Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: nScfD5VvvLtjZso2sAEU/eVqfVY2fhmKneKJAclOysE=
Subject key identifier: 1B:B3:EF:E5:7D:C8:55:A9:E5:DD:9D:87:33:B2:64:43:E0:98:A6:2A
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 019A70DC7C0A53BF4D5F8541C923C9413054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:29 +0000
Manifest this update: Tue 11 Nov 2025 03:01:29 +0000
Manifest next update: Wed 12 Nov 2025 03:01:29 +0000
Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: 7tYelRJbDo3S/U51p+oVsFymE4H1UpO4DREyWqE9LCw=)
3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:7c:0a:53:bf:4d:5f:85:41:c9:23:c9:41:30:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Nov 11 03:01:29 2025 GMT
Not After : Nov 12 03:01:29 2025 GMT
Subject: CN=1bb3efe57dc855a9e5dd9d8733b26443e098a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:c8:8e:c2:f1:a6:56:73:fd:b9:ae:49:37:
f6:7a:bb:10:20:80:cd:cd:a6:ad:a3:b8:11:79:f4:
dc:49:5a:d3:d4:09:aa:6a:dc:8f:b1:2b:b7:76:67:
e9:aa:a2:00:a9:b8:b6:d1:62:5a:0a:56:fd:19:c4:
51:1e:46:9a:45:1d:4c:fb:13:07:de:5d:0c:5c:3c:
77:ca:f6:10:0d:82:e1:ea:03:f2:d7:8c:8b:29:cf:
b9:64:59:01:8d:35:1e:0c:c7:4e:84:ed:a9:61:31:
5a:9c:1c:9a:29:f8:60:0e:74:9f:f1:f3:7a:a8:27:
8b:37:23:e3:74:7f:8f:3d:d2:77:c4:63:ed:69:cf:
a0:23:03:e9:62:bd:2d:cf:bb:6c:ae:42:b3:2b:e0:
42:1b:67:04:8a:5f:4d:f0:92:26:d0:f5:49:9b:bd:
2c:ec:f7:ff:39:a3:75:4d:f5:67:a0:ba:70:c8:f8:
93:cf:e5:e0:d8:cc:7d:03:62:1b:50:24:3c:fc:9b:
12:8b:15:bb:74:8b:09:bf:2f:84:f9:b2:be:43:4c:
6c:ae:67:4c:c2:46:fa:ba:0b:8c:33:09:a9:b4:15:
0e:e5:8b:a8:ef:68:10:9f:ce:9f:47:04:20:36:c7:
67:9e:61:64:4a:7a:0e:19:5d:8f:b9:2a:92:0a:a8:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B3:EF:E5:7D:C8:55:A9:E5:DD:9D:87:33:B2:64:43:E0:98:A6:2A
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:bc:51:69:58:89:bb:a7:c3:2c:5d:3d:c3:c0:91:af:55:
17:41:cf:f4:e0:5d:f9:3d:c2:36:07:49:3b:fb:55:cf:be:5f:
46:65:af:65:4c:9f:9c:da:66:23:66:69:b0:79:c6:9d:10:8c:
c8:bc:5a:f8:bb:80:d9:80:f9:e7:99:b7:5d:14:9e:0a:73:67:
21:74:13:1e:52:c4:02:6f:ec:50:04:80:52:f2:4a:6d:7e:ac:
f1:34:fd:25:cf:47:14:32:73:b3:e9:f2:d9:8b:9d:18:b2:84:
c2:47:86:78:38:06:c7:51:65:b4:60:21:4c:9d:c6:6d:39:8f:
90:c9:11:da:64:4d:b8:49:55:55:d2:95:5f:1e:62:a0:64:8f:
e6:88:2d:11:b0:48:a4:33:03:6e:60:60:01:83:fa:1c:c7:63:
67:0a:bc:97:72:fc:3c:9c:d4:04:31:1f:bf:bc:5d:2c:5d:01:
e1:d3:da:e6:1c:c8:f4:0b:03:04:db:cb:5f:e9:7b:7e:62:bc:
e0:e3:9f:64:6c:71:e2:5c:69:ad:a7:7d:63:60:b0:20:a8:e6:
e1:3a:1c:bc:f0:3d:bd:77:3f:71:85:f5:cb:47:f2:17:45:19:
ad:30:8f:d6:c2:ad:d8:33:61:bc:59:e3:ae:83:15:07:44:3e:
57:9f:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client