe5e54a40af2425853b01348c9eba676039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:04:35:81:31:0e:fa:aa:3d:ed:9f:9f:72:
fc:9f:b9:24:07:4e:2a:82:df:92:45:6f:3e:80:5c:
e6:90:cf:30:ea:e9:17:49:af:a4:0e:5d:7d:d9:85:
72:ae:49:c3:4d:28:50:91:82:5f:2e:dc:e8:14:01:
ed:7e:cd:f6:12:80:65:9e:6f:a2:39:36:1e:a9:69:
7b:00:9e:89:48:40:f3:e7:a6:e7:01:d0:ec:85:92:
09:1f:32:7f:14:73:fb:90:55:6d:40:e9:34:bc:f2:
ac:ef:d2:92:06:5f:dd:6f:15:f1:6c:f4:af:f2:3b:
d6:d3:82:28:5f:c6:fe:bb:95:c8:22:fd:b9:42:26:
dd:38:48:bc:b5:47:91:c9:77:70:94:de:53:c9:62:
e6:45:0f:cd:bb:63:ff:4d:a0:1d:8e:25:f6:97:36:
4c:4d:1b:06:1f:10:20:18:61:68:0a:52:64:c0:e8:
66:dc:af:e5:08:7c:1d:44:76:3e:3c:6f:2f:99:49:
f9:93:95:65:66:33:56:bb:b7:9b:51:1f:26:6f:a8:
c6:25:d1:01:3b:e0:c4:e8:47:aa:e1:ce:d7:7b:65:
56:ab:39:02:f8:72:6f:cd:8f:3c:f3:6b:d7:a0:7e:
3e:7d:47:af:45:74:9b:1e:e2:8a:54:2a:52:46:ef:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:7F:E5:E5:4A:40:AF:24:25:85:3B:01:34:8C:9E:BA:67:60:39
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4b:86:da:e5:c6:2a:44:51:73:c2:7f:e4:4b:b8:e8:79:6b:
52:52:c2:5a:80:7a:9c:22:e4:7b:7c:b6:37:4b:80:94:cf:57:
da:7f:9a:be:7b:ef:7c:42:32:c7:3b:11:24:cd:ef:41:ec:9b:
bc:87:51:a2:a0:dc:07:36:c1:46:1c:80:5c:8d:37:f8:4b:4d:
6e:91:f9:90:1c:b3:b0:f1:cf:05:c6:7f:33:51:5b:56:f4:1e:
e0:4b:b5:30:b4:02:c5:a5:12:73:6a:0b:f9:58:62:72:6f:54:
70:74:d1:3a:c8:16:8a:28:9b:eb:25:ab:bd:fc:91:72:11:3a:
4b:fe:11:dd:d4:46:20:47:fd:36:a4:c3:ec:49:c8:5b:b1:59:
fc:9a:74:58:05:7a:5c:1f:5b:0d:04:29:8c:17:c9:32:c0:17:
8f:09:f8:89:fc:67:68:78:61:33:d6:48:98:84:c5:8a:26:72:
86:f3:96:d8:76:0b:33:f0:07:f3:74:35:82:7b:73:2b:79:ed:
cb:4e:48:0c:b8:4d:c1:5f:94:ab:5b:91:0b:42:01:93:63:f3:
da:25:1b:53:6a:8f:8c:98:70:0c:6f:e2:60:39:8e:dd:25:e6:
66:8f:3f:6d:dd:31:ea:8b:55:91:d3:ce:64:d5:e3:17:e2:f2:
8e:b3:0c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:49:42 2025 by rpki-client