
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: /Ea/xSBLF07V7lKkc6ZI4j3gEpHQFAw4Hwb/NejzDzk=
Subject key identifier: EA:EA:5B:CA:50:98:3B:45:F6:EE:ED:EF:0B:B2:CE:39:56:D1:45:33
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019937CADA218E9CF509545B81A47E15E479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 13C8
Signing time: Thu 11 Sep 2025 08:01:04 +0000
Manifest this update: Thu 11 Sep 2025 08:01:04 +0000
Manifest next update: Fri 12 Sep 2025 08:01:04 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: Wm8a+q2nPwtkTo71jPFLvKJsWWBM2L2XJZuWTdMKFUY=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:da:21:8e:9c:f5:09:54:5b:81:a4:7e:15:e4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Sep 11 08:01:04 2025 GMT
Not After : Sep 12 08:01:04 2025 GMT
Subject: CN=eaea5bca50983b45f6eeedef0bb2ce3956d14533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:14:6c:48:45:ef:69:ee:c5:a3:67:9a:37:
03:ac:33:24:6f:e5:f7:38:df:3d:0c:28:1f:9c:4e:
2d:f8:b6:dc:3a:d6:92:e1:36:9a:13:a2:f1:5a:78:
8e:2a:58:f1:9b:8e:40:64:82:3f:9a:6c:9b:7f:a5:
f5:2a:06:74:86:72:0b:89:ab:6f:46:70:46:c0:68:
a8:1c:3a:24:77:b4:ac:2a:a0:cd:e0:67:2b:4c:5b:
bc:da:af:0e:93:cf:d4:83:7b:d7:7b:26:22:fa:d9:
0c:82:5d:7a:43:97:d3:ba:17:db:c0:62:8a:40:de:
fb:97:5f:08:f9:31:cc:6e:4f:c9:57:c9:82:45:01:
81:08:92:d0:36:3d:6b:f7:54:65:c4:96:8b:25:f2:
85:ea:bd:a3:52:0f:54:56:09:23:fa:4f:d0:10:2d:
f4:b4:84:d4:12:27:34:cf:76:4a:7d:8a:6b:18:09:
4a:6c:6e:3d:31:2a:d1:c1:d3:b6:76:3b:2b:a6:07:
5b:7b:82:cd:b6:4f:85:0a:d3:31:7f:ad:b2:b5:61:
71:6f:23:0c:2f:ff:2f:fc:b4:ea:02:8a:1a:33:00:
80:9b:ce:6a:6e:e9:ee:a5:2e:36:3b:2f:1f:e9:e5:
dc:40:8a:58:a5:a8:ef:60:4c:90:c0:f5:16:e0:28:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:5B:CA:50:98:3B:45:F6:EE:ED:EF:0B:B2:CE:39:56:D1:45:33
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e0:15:0f:8a:52:8e:d7:bd:72:b5:4f:bb:7c:ef:83:44:ce:
c6:0f:3e:21:28:d9:8d:94:60:47:0e:ce:47:67:5e:27:83:31:
e4:07:6d:79:3b:3f:27:b1:18:2c:8b:0e:6c:10:0f:3d:15:b3:
38:3f:50:1b:f1:3e:4d:68:4c:57:75:9f:ca:9b:c2:fb:bc:7a:
10:e4:b6:28:c1:4e:6f:24:c0:ee:50:17:63:5f:00:39:4a:be:
1b:8d:d4:6b:f3:e9:df:0f:d8:03:0c:63:8f:a0:6b:67:3e:9a:
ca:66:ef:f8:63:c4:9b:a7:73:25:e0:aa:9d:76:6a:c0:1b:ef:
3b:94:ac:6e:21:82:1b:7f:c9:19:8c:6a:bc:65:81:43:34:6b:
62:30:cf:60:a8:78:3c:2d:8e:2e:c4:ff:b8:6a:1b:84:80:66:
4e:0c:22:80:b7:7f:2b:81:fa:b5:a2:17:22:ce:dc:bd:4f:f1:
50:27:07:d8:19:8c:3f:c1:5a:e1:2c:18:5c:e9:d3:09:f8:83:
a1:b1:1e:3f:a1:24:b6:14:85:5e:ea:21:fe:b9:12:22:9c:7d:
01:8c:28:d9:0d:ce:13:c3:23:6e:45:48:d5:32:44:45:3f:55:
8e:13:7a:d0:fc:cc:bd:6c:92:81:f6:b7:ef:26:b7:73:0d:89:
01:1e:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:04:23 2025 by rpki-client