Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: lTSX7IClO36a4ejTqANLDu1HqJEMLorGABOgB1xzFHg=
Subject key identifier: 9A:8B:29:CC:76:83:16:70:F2:2D:FD:69:3E:77:EB:BB:13:E0:8D:96
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019A4E1885C8F1E39796E260DBD899662A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 1284
Signing time: Tue 04 Nov 2025 09:00:21 +0000
Manifest this update: Tue 04 Nov 2025 09:00:21 +0000
Manifest next update: Wed 05 Nov 2025 09:00:21 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: OrvF2hKAJHMZfcrNLEkU1V6ERQmtOBrfcssWN0EnFY4=)
2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:85:c8:f1:e3:97:96:e2:60:db:d8:99:66:2a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Nov 4 09:00:21 2025 GMT
Not After : Nov 5 09:00:21 2025 GMT
Subject: CN=9a8b29cc76831670f22dfd693e77ebbb13e08d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:7c:52:b3:cf:46:8c:3a:f2:c3:89:fd:36:
ca:85:80:6e:b3:22:13:aa:3f:5a:d7:c7:9a:92:b3:
2c:31:0b:01:9f:73:e1:6b:e1:18:c4:34:0d:4c:26:
12:20:5d:9f:5f:20:2f:a0:93:d3:5a:78:1f:ef:a1:
da:ef:4d:1e:a0:33:69:8a:6a:43:eb:30:13:33:d0:
8a:62:f3:fa:1c:b5:67:9f:a6:fa:82:52:d8:9d:b8:
3a:29:2d:91:49:20:35:3d:a9:88:a4:e7:ab:ec:cd:
71:a6:3b:4f:4c:d8:49:03:b0:46:23:b2:bf:ec:06:
3b:f7:66:85:60:57:86:75:f9:97:62:85:3b:e5:5a:
85:8e:48:69:50:c4:c2:f3:55:df:2e:2a:84:29:ce:
0a:c8:84:69:8e:f8:d6:7f:5e:04:e4:d9:a0:ec:65:
00:8f:10:85:52:f2:a4:29:09:78:a9:82:9d:48:fd:
83:ec:6e:22:d5:60:cf:02:9f:55:af:b0:8b:aa:a0:
13:87:c7:f5:e3:5c:95:ab:e8:d6:0a:66:b5:9f:4b:
6a:d2:f3:da:ca:aa:eb:e7:22:47:d7:af:5e:12:35:
33:f4:e7:a7:f5:28:81:4c:35:3d:fb:71:7c:be:a5:
db:8d:80:22:6e:81:af:6e:ff:47:a0:4a:8d:04:3e:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:29:CC:76:83:16:70:F2:2D:FD:69:3E:77:EB:BB:13:E0:8D:96
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cb:ea:9f:c6:1a:9e:f6:1c:24:19:06:71:b4:6e:f1:6f:70:
c7:de:ee:84:77:29:8d:e8:ad:33:aa:21:7a:2a:0a:72:e3:ca:
8f:45:bc:fb:fe:83:04:fa:3d:16:b3:d6:43:b8:c5:e7:41:9b:
74:18:34:3c:f8:25:8a:5d:93:41:83:01:a1:89:a5:ea:7f:bf:
70:6b:9d:e1:2b:44:7a:5c:de:c8:cf:35:00:80:10:5f:77:e9:
b7:26:3e:72:ea:2c:42:cc:61:a0:51:db:a3:bc:72:67:2b:79:
db:fd:ce:d4:15:9b:eb:7a:b4:58:26:71:78:d6:49:ee:5f:b0:
b7:71:0e:51:a5:de:1a:e2:0e:c5:5d:dc:05:14:b5:02:c4:e1:
63:0d:f8:8d:bd:5f:ea:0a:7a:b6:d7:69:e0:ca:8c:3b:3a:85:
da:90:45:18:90:15:92:c6:e3:f4:b5:e9:68:7f:e0:78:aa:d0:
de:d5:9f:6b:f7:0b:8c:27:58:8e:84:22:d6:df:4f:d3:9d:32:
2d:47:a3:2a:06:24:40:88:df:c0:31:31:e3:ef:b0:18:d0:c7:
0b:ac:e5:1b:dc:a5:71:ec:17:63:8c:b8:4b:af:0f:79:78:75:
26:b8:80:63:3d:1a:30:07:2a:8e:e8:31:fb:94:e2:71:04:7a:
43:f3:f0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:42 2025 by rpki-client