Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: 46Ho2W1BPYCgQ4oq0lUUVB+HGIdY/oN77STFLJvBMUc=
Subject key identifier: 0A:DB:B3:37:46:A5:6D:6B:FD:CE:9F:DE:37:63:81:2A:FC:72:A4:AC
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 019A35349EAC0127101EA147D2BD1FCBF246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 29
Signing time: Thu 30 Oct 2025 13:00:32 +0000
Manifest this update: Thu 30 Oct 2025 13:00:32 +0000
Manifest next update: Fri 31 Oct 2025 13:00:32 +0000
Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=)
2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: 2975I624jv2khgiXYPJk8jaAZcjGnyH3pZSImLjxOkg=)
3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:34:9e:ac:01:27:10:1e:a1:47:d2:bd:1f:cb:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Oct 30 13:00:32 2025 GMT
Not After : Oct 31 13:00:32 2025 GMT
Subject: CN=0adbb33746a56d6bfdce9fde3763812afc72a4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:59:2e:d7:fb:f3:b5:bb:6a:b7:13:50:d3:
1c:87:86:bb:49:5d:56:e5:3a:c4:24:7e:fe:41:c1:
87:a1:8c:69:db:4a:2a:f9:b0:7c:34:e0:87:72:3b:
f9:72:53:54:0d:2d:07:8e:22:8f:df:bf:2f:37:7e:
59:f8:a8:6d:17:51:e9:92:0e:cf:87:da:51:82:29:
28:30:fb:e2:10:8a:70:5a:dc:45:d2:95:48:75:c6:
0a:4f:df:a4:2c:ff:ee:98:8c:f1:1e:26:2e:2f:60:
4a:88:42:f8:9c:5c:9c:b0:be:c6:64:25:aa:6d:18:
87:1e:be:b1:79:7d:2e:76:35:e9:38:a9:ea:5d:42:
f3:50:11:11:df:fc:b4:d2:4b:fd:92:a8:1c:9b:3e:
c5:52:30:46:ab:dd:8d:9d:de:42:9f:12:e5:ba:94:
a0:3f:9e:2f:e4:1e:01:f8:5f:eb:1f:a7:5d:76:50:
a9:60:e0:81:22:db:ad:b5:e2:dd:38:34:a8:b6:b1:
c5:29:cd:de:fd:ad:4f:9e:5e:3a:49:0a:4f:f8:fc:
f7:cf:8b:b3:87:d3:10:33:1b:68:38:1c:a0:4a:36:
bd:83:ad:33:39:17:d8:b7:c5:00:c4:b1:6d:4a:d2:
b3:fa:87:97:4c:2d:cf:c0:43:0c:b5:72:30:42:3d:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:B3:37:46:A5:6D:6B:FD:CE:9F:DE:37:63:81:2A:FC:72:A4:AC
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:01:37:6d:c3:24:c6:2a:ab:94:9f:9a:89:6f:5d:5f:14:a7:
45:4e:9f:bc:ea:aa:99:de:63:16:a5:cb:17:52:01:a9:fb:0c:
5f:43:b8:1c:7f:1f:fc:53:63:40:b5:12:4f:18:0e:45:26:6e:
cb:6f:d5:77:58:45:0b:51:c4:7c:56:d9:db:e6:ff:aa:88:af:
a6:06:fa:dd:f6:3d:fe:43:4e:7d:3e:4a:e4:c3:10:8e:a3:06:
19:b9:b4:03:12:de:56:ac:f5:ed:86:8d:5d:a5:85:c6:5b:63:
bf:fa:1d:79:f7:42:7b:d4:b3:45:2b:e8:37:b4:0c:cd:f6:80:
d6:52:7d:d1:91:2d:52:cc:4c:a7:a9:7d:8a:79:36:0a:46:08:
04:7d:5b:ad:06:46:da:0f:c5:36:b6:a0:67:0c:5c:f1:50:ce:
7a:1a:1d:38:de:74:26:f5:3d:84:e4:9c:7a:fd:5c:02:e2:db:
ac:3d:9d:75:f8:7f:61:08:7c:61:9b:0f:57:1d:be:6e:94:f9:
da:39:8e:a2:fa:d9:38:17:8c:3c:e1:03:17:3a:8d:b6:db:18:
5f:2f:7e:3b:7d:60:c3:59:6c:f4:87:4b:8d:b3:c0:84:a6:2d:
fc:4a:36:7b:c8:d7:b8:64:26:d5:b0:90:99:eb:44:43:74:31:
e6:57:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 17:43:43 2025 by rpki-client