Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: JR+bSpVCWMP4ddELXnMSs9bqDjnVUMy0fWoFL4/6Xqg=
Subject key identifier: 1B:1B:0A:CB:01:23:70:36:8A:9F:72:8D:67:EB:3C:D1:5D:A3:35:CF
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019A706E2068CF66D5F453748CA8D1CD0DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0C3A
Signing time: Tue 11 Nov 2025 01:00:56 +0000
Manifest this update: Tue 11 Nov 2025 01:00:56 +0000
Manifest next update: Wed 12 Nov 2025 01:00:56 +0000
Files and hashes: 1: 1R6uhc2wPnqKxnOesvRg3wWNwhk.roa (hash: Vk3vRGCge4uXoZ+eQOPQfiJoFgTM6J3DonWOQ6myT5g=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: ggijicmRazzWyUzpMDOYOYdXKgOQ/7bTYLdIyDVjnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:20:68:cf:66:d5:f4:53:74:8c:a8:d1:cd:0d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Nov 11 01:00:56 2025 GMT
Not After : Nov 12 01:00:56 2025 GMT
Subject: CN=1b1b0acb012370368a9f728d67eb3cd15da335cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:6f:e0:90:2a:08:de:5f:50:ca:6f:7e:b1:
f6:e4:d8:4e:89:43:40:55:09:d1:0f:62:4f:29:3f:
72:02:09:42:ca:6c:93:0a:bc:71:3c:20:63:0a:6e:
12:77:46:22:ac:3a:58:91:32:cd:0c:15:d3:3b:ff:
b9:ca:38:84:77:53:49:9f:ee:83:62:ca:e2:65:8d:
f5:99:ad:3d:8e:12:36:f8:9b:2f:f1:ff:67:9d:9c:
dc:f6:22:86:1d:e8:3a:3f:25:57:86:b0:d8:9f:c2:
ab:74:47:17:84:a0:77:29:e9:da:26:c8:99:5a:79:
e4:46:ea:9a:86:e2:16:8b:22:06:78:96:6f:fe:1c:
91:fe:53:e8:af:3f:0b:05:e8:c4:ea:fb:d7:70:d5:
f4:56:80:29:ad:58:43:bd:2a:45:1a:ce:e5:f7:7f:
d3:2c:05:25:04:1e:9d:6e:d8:15:ed:09:66:c1:bc:
1e:07:65:cd:39:a2:fb:ba:0c:ae:9e:e3:1e:89:bb:
a6:7c:0b:f0:c4:c6:5c:b6:f3:0e:58:b1:07:49:95:
5d:61:09:b8:59:30:dc:30:da:ef:7a:2e:63:99:84:
0e:8d:75:7f:af:58:8c:6d:f7:ec:22:45:38:95:18:
bc:63:50:6e:b0:38:f4:83:e6:b2:0b:67:ba:4f:77:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:0A:CB:01:23:70:36:8A:9F:72:8D:67:EB:3C:D1:5D:A3:35:CF
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d7:5a:c6:12:92:2d:44:76:2f:91:44:22:f3:d8:c5:d7:c8:
cc:ea:fa:95:56:68:f6:1b:bc:b8:03:98:0f:e6:66:da:07:e2:
a9:2e:b1:bb:19:45:c1:2f:2a:43:98:a8:f5:3d:dd:78:62:02:
e7:38:d7:61:f4:59:8c:8f:13:0a:0d:50:f1:da:73:32:77:8e:
47:7d:70:c4:94:3c:7b:82:15:21:7c:b9:38:a6:9b:90:d1:fa:
b0:3a:65:33:bc:da:68:b7:ce:86:91:f0:d3:e3:ef:b3:55:fc:
6c:58:6e:56:5e:02:d9:b1:d9:98:cf:af:c2:a4:7a:24:b2:9c:
ff:a5:98:f0:5d:8c:69:fd:16:a9:fe:46:c2:5b:24:a7:11:e5:
08:56:2c:4d:0c:62:c2:c1:84:16:31:0f:11:7c:e8:79:7a:96:
30:63:a5:a4:cf:8c:58:3d:0f:71:80:2f:86:4a:96:0b:0f:7c:
93:7d:d7:b8:83:88:17:b2:f3:bf:0c:a8:37:a5:b2:d7:8f:3c:
e5:20:80:6e:1b:31:a1:5c:75:8a:f8:6d:15:f0:a4:bc:f9:7a:
8d:0b:71:9a:32:91:c1:1e:d6:bf:33:ab:2f:94:20:3a:44:20:
ad:53:16:77:74:1d:8d:27:6c:a2:63:63:8e:f9:c8:04:77:aa:
b7:bc:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:22 2025 by rpki-client