Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: JYig19EYMwO2nYwDOPwMtZhsVVOvmZJZ8ne8Zv6P2zU=
Subject key identifier: A7:A8:EC:2E:8D:0B:D7:8A:DF:43:CA:06:52:D8:2C:EE:8E:F3:A7:F2
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019A714A0D31A9D49D8D04BBF89F2313D6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: oLNhIvz1cyuzZLMu1uG/GqHpeDKHNSLqJhJgvQJHrZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0d:31:a9:d4:9d:8d:04:bb:f8:9f:23:13:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=a7a8ec2e8d0bd78adf43ca0652d82cee8ef3a7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:48:62:f2:7b:84:d2:33:2b:ab:81:a9:b9:
23:a7:f7:c0:47:1d:b8:f0:5d:e4:27:c8:d1:ab:d1:
77:aa:84:0d:e5:33:47:e1:f7:65:f1:41:e5:10:93:
07:9e:b6:85:d7:4a:9c:54:d6:17:59:c5:cb:a4:51:
be:5a:1a:a7:e4:5b:61:4e:7e:47:e2:6d:ba:b2:9c:
26:b2:d2:0e:8a:71:c4:24:61:1a:66:34:f0:4b:00:
71:02:4e:05:82:44:bc:49:f8:c2:8c:ff:c2:fd:75:
c7:90:a9:f2:a3:8d:92:02:0f:5e:77:91:12:af:df:
78:62:67:fa:c0:6e:22:3a:1b:ea:18:75:48:a7:03:
ee:71:e8:cb:49:97:5e:ba:b1:d6:4a:e2:c4:29:2c:
43:13:8c:8e:0c:02:b7:ca:5a:ff:bd:b9:d2:c6:13:
94:ad:30:bc:20:82:ff:b0:e9:e8:98:c0:3c:39:6f:
25:1d:e0:da:19:c0:a8:37:65:4d:e4:64:ba:80:f4:
a2:88:12:05:7c:5e:c2:da:ac:09:ca:58:a6:f6:44:
93:8d:a3:22:4f:fe:f0:ab:83:11:ff:4b:3b:23:17:
9e:10:39:29:1c:0c:cc:cf:e9:e3:42:d4:a0:86:d7:
7e:78:85:51:e3:00:44:41:0f:c8:5e:ac:55:a1:ee:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:EC:2E:8D:0B:D7:8A:DF:43:CA:06:52:D8:2C:EE:8E:F3:A7:F2
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:08:e9:d4:52:d5:16:4f:02:d6:ae:34:99:f3:5e:01:4c:a4:
69:64:ed:af:00:5a:c1:b2:8c:63:a9:7f:36:1f:d2:e2:a1:43:
87:02:a8:38:21:e9:68:ee:6c:08:ee:6b:1e:af:6a:15:2d:cc:
b2:89:3c:69:aa:c1:03:3e:20:a1:f3:0d:12:47:9e:65:bc:fd:
41:af:da:6c:26:60:b4:55:c7:3e:47:49:a2:a6:aa:9d:d3:b5:
33:f3:88:af:0f:7b:d3:7e:2e:39:c9:67:da:c3:32:fc:94:20:
bd:bc:c4:45:d2:52:c5:05:9b:4c:99:5c:b0:0d:0d:0c:4a:5d:
76:d0:f7:54:80:bd:29:23:b2:f0:87:5e:60:66:b4:7c:aa:98:
7d:71:8b:05:b3:95:55:67:ac:54:68:40:da:f7:d9:42:18:29:
92:b1:ad:f7:b4:8a:6b:2e:5f:f9:01:19:7f:b5:17:7e:ac:2a:
26:7d:13:31:43:be:a6:2f:41:0d:04:b3:ac:80:51:cb:62:6d:
49:31:a3:02:47:0b:3e:44:e0:e6:5b:a4:8e:15:01:ff:8b:be:
1e:76:8f:dd:91:e8:7e:44:30:88:a9:3a:df:2f:95:e5:fc:9d:
8d:22:2e:f2:8e:4b:c2:1f:47:d4:03:c7:4f:51:74:22:0c:c1:
d7:c0:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:17 2025 by rpki-client