Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: 21o7uwwFfyz4EYUvATGAC3l3vM/fC88Vp42Ds96OZCo=
Subject key identifier: B5:B1:2C:44:05:E6:F5:AC:BC:A1:98:B7:82:D6:19:1C:9E:40:83:E3
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019A7293FF8BD7710EE6A2DDA77C521AC14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 146B
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: h8lYRqKOFc4xTERISigvwUgUssvAYKZuKJLLUn+78IU=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ff:8b:d7:71:0e:e6:a2:dd:a7:7c:52:1a:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=b5b12c4405e6f5acbca198b782d6191c9e4083e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:9f:5f:72:3a:51:b1:29:03:e3:83:3a:8a:
dc:31:5c:84:66:f7:58:6e:8f:0d:ff:f6:87:c2:70:
c1:ec:78:1b:ad:0f:49:c8:61:c8:d6:45:41:d9:8a:
76:bd:0e:8b:b2:22:f6:e1:0a:26:e6:d4:1e:6a:89:
1c:89:3b:31:dd:cf:0c:42:d6:78:61:48:9e:c3:69:
fa:34:27:00:75:e5:d2:bc:79:cc:0b:b4:14:c1:91:
0b:cf:fe:41:29:4c:cf:40:b7:20:c9:65:c5:9e:1d:
6f:bb:f6:2f:c4:b2:73:84:ff:19:95:75:cb:25:13:
9f:9b:4f:55:f2:82:67:5a:e1:10:b7:65:40:ed:b7:
56:0b:ef:b0:ea:fe:ac:e5:fe:36:39:0f:57:2e:9f:
ee:4b:f4:29:1e:f7:6c:28:0a:f9:d3:09:e0:37:45:
15:59:7d:0d:99:28:76:c6:8b:7e:0f:59:f0:0c:f6:
d4:cd:8b:b5:b2:1e:c1:d3:8b:48:94:1d:1e:ac:01:
f9:36:1d:59:0d:09:60:71:a4:40:56:e4:42:c8:e6:
42:0d:c3:c3:9f:96:19:5b:23:0e:8c:57:51:05:41:
01:42:83:06:80:fb:a8:a0:62:d8:23:c6:55:48:b2:
bc:2f:1e:14:03:14:d1:9d:86:43:4f:75:8f:e6:6e:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:2C:44:05:E6:F5:AC:BC:A1:98:B7:82:D6:19:1C:9E:40:83:E3
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f3:c4:9e:45:47:74:28:37:75:18:e6:f2:da:f7:10:86:26:
aa:4d:5f:24:45:ea:b1:47:36:2c:3b:61:cf:09:6d:0a:f1:db:
63:c6:fa:aa:d0:6c:7b:c2:96:5b:69:5c:32:ca:e9:7d:d9:fa:
1a:a0:cf:b3:3b:78:fb:61:50:7c:32:45:97:46:c9:58:98:c8:
67:1f:98:4e:84:72:98:f6:ca:e1:e9:e2:16:ba:8c:85:18:cc:
e0:ad:40:21:00:86:17:b8:2a:69:5b:b3:07:29:0b:06:a3:da:
43:52:d2:43:45:26:a3:d7:f1:7a:3f:be:17:95:33:7c:6e:0a:
d7:94:f5:82:e4:89:ad:7e:88:ea:d8:fd:10:45:97:76:b6:94:
1b:d5:ab:77:22:1f:eb:db:1b:44:38:fb:13:8a:f7:28:1c:b8:
87:75:bf:db:7c:cb:68:7b:65:bb:1b:f5:57:01:2b:9b:56:82:
f0:44:7f:80:cd:d0:71:e3:11:79:0f:df:95:fa:a0:08:74:5c:
9e:0c:fd:c1:84:eb:c5:d8:3b:d2:28:6d:da:76:e4:1d:ab:61:
a6:37:ad:da:0b:cb:f7:a5:42:db:03:bb:6a:71:49:06:98:c5:
2d:07:30:00:03:04:88:40:da:bc:1b:85:3b:d9:d0:df:9f:34:
65:7c:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:30 2025 by rpki-client