Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File: v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier: lq8vX29TF2F4mN57Sv7FFPdl9O2qTOHCqeWkYtNIQ9g=
Subject key identifier: 71:A8:E1:16:0B:B2:89:A6:DE:E8:BB:ED:9F:BE:97:D3:1D:F2:F2:E7
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 0199350225268A57A5C8EF357E1982C61750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number: 0E2B
Signing time: Wed 10 Sep 2025 19:02:36 +0000
Manifest this update: Wed 10 Sep 2025 19:02:36 +0000
Manifest next update: Thu 11 Sep 2025 19:02:36 +0000
Files and hashes: 1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: YKqJXadksKWofMRzuwWJ/j70QZMhS7B6CZczD/1FWn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:25:26:8a:57:a5:c8:ef:35:7e:19:82:c6:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Sep 10 19:02:36 2025 GMT
Not After : Sep 11 19:02:36 2025 GMT
Subject: CN=71a8e1160bb289a6dee8bbed9fbe97d31df2f2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:72:29:ce:82:41:b7:bf:39:54:5c:7e:29:
c0:c8:62:2b:4a:e8:ce:d2:cd:07:b7:8f:e6:33:f2:
28:39:2e:10:85:06:38:70:02:8d:b0:04:27:f3:27:
64:83:ab:6d:7b:a3:48:7f:97:ee:2e:65:9a:c0:cf:
4f:d5:24:1a:a3:a3:7d:37:5e:cb:3f:eb:f8:b3:57:
4c:81:91:5c:d3:39:23:b8:8f:9d:1a:1c:26:f1:62:
37:7b:2b:97:d4:47:a7:31:44:47:ab:62:e5:5f:79:
b1:75:70:d1:d2:1f:45:ae:bb:34:41:56:b3:6e:61:
a4:d4:ef:c2:64:97:de:1d:a5:7d:6e:a2:7f:6e:ed:
e9:4a:ff:6a:7f:36:c9:90:47:28:00:ab:65:31:47:
5c:8f:d8:eb:47:2b:56:47:6b:5f:ab:db:79:54:ac:
d7:db:4b:e5:0f:ed:48:61:2d:b9:82:14:48:a3:1f:
12:19:c2:fe:d8:10:f6:f9:b1:cc:9c:51:ba:39:7d:
19:80:02:df:b9:98:db:57:16:8d:ba:76:7b:31:cf:
6c:be:cb:1d:fe:c8:4e:e7:bc:1e:ab:0d:b5:bf:b6:
a4:22:2b:63:19:47:89:19:2e:67:07:6c:02:4b:dc:
53:51:62:31:47:15:55:59:b3:1e:d5:90:b9:46:1f:
ba:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A8:E1:16:0B:B2:89:A6:DE:E8:BB:ED:9F:BE:97:D3:1D:F2:F2:E7
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:56:7d:ee:1b:25:f6:73:0b:21:74:ca:01:23:51:83:c9:6b:
ef:61:cc:0a:98:d7:7b:18:ab:dd:5d:f7:8e:0d:8a:46:e5:0c:
95:71:2d:a2:dc:bf:80:d0:8c:1c:eb:68:ef:d5:f6:bd:5a:55:
b4:7c:25:1e:bd:38:1f:7e:a0:2e:db:d4:8d:b4:2a:2f:63:60:
ce:ca:47:2e:bb:4a:56:b2:eb:70:7b:17:e7:3c:de:51:8e:ef:
ac:30:8b:96:b5:99:6d:eb:00:f9:c8:5f:ba:3e:79:89:b2:f0:
67:bd:c6:cb:cd:86:85:68:f5:2e:5f:86:fe:28:34:86:f6:28:
9a:8a:c3:ac:28:ff:83:ab:ac:19:21:20:0b:c0:27:dd:38:ff:
0c:03:93:57:3f:62:f6:61:56:b7:db:35:f3:b2:0d:59:bd:0c:
df:5e:9c:88:bb:9c:0d:b7:29:8a:0a:e4:14:6a:90:69:27:78:
cf:04:77:c4:32:74:d3:32:27:6f:b4:f3:5b:7d:cf:80:e1:99:
14:12:78:c4:f0:06:89:b8:0e:fd:d8:22:05:a3:95:1b:44:1a:
e6:f4:47:00:1e:1d:33:f5:89:1c:1e:22:e7:f3:ab:36:cf:76:
3e:bf:cb:5b:1c:97:9d:57:ba:47:80:44:c6:04:cb:59:aa:2e:
27:62:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:07:06 2025 by rpki-client