Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: 0g+azZxkwo50xmCysEg+1zgKs46Ym4vnrTS9Lw4C4W8=
Subject key identifier: 99:6C:7C:06:B3:80:F1:F6:D7:24:9B:C7:A6:EB:3E:29:8A:56:38:F2
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 019A3F810CCD8178BD2633E7FCBA6C10B123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 1572
Signing time: Sat 01 Nov 2025 13:00:13 +0000
Manifest this update: Sat 01 Nov 2025 13:00:13 +0000
Manifest next update: Sun 02 Nov 2025 13:00:13 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: iR5l9xHjdpXMsE2CC+2iYXqNlbkUor2CFKixGqnt5gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:81:0c:cd:81:78:bd:26:33:e7:fc:ba:6c:10:b1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Nov 1 13:00:13 2025 GMT
Not After : Nov 2 13:00:13 2025 GMT
Subject: CN=996c7c06b380f1f6d7249bc7a6eb3e298a5638f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:f3:73:4a:fd:e1:9d:05:ad:60:7c:b0:ce:
5e:71:08:ee:98:65:93:ec:a3:e1:56:65:14:1e:1f:
18:33:b1:40:85:11:07:56:a5:fb:c9:84:37:46:15:
11:73:35:77:7b:bc:ac:3b:99:9b:b9:7e:96:31:5e:
37:4a:22:57:47:bf:a4:40:1e:a5:83:74:9e:cf:1d:
d1:60:ff:e5:9c:3c:e8:c2:bb:60:f8:db:fc:fe:fc:
85:09:eb:bf:90:8f:41:d0:2a:dd:07:08:6a:14:62:
f5:e7:60:4f:0c:6d:fa:04:79:f7:c8:4a:8c:8b:70:
dd:06:51:de:1b:8b:0c:d6:cd:7e:d3:35:cc:13:d8:
a6:f2:f2:34:08:22:a0:80:94:3b:69:16:77:a5:07:
d5:a4:59:4a:15:e6:5a:2e:a4:39:43:c0:4d:6f:30:
d0:27:e6:d2:ef:98:64:5a:f9:1f:de:4f:78:a1:11:
c5:37:d5:12:8d:2d:6d:d7:63:9a:ce:59:8d:52:31:
04:aa:d3:34:3a:42:92:cf:35:69:15:d4:c1:b7:92:
77:23:15:a3:2a:aa:5a:cc:2a:49:ca:fa:29:6e:33:
30:1c:af:6d:85:cd:e0:90:9b:1d:97:b4:29:62:65:
d2:29:c6:8f:33:fe:c8:94:8b:fc:fe:33:ec:f5:23:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6C:7C:06:B3:80:F1:F6:D7:24:9B:C7:A6:EB:3E:29:8A:56:38:F2
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:85:87:b4:26:8e:ac:03:2f:d2:fe:71:4f:bd:48:4a:d2:18:
74:f4:64:cd:94:95:c4:21:06:ca:e6:ab:65:ec:88:f3:3d:d9:
3a:d7:91:83:4e:1f:e8:c3:5d:13:94:b7:e9:13:7a:b3:18:07:
a2:5a:88:73:8f:9b:6e:ce:83:00:fe:4a:00:1a:1c:cf:2b:0a:
69:ee:9d:3b:c1:1b:d8:7d:e0:d4:9d:9f:f5:8f:0c:b7:52:c9:
fe:a1:f6:30:90:15:66:51:7c:79:b7:60:f2:f1:78:87:40:00:
44:fe:c2:c0:4e:ff:8f:31:f4:d0:ff:a3:d4:3f:9e:b8:20:29:
1d:42:76:04:29:81:33:93:7c:18:8b:d7:a2:d9:04:75:3c:a2:
4b:d9:6f:f4:81:7a:76:00:ea:24:e0:8d:fd:ad:7f:dd:ad:02:
8b:da:d4:d9:3c:74:53:d8:fb:b5:7f:27:a3:27:59:5f:67:53:
93:60:33:73:7b:27:7b:40:b5:2d:4b:70:f0:e4:a7:36:d4:57:
f5:6a:da:b6:b5:fe:a8:29:0d:7e:59:5b:14:fd:dc:d0:fa:88:
64:68:fd:66:22:50:ac:e8:00:72:96:bb:dc:67:25:6b:53:17:
a5:f9:60:8b:ec:a4:8b:f0:21:6f:d3:f1:19:35:48:32:a6:86:
96:da:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 17:49:27 2025 by rpki-client