Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft (raw, json)
Hash identifier: bTOaB/Zj9fBva4oiWic5re1xctOhoRDZPbJ0yFkXxIU=
Subject key identifier: 1B:E7:8E:F9:58:9E:A1:BA:C4:79:52:19:E0:71:A8:ED:C6:7E:B9:2C
Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Certificate serial: 019A7149F57DA69E9318D95018C82C42F830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
Manifest number: B6
Signing time: Tue 11 Nov 2025 05:01:03 +0000
Manifest this update: Tue 11 Nov 2025 05:01:03 +0000
Manifest next update: Wed 12 Nov 2025 05:01:03 +0000
Files and hashes: 1: H6SveOSdHkqZ9ueQGmlndrunnIo.roa (hash: ZjmMhBHkwqQ5K2xq1IB/uiZwUc1feHjVtHr/OyBPgVI=)
2: bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl (hash: +X5IoDltCS82T4un2quNV5o0C2ooWbP/VNN8Xu6Pq1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f5:7d:a6:9e:93:18:d9:50:18:c8:2c:42:f8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Validity
Not Before: Nov 11 05:01:03 2025 GMT
Not After : Nov 12 05:01:03 2025 GMT
Subject: CN=1be78ef9589ea1bac4795219e071a8edc67eb92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c9:7c:a7:b0:53:fa:17:47:1f:66:97:3b:ba:
1e:bf:19:0e:c8:df:bd:bb:e5:c5:65:29:c8:0c:a2:
68:bd:4b:34:76:93:5a:2a:6a:34:8b:f6:e8:a1:b5:
91:ed:fe:bd:3d:76:ef:72:ee:32:89:e0:ff:23:ac:
c8:3d:fb:ed:40:33:af:a3:89:4e:61:cd:c0:08:c9:
ab:1b:8e:55:89:d5:c7:09:a1:d5:c9:22:f8:c7:91:
6d:5e:48:52:f3:14:4d:ae:e1:3c:3e:83:e4:19:42:
e2:7e:e1:86:0e:0f:fc:a1:12:7c:56:c1:a7:ce:00:
3a:57:43:2c:89:58:f6:d9:fd:00:90:1b:f2:b4:c4:
4e:af:37:43:e7:7b:06:d2:9e:8e:86:9e:e9:c9:94:
b2:9d:9a:5f:01:e0:cc:93:1a:8b:51:01:09:46:d7:
5b:66:4f:59:90:5c:b8:f0:e0:5f:c6:72:b1:ae:92:
00:b6:e8:58:3f:fb:ef:0a:d9:23:de:57:f4:ed:a1:
ab:63:45:0a:f6:1d:f9:f0:e5:5c:2f:41:76:2e:a7:
fc:56:8d:63:22:49:80:59:df:9e:81:74:a2:32:0c:
1e:5b:d6:6c:69:fb:1e:2b:af:df:85:ff:21:84:30:
c3:d6:b1:25:b8:58:bc:59:56:69:f4:45:d7:9c:20:
07:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:8E:F9:58:9E:A1:BA:C4:79:52:19:E0:71:A8:ED:C6:7E:B9:2C
X509v3 Authority Key Identifier:
keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7e:af:0c:b8:3b:07:28:56:63:63:33:40:23:b6:4c:c9:f7:
19:0a:2b:9b:31:91:56:f7:1a:8f:72:58:88:1c:2a:b3:46:6c:
86:27:03:32:66:63:3e:64:a8:e2:8b:64:bd:13:e7:08:28:da:
e1:b2:5d:f2:b4:1b:c3:98:e4:db:bf:9b:62:66:81:e4:4b:99:
0f:b8:65:d1:3c:7c:0c:70:51:2f:a5:64:d4:e1:d6:5a:cc:97:
87:e5:cb:67:6b:4e:61:ac:78:a0:b6:fd:b2:ff:e3:ea:18:a6:
0c:2d:c7:a8:71:03:2e:e0:7e:f4:74:75:62:b8:ff:1a:75:70:
55:f9:45:be:b7:d1:85:30:9d:69:e3:73:7f:79:20:ff:0c:fd:
6b:da:38:7e:38:3e:45:a7:ea:2c:7e:20:2e:4c:06:bb:b1:c4:
c1:8b:38:e6:85:53:e1:be:07:50:89:5a:c0:6f:b9:c2:e0:d9:
96:bf:9f:91:14:46:89:f5:4f:21:ef:36:9c:4e:09:7e:a2:d8:
e3:1a:ec:58:c3:ad:a0:b9:91:a7:ff:e3:96:a6:ed:1d:ad:78:
e0:8e:2b:e8:3e:59:93:4e:fc:12:87:e5:0d:f0:a3:5e:07:bc:
57:40:38:3f:3b:f0:53:2d:67:ae:ab:a7:47:a8:b4:60:29:e0:
43:6c:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:15 2025 by rpki-client