Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: u2BXS2/t5zq3/1xcmvvFRHjGteRoRqcG08LfGq4xFgs=
Subject key identifier: 6E:DB:0C:34:9A:F2:E1:B4:A4:DF:E4:C6:47:79:2E:C9:74:76:C4:6D
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019A71B92EA8A12886F5E20CDB29B05E15E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 08B6
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: OPaZfJLqwVP9IBDXY3ie4Wkw97RRNX+t4E85gbM4fFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2e:a8:a1:28:86:f5:e2:0c:db:29:b0:5e:15:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=6edb0c349af2e1b4a4dfe4c647792ec97476c46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:44:f0:ec:02:88:5e:18:15:14:e9:33:21:
06:4c:b8:b2:8a:c0:22:0c:4c:6d:80:13:e2:b3:28:
18:bc:59:78:94:23:93:03:9b:ef:4e:a5:bd:3a:e2:
4e:8e:2e:d5:bc:54:a4:b6:6e:a8:a9:13:09:36:8e:
eb:cd:5d:c7:f8:7d:52:ea:f0:6e:fa:fa:1d:d8:99:
97:66:1b:cd:8f:c6:90:24:f6:b5:96:98:28:6d:ff:
ac:6a:18:e9:01:c0:7c:14:a8:e4:66:fc:dc:68:d9:
61:d1:6b:a2:49:67:ae:89:18:15:40:64:fb:b5:72:
6f:a4:13:6b:bd:73:55:2b:9f:c3:40:4d:57:7d:fd:
11:2f:20:4e:4d:f5:74:d1:35:de:c0:d4:b9:13:b7:
ca:97:e8:26:b5:bc:d5:48:2f:8e:bb:0d:08:44:ae:
77:73:23:c9:f1:2f:6d:76:75:4c:66:bf:76:df:32:
d3:b6:44:bb:c0:4a:72:c9:c7:3f:48:c8:a7:f4:9a:
49:46:55:0d:6e:47:ef:b2:b5:41:21:0c:2c:80:44:
fe:fe:c4:92:b5:4f:fd:8d:eb:5b:99:a3:f7:84:5d:
e0:28:9e:88:75:b0:2c:7f:fc:c1:fd:eb:5c:b8:b2:
ee:40:25:93:4d:43:c5:f6:f2:53:e9:d5:1b:6c:67:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DB:0C:34:9A:F2:E1:B4:A4:DF:E4:C6:47:79:2E:C9:74:76:C4:6D
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:ff:79:3f:c3:55:5e:62:97:3d:93:5b:78:59:12:06:f7:30:
9e:4a:7d:bf:74:21:13:24:ee:58:6c:a6:f7:93:07:d7:bc:cb:
0b:f4:a1:2e:ae:7b:7f:4b:0d:0a:b9:14:6e:e7:82:06:26:60:
d0:e7:8f:e7:25:88:85:70:57:58:f5:d4:02:a0:cf:03:95:8c:
ac:8e:55:cf:b0:27:14:19:84:3d:61:08:d8:b5:a1:30:e4:b9:
61:77:c1:6b:a3:30:e7:a5:f3:d5:1f:96:e0:68:8e:68:e7:1e:
6b:d6:76:e4:16:91:7d:e2:d3:37:75:07:4b:97:7c:c6:5d:3d:
f5:04:c3:c3:25:45:2e:e5:39:e4:de:f4:dd:dc:28:08:96:27:
18:bd:3a:2d:2e:74:9c:8c:60:e5:7d:f3:17:64:92:2b:dc:27:
0e:ca:c2:77:87:4c:7b:98:e6:e8:48:69:a1:3b:0b:cb:6c:78:
d2:55:62:6c:62:a3:c9:42:03:84:0e:97:d6:4c:fa:52:b1:34:
ae:50:c2:eb:ec:d1:5b:6c:2b:76:56:e3:0e:99:ae:23:61:32:
3d:9b:48:57:fe:a0:1c:12:24:f7:9a:0e:6d:44:a0:16:a8:78:
30:a1:16:8c:e2:94:68:3f:84:08:27:31:9e:d0:3c:7b:e0:51:
af:17:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:44 2025 by rpki-client