Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: 62o6xeiWtLUe6le8WOggH+ZLlb/m0HaU38DKpA6JIdc=
Subject key identifier: 29:70:C8:C4:40:99:78:66:29:A2:CF:A1:F8:0B:4D:8E:88:5D:AE:D4
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019A164E49D85E2015211C85420E8A543E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 16F9
Signing time: Fri 24 Oct 2025 13:00:20 +0000
Manifest this update: Fri 24 Oct 2025 13:00:20 +0000
Manifest next update: Sat 25 Oct 2025 13:00:20 +0000
Files and hashes: 1: U0kz5BkcYHKTFNPtHMwJo21XKHU.roa (hash: iaCyCipdJ6ekGgikYiiFtPDbJGVukpDzv6A6Dr6X+s8=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: Yqm8TjjwEcseMpW8Qy2K4nhQMDUzmgv9gyU7vfMsnhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:49:d8:5e:20:15:21:1c:85:42:0e:8a:54:3e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Oct 24 13:00:20 2025 GMT
Not After : Oct 25 13:00:20 2025 GMT
Subject: CN=2970c8c44099786629a2cfa1f80b4d8e885daed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:a3:a7:f2:9c:8e:eb:82:eb:60:4e:0f:44:
ab:f5:4b:79:54:20:83:35:f4:56:8a:ce:f9:62:9f:
94:9d:fd:d8:94:46:51:73:aa:64:6b:7f:72:5f:b5:
63:a6:14:61:4b:ea:e4:0d:ef:1f:1f:2e:63:dd:73:
b8:6e:24:f9:4e:aa:8a:ea:6f:f3:a7:c3:5d:89:7d:
41:14:a8:c7:0e:12:a8:ec:0d:72:92:bd:82:ca:5d:
04:df:f4:2a:ff:13:24:31:38:ba:18:39:0a:a9:c6:
67:e3:d8:6f:cc:8c:c6:c3:f9:af:55:fb:13:4a:ff:
bb:d7:a2:61:8d:af:08:48:3d:98:f5:d8:1a:6a:31:
76:10:3c:61:c3:fc:06:a0:03:ab:9b:f0:dd:ad:82:
f8:fa:b2:58:71:92:58:d4:a7:9a:63:4f:84:3f:60:
ad:a3:be:60:c9:d6:83:b7:f8:cd:d7:0d:cb:bf:43:
20:38:af:2e:b8:f6:41:b8:79:8c:90:08:b7:d5:65:
31:76:3e:90:a8:8d:09:eb:cc:37:cf:e7:9d:08:06:
92:6c:3c:96:48:46:66:e0:7a:42:64:1b:34:93:9a:
1e:31:9d:16:49:45:be:41:a5:29:74:fd:ee:77:73:
3a:14:8c:fe:ff:cd:b9:75:79:a2:b5:5e:1e:09:6d:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:C8:C4:40:99:78:66:29:A2:CF:A1:F8:0B:4D:8E:88:5D:AE:D4
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:9c:99:4d:88:e6:36:31:1f:ee:33:bd:63:01:db:85:a2:
a1:7a:93:af:de:b4:7d:8c:6a:de:53:23:5b:e0:ff:bb:1c:38:
a0:8b:11:95:b2:bb:61:bb:43:81:2e:92:1c:20:84:0a:a1:5c:
ec:6b:6e:ce:21:84:0c:27:b4:74:6b:27:3d:22:5b:5a:77:6b:
c6:72:46:52:a6:70:23:ba:70:9a:b9:40:de:05:3b:10:b8:e5:
12:3a:52:ec:c6:67:d3:93:dc:20:8a:60:30:67:10:81:f7:20:
80:9d:8d:54:54:69:fc:bd:a1:cc:87:75:75:e9:e2:45:15:7a:
b9:7e:f2:e8:5c:64:a0:97:88:0c:0f:b0:7b:a0:91:9e:ea:5f:
5c:47:06:7a:d6:cd:7b:36:4a:e1:42:de:95:90:87:09:21:90:
21:c1:8a:9b:9b:13:12:78:45:4c:c8:c5:aa:5a:53:64:4c:2b:
37:ac:4c:5e:fd:86:ec:2a:1e:48:68:dd:e5:3f:4d:23:09:c7:
68:f0:e3:f2:4d:77:58:72:e9:1c:65:87:a7:19:73:cf:9f:1d:
b8:7e:bf:8b:0c:98:2e:eb:06:57:d5:7d:ad:95:82:02:d8:ef:
3f:49:10:cf:8e:10:99:cc:68:3a:01:6d:59:d8:f8:cd:66:52:
80:c4:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:30:04 2025 by rpki-client