Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: M12yTurbnqe7in+j1jU3LscDiD9B+JogxgrkixTG5H0=
Subject key identifier: 17:5B:60:04:E9:54:31:0E:F5:14:19:28:DF:D0:CF:7B:D0:3B:AB:BD
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 019A72934AAE04FC684B1CBE83758119629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 0746
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: z5OCh+PBHIUdWi8aGIIQ37flmBwdxkf6zy8Q8/Krlfc=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4a:ae:04:fc:68:4b:1c:be:83:75:81:19:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=175b6004e954310ef5141928dfd0cf7bd03babbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:3f:6f:a3:0a:89:4f:cd:b7:4a:c8:ba:03:
ea:d3:b4:ee:77:9b:6c:f0:af:a1:c4:5f:3d:90:7e:
97:1d:f0:9d:54:70:d3:e8:80:97:3a:99:16:34:0f:
d5:63:0f:1b:2e:c9:1e:d1:13:93:78:f2:79:86:e7:
1c:8c:6b:5f:ff:4e:54:9c:b9:8d:e1:a9:3f:9e:40:
89:54:dd:e4:05:f1:e4:77:8e:58:85:5e:a7:cd:44:
f0:97:56:cf:f4:2d:fe:a7:78:96:79:a0:b8:59:98:
69:56:da:a3:39:bc:f6:f8:af:19:3a:8e:7d:9b:90:
11:1b:99:c3:22:2e:49:31:b5:80:66:b2:6b:57:fc:
89:93:5a:9e:fe:20:10:02:81:c6:81:f8:36:fe:de:
cb:8d:79:e2:e4:4a:8d:4f:fa:1c:20:f6:2e:44:28:
8f:11:f7:23:d7:d4:f4:01:a2:af:20:0f:3f:b6:f3:
d5:33:b6:4e:5f:12:97:e3:a9:88:32:9b:8e:fc:56:
3a:72:ad:42:ff:6b:29:a1:df:ae:3f:04:26:e9:cf:
63:67:52:aa:23:7e:32:1f:33:2c:5c:19:b5:07:06:
ae:db:43:56:28:5d:fb:4c:27:6b:3c:30:d7:3e:7f:
40:6b:f5:34:68:aa:f6:75:61:c1:c6:9a:6c:a2:49:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5B:60:04:E9:54:31:0E:F5:14:19:28:DF:D0:CF:7B:D0:3B:AB:BD
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:ba:53:17:95:13:25:d0:d9:57:f1:c1:73:dd:58:7f:c1:
70:f6:34:eb:2b:d3:76:4b:60:31:08:55:fc:e3:e2:96:dc:54:
27:01:87:f9:34:88:bf:4b:b8:f1:d9:40:33:20:4b:59:f5:af:
1e:83:f6:b0:80:6b:80:1f:3c:58:83:8e:df:00:b6:7b:0b:8b:
5b:3e:74:da:d2:45:3b:34:c9:0e:3c:2b:66:9d:41:49:7c:fb:
cf:73:78:f4:c3:ea:9a:72:6b:86:49:4f:42:ca:c0:0c:bc:83:
28:43:83:c1:67:99:9d:d2:59:f5:bd:ac:78:85:07:24:b0:70:
ec:b4:0a:24:a2:8d:af:53:c7:7a:8f:bd:6c:91:bf:71:76:74:
e4:fb:85:1c:6d:e5:08:52:95:f9:fe:ab:18:e1:16:43:1a:53:
e2:bf:c9:68:19:c5:04:bd:51:66:db:49:47:f0:83:52:c2:72:
da:7b:9e:e4:d8:87:32:1a:7d:57:73:03:2a:20:fc:d0:c7:89:
b1:a6:73:53:cb:a2:9e:58:2f:24:11:16:11:59:cb:79:52:48:
8d:4c:98:4c:36:e1:42:5b:0e:a1:8a:51:24:20:3a:e1:cb:f6:
cd:ca:b5:04:b2:0a:2a:f2:cb:42:07:83:59:c1:e9:f1:76:c9:
08:ff:6f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:20 2025 by rpki-client