Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: EvhRshQ4js9KMjBFkRBdiBmD/rQgBfNGxm0B0116dh8=
Subject key identifier: DA:00:70:44:28:73:5D:1B:14:DE:AB:FD:85:71:AE:2F:D8:BE:AA:31
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 019A0F703C4487A97A95DCD85982AC9B6AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 167B
Signing time: Thu 23 Oct 2025 05:00:04 +0000
Manifest this update: Thu 23 Oct 2025 05:00:04 +0000
Manifest next update: Fri 24 Oct 2025 05:00:04 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: TImozlC4XVKU6zx8j+a5aGM+EMtfTspALu9EBdiDG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:70:3c:44:87:a9:7a:95:dc:d8:59:82:ac:9b:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Oct 23 05:00:04 2025 GMT
Not After : Oct 24 05:00:04 2025 GMT
Subject: CN=da00704428735d1b14deabfd8571ae2fd8beaa31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:32:56:bf:be:a5:50:ae:6b:34:2c:25:7f:
50:e3:8e:3c:2a:aa:22:eb:bd:dd:5e:9c:38:7d:24:
34:0f:93:58:6a:51:37:1e:61:ba:71:e8:e5:21:1c:
86:0a:48:82:2c:12:ec:f4:95:a6:f3:4d:a1:56:47:
2e:36:49:22:dd:ca:f4:ce:77:d8:a0:f1:1d:a9:4f:
63:1a:b5:84:6d:c1:17:eb:18:cb:9e:58:5c:29:75:
f7:4c:3a:36:f1:81:76:a3:5e:cd:9c:d9:f6:5b:2a:
16:61:14:5d:02:b3:c4:db:c3:69:ae:28:a9:e3:6b:
dd:66:45:e3:50:86:64:1d:8b:39:c3:4f:5c:6e:f6:
3f:b0:52:c7:39:fc:bc:77:c1:e0:90:d8:6c:ee:3b:
1a:5e:01:56:4b:77:65:ab:ca:00:34:d0:b2:a8:43:
4f:a4:21:a7:43:7e:48:87:89:de:3b:92:04:72:d9:
fe:ab:e4:c1:ec:aa:5c:25:8b:40:c9:b1:59:ff:61:
fe:6f:8f:aa:a4:84:aa:43:75:be:07:c8:b2:97:10:
33:bb:cc:ad:59:78:90:af:7a:78:88:e4:71:fb:cc:
40:37:3e:3d:09:5d:83:c7:3a:2b:ad:3a:3b:86:03:
e3:d0:2f:4e:1e:9e:b3:24:22:d5:c0:5a:b0:d6:e5:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:00:70:44:28:73:5D:1B:14:DE:AB:FD:85:71:AE:2F:D8:BE:AA:31
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:06:45:bc:ee:77:cf:57:c0:83:a0:9e:3b:a5:6b:ff:3f:0c:
94:05:e7:8a:e2:29:8a:d6:89:d6:f1:81:38:e1:1e:2b:a7:43:
6e:b5:b3:a4:e2:66:41:ec:23:f4:13:19:80:a3:d9:a0:8c:ee:
86:56:31:fe:a0:91:c2:59:59:1b:ea:d3:68:da:79:c0:1d:dd:
a6:77:f8:1e:17:d8:30:db:dc:e6:aa:10:54:92:f0:2c:3b:cc:
fd:e9:33:8f:23:8d:a8:37:40:c2:90:ea:2f:de:b2:d4:89:de:
04:1e:0f:dd:c9:11:93:08:11:54:30:30:ba:3d:54:e6:92:c8:
2c:b0:27:75:34:18:c4:98:cf:9b:ad:f6:ab:69:d9:0b:78:1e:
bc:b0:a8:42:54:9f:2d:25:7e:20:aa:ca:f2:42:51:68:ae:ca:
e6:df:66:94:4c:45:17:75:80:59:f6:29:4d:e0:d2:ff:95:1b:
c0:38:8c:cb:12:54:e9:d1:c5:3e:2e:76:7d:db:9e:ab:52:42:
b6:17:77:95:59:2b:b0:36:fb:e1:a0:d1:c8:c4:6c:61:ac:f3:
26:8c:7b:3d:b6:51:e8:94:e7:84:2d:fb:e4:64:70:29:4f:bf:
9a:4d:e8:0e:a0:d8:eb:f7:78:c6:6c:1b:00:26:cd:b7:0a:44:
5c:03:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:10:35 2025 by rpki-client