Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: aaKuctrp/466j1Jlop7nQxdM2x4D68tdOQz0H3Vra3A=
Subject key identifier: F1:68:51:26:EC:3E:43:63:C2:FD:24:06:EA:80:95:67:5E:B8:98:B3
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 019922C3783C1F9F5F5BC2D0ACE4D7E7C8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:00:59 +0000
Manifest this update: Sun 07 Sep 2025 06:00:59 +0000
Manifest next update: Mon 08 Sep 2025 06:00:59 +0000
Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: y9iImgmTEQgxYrXs4SN/o6l9LhhpUgDMLHEi4jDUEa0=)
3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:78:3c:1f:9f:5f:5b:c2:d0:ac:e4:d7:e7:c8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Sep 7 06:00:59 2025 GMT
Not After : Sep 8 06:00:59 2025 GMT
Subject: CN=f1685126ec3e4363c2fd2406ea8095675eb898b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:c9:1e:5c:c5:49:9e:6a:d2:09:a7:94:68:
ad:69:d4:05:2c:b2:e7:dc:e2:31:82:40:fb:81:23:
1a:1d:84:93:84:29:98:d4:91:50:4a:2a:65:3f:09:
7e:b1:27:56:ae:c9:22:6f:7b:e0:10:ab:8f:98:58:
66:13:9e:72:4c:da:bb:1e:b7:5a:a2:4b:7d:a2:49:
7d:ab:3e:e6:4d:ed:12:b8:dc:0e:9b:c2:3f:b3:97:
a8:ee:b9:59:6d:1d:2b:89:46:00:87:7b:93:0b:0f:
fb:b1:ee:6e:9d:48:65:fb:18:46:c9:51:fe:f9:ff:
e3:27:ab:85:b0:0b:3e:20:34:94:98:c9:e7:68:11:
e7:a7:a9:e2:8e:e4:55:95:d1:0f:2a:7c:2a:e3:fe:
ea:82:cb:3b:07:40:ab:a2:e9:76:e4:42:df:cc:dd:
b6:2a:a2:8d:70:0d:6f:d5:44:63:0a:88:ec:2b:45:
f6:63:cd:bb:78:70:ec:6e:ff:60:d5:f4:5a:22:5f:
83:5b:04:0f:8e:f3:02:53:16:95:5c:a6:ae:7b:a2:
d9:1c:0a:f4:5b:6b:9e:fb:80:a1:75:d1:71:8f:86:
4b:c7:7b:46:a7:18:dd:64:54:4e:ff:9c:76:31:54:
e6:5f:cb:f8:a7:40:55:92:e1:64:bf:57:fe:a8:35:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:51:26:EC:3E:43:63:C2:FD:24:06:EA:80:95:67:5E:B8:98:B3
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:99:e6:44:e0:74:7a:13:4f:31:b7:67:15:95:a0:07:79:ab:
1d:c8:91:06:3a:23:b4:5a:25:c3:39:e8:db:4f:7b:d4:89:53:
0e:e1:8e:96:25:09:e6:9c:00:92:54:72:80:b7:58:43:db:cd:
a7:8b:2b:81:fa:c4:be:5c:1c:85:53:48:c1:3b:43:c1:05:81:
6d:19:ad:05:35:48:99:94:2c:7b:70:f8:fa:a1:da:f4:27:4f:
62:49:90:30:c0:c3:a9:86:72:30:6a:b9:33:e2:ab:81:79:74:
36:9b:c0:6e:6b:2c:7b:92:2e:2f:58:ac:02:a1:fa:53:9a:a9:
cc:67:ca:3e:74:de:7b:d5:a5:c7:c2:3b:be:41:a1:70:f7:92:
a8:21:db:0b:73:3a:d6:e8:be:ab:bb:1e:c0:29:41:4a:d8:03:
42:64:6a:93:59:98:44:62:87:54:6e:76:fb:30:89:bd:78:af:
71:f9:b1:4a:0e:d0:79:a1:93:1c:05:7d:c9:ea:2d:46:b0:6c:
52:8f:29:47:fc:26:4a:dc:a0:7b:e9:35:61:ad:08:09:f0:1d:
bf:0e:ab:03:9e:ca:88:6c:6a:67:9d:52:a7:4c:d4:9d:3f:11:
e9:07:ba:6d:4c:65:d6:5f:da:47:0c:0b:0f:dc:9c:e0:b4:c8:
18:00:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:52 2025 by rpki-client