Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: E2v1QlL1LQmsBHzc0z5nWmCMNEpNpnZ0AKSAHFOPD/Y=
Subject key identifier: B0:49:E6:6C:D4:23:9C:4F:3D:E3:97:B5:DC:89:83:C1:AE:F5:C1:F5
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 019A71EE797F84EEFAD7C4603C639A83B1B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: W2NtP3XSygU/IrlDbYFl9HqUXyqsQOkHmf4dAdvon9I=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:79:7f:84:ee:fa:d7:c4:60:3c:63:9a:83:b1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=b049e66cd4239c4f3de397b5dc8983c1aef5c1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:91:52:2b:1f:91:83:e8:af:1a:7c:a3:1b:
9c:f9:47:9a:eb:48:7a:34:08:37:e0:cf:f7:76:6f:
ce:40:47:91:60:11:4c:fb:a1:d1:03:8e:ce:f5:1d:
c3:14:80:1f:39:84:9c:50:f3:f1:ed:e0:10:11:3c:
f6:ce:eb:e5:65:b6:50:42:f5:fd:9c:f1:9e:2c:df:
47:7d:28:b2:ae:35:b9:fc:37:8e:b8:1f:f7:2d:ed:
cc:8a:26:ee:c3:fd:e6:a4:30:52:9c:b2:7d:80:1f:
f1:f0:2b:8f:a1:6b:0b:cc:d8:7e:51:6a:38:e7:39:
67:95:ea:f3:7c:49:22:1a:f4:c9:af:ff:24:12:5b:
89:65:66:7e:4a:48:b6:30:85:5e:18:6e:9b:75:ab:
2a:e8:1b:c5:f1:7b:10:0d:72:97:35:78:ee:3f:bb:
62:e5:6b:47:3f:76:2d:85:3b:d1:d3:15:23:d3:c9:
b0:e5:53:28:fa:a8:56:96:59:9c:97:9e:f8:f2:b7:
94:e6:42:a7:4e:94:bc:7f:62:eb:3f:dd:bf:8d:68:
ad:22:b3:eb:cf:22:61:f0:29:55:45:1e:b4:12:7c:
3a:44:c0:f0:07:9f:64:2a:1f:ed:44:1d:bd:48:cf:
ff:ab:bb:eb:42:b6:5b:08:57:83:2b:0d:33:da:fd:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:49:E6:6C:D4:23:9C:4F:3D:E3:97:B5:DC:89:83:C1:AE:F5:C1:F5
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:5b:f1:ba:4b:d6:2c:56:2c:7d:ad:84:60:a0:ec:3d:58:
3f:45:4e:2d:99:d2:f9:73:c3:83:af:9b:1e:0f:ab:9c:1c:59:
37:f3:26:1f:50:34:68:4e:5a:67:39:81:84:8c:ea:e2:18:be:
d8:92:b8:4e:db:2e:9e:b4:a5:6f:c9:06:cb:98:12:ae:cb:54:
fb:d7:11:a2:8f:1f:e4:44:0b:de:d3:f7:a6:1a:68:94:d5:00:
e9:87:81:df:6a:db:0f:b3:90:10:a3:ce:5b:ee:53:90:bb:79:
2e:c9:7d:90:fd:e6:d9:bd:b2:ec:1a:de:86:39:1a:54:ab:da:
95:d0:ce:ab:de:a6:fc:d0:14:64:39:51:ac:3f:a9:d0:cb:3a:
e4:e8:26:38:35:f6:e7:24:c7:40:3a:8b:2f:d5:22:94:dc:12:
19:5d:25:ee:e2:fb:9c:72:f8:45:b2:1d:6a:3c:65:e0:5f:cf:
14:0d:f8:98:75:97:f5:6b:d4:01:13:66:63:43:d8:18:8d:e9:
b4:b1:65:4f:a6:35:a4:52:f6:6a:29:c7:79:02:65:c2:97:c9:
68:b4:9b:65:0f:f4:6b:9d:e0:f7:ad:72:d7:ae:22:63:f7:78:
8e:0c:7f:98:4c:de:7b:4c:ec:d3:0a:5a:2e:b7:1a:e4:91:c7:
bd:16:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:16 2025 by rpki-client