Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: kszyanX5sSiTMaZgtfN8vqm3NKVW9AT4u1a/HLi8dgc=
Subject key identifier: F9:4D:AD:D6:A6:4F:45:11:3E:B6:16:F7:D3:9E:22:43:D2:84:01:53
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019A0D8237AE6194C2867B222400AEFCCE3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 172F
Signing time: Wed 22 Oct 2025 20:00:28 +0000
Manifest this update: Wed 22 Oct 2025 20:00:28 +0000
Manifest next update: Thu 23 Oct 2025 20:00:28 +0000
Files and hashes: 1: 4ZdVBNZ_S4MPlECyp4uaoJNDnoM.roa (hash: ZgQab93TqT8XuUNyna7Zjv75Gd8+1Mfr5tNmb6ereyU=)
2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=)
3: MtUNZWuEtv_AgAvU3cIWhKTi-Gg.roa (hash: ySbSia2jLKcCoCeLqt1N9qsuOZJeTIf7i11M9Z0B4Zw=)
4: Y4NmZbZuhs1viCkczDnrgcVKsPA.roa (hash: iZ00KX52faCxPLqFBBgbaxFYB5kh7DTKiprocjPi7OY=)
5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: LQEfIQnIN2i8LOstthJzjI/XcQ6KXz3Gs8C5+NTgomM=)
6: exu2V3MDMWUgQoAAO324t6RZezE.roa (hash: vzXnLaEVU/+BdpdjEE/HgCx55xSHkRHFXGxKZLhvrto=)
7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=)
8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:82:37:ae:61:94:c2:86:7b:22:24:00:ae:fc:ce:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Oct 22 20:00:28 2025 GMT
Not After : Oct 23 20:00:28 2025 GMT
Subject: CN=f94dadd6a64f45113eb616f7d39e2243d2840153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:05:be:9c:f7:b4:3e:c1:b6:f5:b8:fa:d9:
93:d5:f7:83:eb:c4:06:5b:66:68:f0:9d:49:55:af:
ca:40:1a:c9:d7:4a:25:94:00:9d:75:44:48:7b:bd:
7b:f4:ba:70:4f:b4:84:af:49:4e:2c:f3:fc:78:5a:
20:f8:a7:04:37:5e:f6:66:8a:ae:1c:a8:d9:9a:75:
c7:41:74:63:8a:5f:1f:fa:8d:fd:1e:0e:58:f4:36:
db:e0:38:78:a5:8c:13:f8:0c:44:20:a1:b3:ec:20:
68:0f:7b:72:e9:ea:f3:a7:2d:c1:34:0e:17:0e:ce:
03:cd:ea:8d:a3:09:7a:17:b1:96:88:e2:57:dd:74:
0c:ff:b6:08:08:4e:88:ef:29:cc:cb:14:ff:2d:dc:
d4:20:e9:26:40:c3:6d:56:e9:23:4f:e8:82:d7:49:
02:f0:90:9a:33:f8:08:fd:e7:be:a5:50:5c:0c:4a:
22:d7:45:1c:f7:55:c8:bd:29:b1:d7:ca:bf:8c:25:
95:e1:7b:54:32:a3:f3:f2:c1:d2:14:32:4a:65:ae:
d8:cd:a4:2d:de:72:7e:68:4c:2c:ff:08:9d:e7:69:
f7:54:d2:7e:b8:70:c4:2e:77:9d:2a:18:70:75:a0:
f6:cb:6a:9f:2a:d2:80:87:a1:58:03:c0:ae:da:23:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:AD:D6:A6:4F:45:11:3E:B6:16:F7:D3:9E:22:43:D2:84:01:53
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:31:1c:50:2b:a7:f9:3a:5f:89:1d:b9:c4:3f:a8:f6:e5:3b:
e7:e1:b2:e4:45:ce:8f:e2:e8:56:e6:a6:98:39:42:07:92:0b:
7d:e2:e3:ee:7f:43:1d:5e:8f:55:1a:28:34:33:d7:be:dd:e6:
36:15:73:49:d9:73:c7:e0:61:38:7a:06:1c:bb:ab:72:24:32:
00:7d:02:40:11:f5:e2:6c:b3:bd:47:35:af:0e:f8:a4:54:6b:
57:48:11:08:e5:30:2c:a8:e0:ce:2b:c5:54:6f:8c:d1:ef:f5:
5d:bd:f3:46:90:e0:0e:91:74:9e:5f:88:89:be:18:62:f8:d9:
07:ce:b7:a3:d0:7e:25:26:59:24:8e:39:41:73:78:2e:81:10:
43:cc:17:dc:88:4a:07:a5:5f:2a:bd:6e:75:f6:ca:53:77:75:
e5:7f:03:35:b4:7e:e0:bf:80:40:71:4f:0e:d5:82:0b:fe:4e:
30:b4:41:5a:d3:c4:ac:be:16:cf:de:70:9f:9e:0c:d1:33:24:
e4:31:b0:8a:8a:20:32:96:1d:ba:c6:55:4b:c0:4d:e2:fa:38:
c4:50:6a:de:d9:0f:fe:e3:ad:ba:3f:9d:2f:01:f1:39:c8:02:
bc:da:0a:a1:0c:05:6e:21:47:15:8f:de:be:2a:b2:fa:b0:ac:
4a:68:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:54:57 2025 by rpki-client