Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier: SWHl3vbdyZF9fB9P2vTbppVpKB/v5+QslQ0ybQk0udQ=
Subject key identifier: B2:86:08:42:8F:62:B5:D2:BA:A7:90:0E:55:09:FA:43:C6:94:59:0A
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 019A05C8B4363DE3457E1E4BF81A4CBB04C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number: 09A4
Signing time: Tue 21 Oct 2025 08:00:30 +0000
Manifest this update: Tue 21 Oct 2025 08:00:30 +0000
Manifest next update: Wed 22 Oct 2025 08:00:30 +0000
Files and hashes: 1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: dHZoDoV+AmPtDiJfaLozYePWEOBzoIW7lQyn7O9GWRM=)
3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:b4:36:3d:e3:45:7e:1e:4b:f8:1a:4c:bb:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Oct 21 08:00:30 2025 GMT
Not After : Oct 22 08:00:30 2025 GMT
Subject: CN=b28608428f62b5d2baa7900e5509fa43c694590a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:d0:25:51:f9:fd:05:45:26:90:1d:37:d6:
e8:fa:9b:4a:95:99:6b:b0:d4:d0:de:94:a4:29:21:
24:4f:01:9c:1d:f7:ab:f8:65:ca:f6:35:53:af:ed:
08:22:3b:bc:00:89:76:25:b0:73:0c:21:78:ed:b3:
26:59:0c:aa:df:85:fc:1a:aa:70:8f:1e:be:de:d7:
90:9c:48:34:16:76:ec:ac:2e:82:69:df:ef:c2:16:
a1:f0:2e:6f:ac:44:fc:82:e4:60:13:d0:d2:8f:7f:
aa:58:41:09:82:dd:10:8a:3a:1b:38:1b:c3:00:ab:
64:e9:71:5f:d0:2c:ef:db:22:60:01:12:8a:14:e4:
68:89:32:93:20:44:94:40:42:7e:4c:75:a9:3b:cd:
62:b3:3d:35:f0:9b:bd:f6:03:e2:22:8c:8f:af:40:
36:b7:a4:d8:86:fa:72:02:c4:d2:dc:f4:00:b9:db:
a4:2d:ba:27:fb:a6:bd:db:44:86:d1:f9:f9:ef:78:
a3:6d:b9:5f:f1:19:20:b8:50:95:2a:41:8b:f5:14:
28:76:e0:54:89:a7:66:19:57:b7:f6:cc:2b:af:9e:
96:0f:97:60:48:9d:14:6c:5c:9a:16:d7:2c:ae:16:
c3:72:77:70:f6:b9:df:80:9e:a1:a4:34:f5:21:1c:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:08:42:8F:62:B5:D2:BA:A7:90:0E:55:09:FA:43:C6:94:59:0A
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4a:d9:7a:6f:3a:50:98:4f:1d:8c:0c:c7:f4:1c:0d:b0:77:
86:d0:74:44:04:80:45:f8:78:d9:9e:65:e9:e4:bf:20:0f:d9:
65:84:f8:3c:40:11:66:12:25:b9:af:0d:06:d7:d3:59:81:52:
22:28:56:2f:1a:78:33:01:c3:08:37:41:fc:bf:1a:18:63:31:
84:f7:f7:7c:b8:2a:2d:02:ee:12:26:f7:21:d2:c9:25:85:6e:
58:6a:76:8d:2b:d7:d5:6b:8b:26:59:20:98:06:69:fa:c7:4b:
7d:79:6e:54:52:e6:5c:ad:86:f9:8e:72:0e:aa:e9:2a:45:70:
d5:45:0b:89:92:e2:1b:4e:eb:eb:23:07:f4:ee:51:21:e8:6c:
f6:4f:87:e3:9f:98:8c:aa:42:51:e8:39:f3:d7:64:09:eb:64:
02:b2:9f:53:05:61:1f:40:57:26:c0:91:b7:5d:76:93:33:dc:
09:06:aa:a4:2d:f3:19:57:33:1a:f4:36:56:86:cf:ff:43:10:
bb:d2:e4:06:b7:95:05:36:68:2e:1c:22:0a:f6:0f:b4:cc:54:
99:2d:10:c2:59:16:5e:0c:8b:6a:1c:0f:b6:5a:cc:c1:9d:8d:
f8:7d:a4:45:58:00:68:35:8a:af:96:a8:58:d6:e9:16:b0:e7:
f8:43:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:17:44 2025 by rpki-client