Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: 2U1A7vXBxrASCJgref/VwCiYtOhF5CT+sCu6BjVnjRo=
Subject key identifier: 46:EC:68:ED:46:D1:B5:62:EA:13:01:12:73:8A:8F:EC:2C:B5:BC:05
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019A71134BFFB70CE74CC0BC5E415152DC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: HL82dN7a6FrgRxpcaL2dWMM45ZAibubyd/YqSEce8ow=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4b:ff:b7:0c:e7:4c:c0:bc:5e:41:51:52:dc:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=46ec68ed46d1b562ea130112738a8fec2cb5bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:0f:07:b5:37:f5:dc:d8:60:ac:6d:a6:22:
d3:45:63:69:f1:9d:de:f4:47:84:eb:71:b4:f5:75:
1f:bd:6f:85:05:26:98:98:34:f9:52:95:b1:40:7a:
29:56:57:86:3e:6b:c5:f0:95:3e:9a:85:a5:ea:4f:
36:d5:b8:f5:a3:85:61:52:18:ef:5a:08:60:61:50:
88:e2:9c:e2:f6:1f:ba:7e:34:cc:69:8a:82:79:ce:
48:4a:17:b8:cb:1c:fb:17:08:e0:d5:32:11:7c:0b:
f2:17:74:4a:fa:19:19:ee:8a:9a:b0:ba:40:08:9e:
0e:f8:4f:52:6f:c1:51:eb:de:c6:46:43:13:18:38:
39:fa:0e:d0:03:f9:6f:c6:b7:97:10:9e:f8:00:51:
24:88:89:15:63:9c:56:6f:37:71:ca:7e:64:28:e0:
32:df:5b:93:23:67:45:e4:56:47:8d:a8:12:26:07:
4f:0e:58:99:01:39:64:a6:f9:e0:71:2b:e6:e9:dd:
73:b1:bc:53:83:c0:0b:07:26:28:9b:5b:f2:0d:ac:
b7:0d:61:88:74:15:b4:84:34:d7:63:03:cb:0a:db:
8d:b9:f3:96:18:47:51:60:3d:54:72:82:4f:6d:c6:
b5:63:7c:46:43:70:d2:5c:57:1a:f6:71:42:63:7f:
81:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EC:68:ED:46:D1:B5:62:EA:13:01:12:73:8A:8F:EC:2C:B5:BC:05
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:eb:5f:aa:e5:36:02:ea:92:65:69:38:b7:2d:fc:ee:18:3c:
c8:a9:ae:22:a0:bb:e1:18:ac:bf:bb:a2:9f:dd:60:ea:ff:d1:
5d:8d:09:4e:93:11:47:f2:9d:72:5b:95:ea:91:84:84:ae:91:
6c:54:7a:e0:24:fe:e5:49:d4:6f:22:7f:45:82:69:61:30:d6:
8c:e3:21:52:94:c1:9a:62:84:ac:db:27:0e:6d:a4:fa:09:51:
4e:64:44:3e:2f:b5:80:28:65:4d:0e:d0:60:d0:f1:9c:93:7b:
cc:27:19:22:9f:d4:97:4e:1a:1e:c5:0a:ab:91:ae:b8:82:f4:
e3:76:68:9b:96:28:b3:bf:26:65:e2:c4:ca:af:d1:53:c1:5c:
da:28:13:df:36:6d:93:69:7f:09:09:2a:54:68:5b:98:03:09:
d4:d7:d5:d2:0d:72:b5:16:5a:3a:cd:e4:c2:2a:84:c6:13:91:
4d:73:a5:22:50:6b:cd:27:46:fd:6f:5d:76:b6:41:f7:4f:f2:
a7:30:0c:4c:36:c8:47:c7:b9:b3:b2:56:d6:4c:3c:b5:85:eb:
db:e2:00:41:34:7c:b5:d4:eb:b2:e2:f8:60:7f:b0:21:5c:4c:
33:81:e1:d5:4d:64:6a:62:06:13:95:77:16:d0:90:c8:c8:1b:
03:0f:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:53 2025 by rpki-client