Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: SCGia1FAAq0MNdJZUnWl+v45TolZb8z/+VovxxExxWs=
Subject key identifier: 76:09:7E:D7:9D:67:3E:BA:EF:CF:D7:D4:3D:DF:0A:50:4D:28:65:16
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 019A70DC4FDD2D196450CD90DB82E17BECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 080F
Signing time: Tue 11 Nov 2025 03:01:17 +0000
Manifest this update: Tue 11 Nov 2025 03:01:17 +0000
Manifest next update: Wed 12 Nov 2025 03:01:17 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: fn/7SmAmsAEoJr9Qa+IbRCYjKSKEQxB1GMhfkbjojQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4f:dd:2d:19:64:50:cd:90:db:82:e1:7b:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Nov 11 03:01:17 2025 GMT
Not After : Nov 12 03:01:17 2025 GMT
Subject: CN=76097ed79d673ebaefcfd7d43ddf0a504d286516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:e2:c8:9a:36:c6:cc:11:98:dc:0f:35:fa:
10:b9:71:81:d8:d5:e3:3a:e4:1f:8a:36:4c:61:91:
70:cb:f4:95:0e:d7:bc:ad:85:65:e1:62:20:45:de:
25:2d:a7:f7:60:88:e5:44:2e:f9:04:35:16:31:32:
57:91:86:f4:f0:29:58:cc:f9:08:9f:cf:bc:c3:2e:
42:cc:cd:7d:d4:16:06:39:ff:b6:a7:13:e2:bb:97:
5a:97:05:a0:34:a8:67:cb:69:46:49:54:c3:25:20:
a3:a6:76:c9:79:a4:af:cd:d7:47:16:c0:2d:04:89:
c0:fe:86:60:f6:ee:ed:95:d1:df:7f:49:31:4c:92:
6e:d7:51:46:76:62:6a:ac:20:91:39:06:01:5d:42:
63:71:96:f4:f6:16:3c:48:e5:f1:52:55:4b:b3:68:
b6:ff:a1:ac:b1:e1:e1:e2:c9:b1:e5:2e:90:3c:4d:
4a:28:a6:12:67:ff:bf:81:1d:5d:b6:36:3c:d1:6a:
fd:af:d0:05:5c:67:5f:52:f8:25:28:19:01:50:13:
68:c0:dd:85:17:58:14:77:72:ab:ee:8b:d5:27:35:
42:b6:69:16:18:5f:bf:92:bb:70:8f:b5:26:85:df:
8a:17:82:18:26:ba:66:53:42:d4:45:43:b4:4d:71:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:7E:D7:9D:67:3E:BA:EF:CF:D7:D4:3D:DF:0A:50:4D:28:65:16
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:59:5b:ef:80:eb:24:0b:3e:d2:b8:9e:a7:a9:ef:fb:1f:58:
1b:fa:54:60:f4:41:5e:13:fc:8a:1b:86:ab:da:c1:c9:9d:05:
b7:42:42:f5:64:3e:8f:f4:1c:58:60:2a:db:17:03:f5:a3:d5:
47:6e:c9:4c:5b:53:8f:10:78:d2:c7:c2:69:1f:45:5e:79:b0:
c1:82:72:5c:fd:3e:0c:f1:ae:c8:2e:65:36:3c:fc:bc:21:8e:
66:7a:eb:61:6f:32:ee:fd:cc:b4:54:a3:b5:91:fc:97:e5:f7:
60:d3:09:55:e1:7e:31:88:da:ca:79:bf:c4:49:fd:21:f0:11:
32:ba:3c:84:e7:74:57:2a:18:43:45:7e:d2:7c:29:12:73:fb:
5f:eb:b6:1b:ec:9c:ff:3a:ba:6c:3a:8c:2d:60:7c:ff:eb:c7:
74:a3:b6:32:17:fa:bf:28:b9:f2:db:88:63:9e:ae:80:43:1d:
bc:59:5c:55:98:62:92:d6:6f:2a:48:13:14:c4:a1:b2:22:43:
7e:db:12:df:c5:b7:27:cc:f6:a9:8b:16:93:c2:d5:d1:df:5c:
76:b2:87:fb:8f:e4:d7:f8:0e:5a:0f:b4:00:a9:c8:ac:b9:ea:
d2:32:4b:b4:9c:fa:99:03:64:b7:6a:6b:bb:76:31:be:d6:30:
00:30:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:29 2025 by rpki-client