
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
File: bCjEbAuUE8313if9HJ9rRnMnfHs.mft (raw, json)
Hash identifier: YOpy3Bdci8OVBWlyaYeZ2Tqcqsfz+J1vfAHZ85a1jpk=
Subject key identifier: C8:EB:49:DE:A9:B7:64:6F:61:C2:E6:E2:40:42:BB:F2:7D:1A:22:38
Authority key identifier: 6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
Certificate issuer: /CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Certificate serial: 019A2A433245C9D70B529A0B4761232C996D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
Manifest number: 0A90
Signing time: Tue 28 Oct 2025 10:00:38 +0000
Manifest this update: Tue 28 Oct 2025 10:00:38 +0000
Manifest next update: Wed 29 Oct 2025 10:00:38 +0000
Files and hashes: 1: bCjEbAuUE8313if9HJ9rRnMnfHs.crl (hash: hySezgHFMo+KRloNCnkFWerR6mxwU98DP8Zwg9BRGDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:32:45:c9:d7:0b:52:9a:0b:47:61:23:2c:99:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c28c46c0b9413cdf5de27fd1c9f6b4673277c7b
Validity
Not Before: Oct 28 10:00:38 2025 GMT
Not After : Oct 29 10:00:38 2025 GMT
Subject: CN=c8eb49dea9b7646f61c2e6e24042bbf27d1a2238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:7c:a2:7b:b1:6a:4f:17:55:10:3c:ad:da:
0d:6c:4f:e0:03:79:17:25:93:60:31:80:89:00:af:
50:bb:c8:e1:a7:c4:de:da:b0:81:e4:c7:1f:b9:58:
f5:d2:a0:e9:a7:b9:be:0e:95:55:27:eb:36:3b:03:
23:2a:a8:4b:4d:a8:d8:de:f5:2f:13:6c:8e:f6:09:
10:49:29:90:ab:76:34:36:1d:7c:4e:f5:8c:70:c4:
ae:c4:58:85:c2:fe:bd:86:97:70:c6:9e:74:bd:71:
c8:6f:98:7b:34:cf:ce:d9:4c:28:b4:45:68:c8:3b:
e9:5b:c5:b9:05:3a:95:22:15:71:75:b4:da:0c:c1:
c0:7e:69:79:50:fc:0a:50:cc:fb:8f:12:f4:8d:a1:
1f:1c:f4:0d:e9:57:8d:eb:b5:d6:c6:3b:43:30:ae:
6a:6c:68:22:42:44:63:13:12:51:b9:7e:36:04:eb:
78:3c:1a:f2:49:8e:f3:f2:49:02:88:34:95:e3:58:
56:a2:9e:27:f9:10:b7:45:b6:b5:3e:6e:26:de:73:
a9:57:5c:fe:dc:26:de:24:02:70:41:21:65:25:9e:
04:d3:ae:99:a0:d6:f2:54:3d:e4:33:c2:48:8c:78:
7d:f6:fb:6f:27:23:2b:48:75:21:ea:d2:15:40:b2:
c2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EB:49:DE:A9:B7:64:6F:61:C2:E6:E2:40:42:BB:F2:7D:1A:22:38
X509v3 Authority Key Identifier:
keyid:6C:28:C4:6C:0B:94:13:CD:F5:DE:27:FD:1C:9F:6B:46:73:27:7C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCjEbAuUE8313if9HJ9rRnMnfHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9d28dd-d203-4b4f-af97-59d20318cf91/1/bCjEbAuUE8313if9HJ9rRnMnfHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f4:a0:54:45:d5:18:4b:7e:70:49:f5:15:d8:f4:97:da:37:
58:91:06:34:24:9a:25:68:dc:af:8d:aa:c2:b1:d1:9e:1c:db:
4e:9f:f5:66:33:df:be:e6:97:b3:23:68:21:70:8d:43:c6:56:
7d:a7:61:3e:72:a6:c5:f6:ca:df:81:c3:b1:8f:bf:96:f6:0d:
84:df:43:fd:52:11:bf:81:90:65:f1:27:f6:73:4f:94:fd:f5:
2c:e4:3b:db:10:7e:ab:4e:2c:20:89:4c:06:cd:9b:06:25:82:
b1:91:37:06:17:51:38:06:a9:44:c8:13:10:16:bc:5b:71:d5:
ef:46:2a:f7:94:95:9f:1a:4f:a9:eb:a4:f5:9f:d9:85:8c:d8:
27:79:03:10:f1:25:1e:79:80:77:25:44:cf:97:36:c0:f3:b2:
56:66:4d:09:e7:1f:b5:50:b3:8a:78:c3:63:cd:1e:33:29:4f:
80:90:eb:a6:86:dd:04:3c:e5:06:66:e6:ea:bb:85:60:46:23:
4d:89:75:8a:4f:80:ac:e9:85:ab:6e:50:b7:d6:bb:bf:71:bb:
ce:d4:ec:dd:3e:a2:22:0a:07:60:dd:e4:31:8c:eb:0e:04:18:
18:af:a3:77:fa:6a:b2:79:76:e1:a3:c9:03:8a:48:5e:18:4a:
64:7e:fa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:15:49 2025 by rpki-client