Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: SvuBJlmh0cFU31AJFhVwL6KdARqb0dpvcsDuX09aw9w=
Subject key identifier: F3:C2:2D:38:FF:28:B7:31:2D:55:E7:1C:79:90:96:50:CF:DA:CE:11
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 019A72936E1E3C48636A100127DCD7B8EE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: 02EA
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: Oa5/onlSWQoRjEseOFr09SSHAMOHl21VdTZucRKvWew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6e:1e:3c:48:63:6a:10:01:27:dc:d7:b8:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=f3c22d38ff28b7312d55e71c79909650cfdace11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:2c:22:a6:81:ca:10:69:b9:7d:04:67:f8:
52:62:23:64:4c:31:89:4f:27:12:de:23:7b:fe:ad:
17:0a:7b:fd:65:41:ff:c2:54:90:ac:26:97:a5:bc:
40:79:ae:57:ca:30:23:ba:a6:39:32:24:e3:c8:22:
26:34:72:9f:81:9c:8f:f0:09:24:f1:19:76:2c:26:
db:5b:ed:e1:93:d3:d7:a6:98:2b:7a:c6:c2:d0:b5:
54:ca:88:6c:79:f7:ae:33:96:f9:37:5d:df:fd:bc:
cb:2a:2a:4a:ee:bd:c5:34:71:39:db:3c:3a:35:52:
76:24:d0:2a:c8:53:1e:9d:a7:02:fc:df:94:ea:31:
14:9a:46:97:c1:a6:65:f0:6c:06:9a:d5:8e:59:1f:
40:d1:29:2a:d2:36:b2:af:c7:06:8b:b0:b2:90:f0:
b1:76:15:e3:33:4a:c0:45:57:59:9c:81:83:20:c9:
45:b4:d8:cb:41:51:8d:b2:e6:09:7c:1c:91:36:4c:
21:44:ab:be:27:37:69:c1:a5:f0:32:08:0d:92:e7:
72:98:6b:32:bd:a8:26:e2:ba:1f:28:b7:57:20:05:
6b:3d:1b:30:e4:64:04:e1:70:52:af:4c:69:26:f8:
9e:ea:64:80:46:9c:c3:17:f2:b2:ce:52:e9:79:a4:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:2D:38:FF:28:B7:31:2D:55:E7:1C:79:90:96:50:CF:DA:CE:11
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:91:f1:51:ac:3f:db:5e:54:c7:f6:c5:c7:06:cc:8d:c8:
02:11:17:b8:42:4d:9d:3f:04:62:bb:d7:19:d2:e0:68:03:f1:
8b:60:9e:55:09:2f:a9:2d:65:02:a8:fb:86:11:aa:d2:72:1e:
78:88:5e:cf:15:1a:5a:89:22:7a:d0:a6:10:9f:77:cd:03:a7:
70:8d:bf:55:fc:75:d9:55:bd:63:00:70:c1:dc:c1:65:9d:f8:
ac:ef:6c:66:9f:34:f8:eb:e3:89:ac:af:fe:36:1b:17:9f:70:
0d:fb:e2:0d:61:f9:58:11:f2:67:a2:f7:42:1d:8e:85:21:0f:
b9:d4:41:32:85:b5:93:0f:83:0e:13:22:da:c1:44:f3:f3:81:
fa:55:fa:65:9b:5f:8f:e7:56:38:d5:25:18:8d:ad:cb:15:06:
8f:48:65:73:72:8d:cc:cf:e8:61:45:13:87:13:48:84:60:af:
7c:ec:03:cc:78:9f:04:73:b8:9c:44:b0:c3:20:4c:78:46:1b:
b2:5a:2f:67:38:d6:e3:83:3b:cc:19:52:66:9b:01:01:40:36:
77:2e:2f:3c:4e:f9:01:88:fd:2d:16:87:25:28:14:75:f5:e9:
7d:7a:c4:44:39:71:c4:fd:d8:be:09:d4:d3:eb:40:98:65:70:
cf:d3:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client