Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: AWIZrwbi0svEAFwGdwSjdKWdhcSNjA0tf/vXT6eLYjc=
Subject key identifier: 2B:E1:6F:2E:77:2B:00:2A:FC:2F:C8:91:17:4E:66:5C:75:2A:0C:80
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 01995266740150582C88ACD7A9F8A3CCEDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 168D
Signing time: Tue 16 Sep 2025 12:01:10 +0000
Manifest this update: Tue 16 Sep 2025 12:01:10 +0000
Manifest next update: Wed 17 Sep 2025 12:01:10 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: T+GNq/vnW8Ihp1HEGLZ9myOCv1KAa7vhvu9dDAsU3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:66:74:01:50:58:2c:88:ac:d7:a9:f8:a3:cc:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Sep 16 12:01:10 2025 GMT
Not After : Sep 17 12:01:10 2025 GMT
Subject: CN=2be16f2e772b002afc2fc891174e665c752a0c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:0d:30:cd:bd:51:c8:4c:e7:ab:9c:c0:f4:
fa:25:ce:1c:cd:57:17:40:f7:0c:00:de:0d:5f:01:
05:12:ca:3e:10:e8:02:02:7e:42:1b:6d:06:22:f4:
7b:4b:ab:df:9f:0a:15:a3:dd:35:85:4d:fc:43:1c:
db:db:b6:20:7c:bf:76:26:a9:18:a2:12:c2:39:48:
e2:0b:b2:63:f9:8c:92:37:37:81:32:46:4d:3d:40:
28:48:c6:e2:0e:f5:17:89:0c:c2:27:f8:20:e7:42:
89:ec:0e:e1:d8:8d:f4:dd:76:ef:eb:06:ac:7b:c0:
6f:bf:ba:d4:c6:2b:71:04:1a:8f:a0:d3:1f:15:fa:
a2:ea:ee:5e:0a:f1:e0:f8:f1:e6:a4:98:5f:9d:00:
14:bb:90:a6:6a:ff:50:c6:e9:cd:f6:9b:f4:c3:6a:
cf:9a:a1:8e:a5:2f:ad:0b:75:07:6e:ab:3d:ea:4d:
67:c9:e7:80:4b:06:65:2b:6b:6d:d2:f4:7a:dd:c8:
eb:7a:6a:25:92:fc:ac:5e:ce:71:2e:6e:08:97:12:
37:39:87:e3:6d:d7:a8:79:33:d9:6f:d7:86:a5:ec:
1a:43:9c:b9:63:fb:73:4a:25:0a:13:6a:08:b1:28:
6e:44:13:76:2d:12:ae:28:92:a9:3e:02:1f:40:8b:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:6F:2E:77:2B:00:2A:FC:2F:C8:91:17:4E:66:5C:75:2A:0C:80
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ae:ed:24:19:50:6b:f7:7d:ed:31:dd:4c:31:bc:b9:5c:42:
67:28:d2:60:8e:a2:b1:fe:f4:fa:09:34:68:89:b5:f6:79:57:
2d:5d:7a:a3:ad:3d:f0:51:c1:ab:18:5b:7b:b2:60:d6:36:8d:
25:3c:10:81:6b:6a:80:64:c9:81:9b:18:b3:39:34:04:09:50:
b4:82:d3:52:33:3e:04:a8:a5:94:8b:52:28:5d:8b:64:16:eb:
ee:71:18:64:5f:88:e0:61:be:17:83:76:45:e1:4c:5e:ca:af:
93:ad:e7:42:38:34:83:ce:e6:88:b1:11:1e:5f:bb:4d:e9:ca:
a3:74:7f:25:61:e6:74:44:57:03:84:73:a8:1a:ea:b5:e5:a5:
07:22:50:eb:1c:0c:cc:ab:5b:df:a5:85:01:3c:2c:a0:32:a9:
fe:50:3c:30:17:de:2d:d0:15:38:6e:3c:ee:2f:f3:8d:e2:da:
db:89:e6:20:d9:e6:72:34:ba:89:60:c1:08:b6:2e:b9:47:a7:
c5:4d:e2:b7:52:47:cd:97:50:82:5a:c6:5d:0a:83:8c:65:2b:
c7:da:e2:1c:cd:f2:9e:9d:f9:09:14:bf:35:c7:ec:c3:07:8e:
0c:c2:f5:26:45:7f:20:e5:81:52:33:3c:f4:1c:25:4b:a5:f7:
72:9e:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:43:18 2025 by rpki-client