Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: Lhn2oRKTOzEV0JtkKu1RGstWgrsODGN+1W3l1CNeES8=
Subject key identifier: 4F:C2:3C:D4:23:8A:40:97:B3:B4:40:EF:5E:A7:E6:BF:37:E7:35:66
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 019A1E3F2F3DF79E4D6237C50366009BF297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 02:00:48 +0000
Manifest this update: Sun 26 Oct 2025 02:00:48 +0000
Manifest next update: Mon 27 Oct 2025 02:00:48 +0000
Files and hashes: 1: A15OC13YGMvTmICTCy1AZnVK3To.roa (hash: PwsIGkVItakh2uZVvAdvG2pZjqN/gexEPiOMZusjdcA=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: avEcyIdSR6udb7O9YVxGtCoXBcZy9v5PUxt2BLXEfP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:2f:3d:f7:9e:4d:62:37:c5:03:66:00:9b:f2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Oct 26 02:00:48 2025 GMT
Not After : Oct 27 02:00:48 2025 GMT
Subject: CN=4fc23cd4238a4097b3b440ef5ea7e6bf37e73566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:14:c7:1b:27:1b:82:a9:dd:50:bb:22:32:
9b:cb:b1:74:20:25:59:86:ab:1c:76:ac:24:73:e6:
20:25:7e:2b:ba:14:d5:04:99:38:03:3c:24:19:58:
71:02:da:90:83:87:71:39:e4:65:e1:c9:4e:e1:ba:
76:07:61:4b:98:f9:b9:5d:68:49:24:e9:47:3c:11:
8a:d5:0b:ca:40:ac:fc:23:da:07:8f:e8:a5:c4:50:
c0:6b:3a:e9:e4:4b:d9:4e:71:65:b9:b9:da:c5:6c:
bc:65:26:30:db:a6:f6:de:d3:ef:7c:38:d3:4a:fc:
08:d2:03:49:2d:3d:54:fa:e7:65:b9:64:ca:9c:82:
d0:e0:00:fe:76:2b:79:92:7d:a8:e9:6e:55:8b:59:
d2:42:97:c1:b1:bf:27:16:9a:bf:d3:1d:84:cb:80:
43:24:50:18:c0:20:80:7f:93:5d:27:87:24:d5:6e:
5b:38:5d:4e:01:1c:56:67:ab:d9:a4:e3:0d:d5:64:
92:3f:cd:ca:a8:2e:4b:96:21:56:6a:10:00:11:3f:
eb:20:86:10:14:44:6a:f8:66:de:10:84:b4:e9:e2:
97:7d:63:00:fd:39:83:37:e2:8a:3f:4c:c8:a1:c9:
95:02:93:95:7b:ab:27:ac:53:e9:de:bd:0b:11:7f:
51:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:3C:D4:23:8A:40:97:B3:B4:40:EF:5E:A7:E6:BF:37:E7:35:66
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f6:d5:83:a9:2c:60:e3:64:6d:43:5c:58:45:89:cb:fb:06:
70:89:70:e2:5d:f7:4b:c5:5f:fa:2f:0f:93:82:40:94:ab:9b:
3c:93:b9:9c:04:5c:57:be:19:6b:8f:d6:9e:96:80:c0:ed:85:
f1:16:04:40:6e:d4:75:ef:24:8a:8d:f6:9e:31:25:36:0b:d4:
58:dc:36:0e:7c:49:b7:fe:6f:8c:c3:0f:af:19:d0:75:ed:bf:
01:2a:3d:9f:ba:6b:f2:cd:b1:d7:88:6d:3f:60:f4:56:38:01:
cd:4e:3e:81:33:a4:72:00:d7:49:44:39:73:9e:7d:07:5c:bc:
56:e6:68:a6:22:91:98:7a:06:56:1e:9e:a0:8d:91:81:cc:4a:
b0:7c:09:3c:65:e0:10:b7:01:b9:6e:d3:8a:bd:05:ae:0b:61:
02:3d:4c:39:ad:2b:ee:1f:23:4d:61:38:39:67:0c:a7:9e:16:
3e:fb:32:4b:ec:2c:1e:95:21:8a:fd:d0:73:43:c8:93:df:f7:
eb:a4:81:89:c0:bc:14:39:ff:58:fc:80:d1:59:b9:4f:2d:15:
7b:c9:28:f0:a2:33:d1:96:24:66:c1:28:ce:13:03:b1:4b:73:
76:31:07:85:75:9c:db:61:9d:15:b4:ff:58:85:2e:7a:9d:8f:
03:1d:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:02 2025 by rpki-client