Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: 1XkkF0cGuDTsy3q3MZVZ1cHQg2POL7HgI/4/wc4SFIk=
Subject key identifier: EA:4C:21:08:94:A9:6F:A4:C6:5B:65:38:27:44:D8:1A:EA:8C:0E:A5
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 019A4E86BE70263F9DBDED2BAD4F415DF690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 160F
Signing time: Tue 04 Nov 2025 11:00:44 +0000
Manifest this update: Tue 04 Nov 2025 11:00:44 +0000
Manifest next update: Wed 05 Nov 2025 11:00:44 +0000
Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: kWAsUSA7pXX43DvQbqIuHcBSIEVWLgFY8gXvkxvje08=)
2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:be:70:26:3f:9d:bd:ed:2b:ad:4f:41:5d:f6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Nov 4 11:00:44 2025 GMT
Not After : Nov 5 11:00:44 2025 GMT
Subject: CN=ea4c210894a96fa4c65b65382744d81aea8c0ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:76:a8:1c:35:d7:7e:a2:29:6b:f8:51:3d:
f6:ff:a5:bb:a9:63:6a:b9:1d:96:3d:34:9f:34:4f:
1b:f0:41:42:17:1a:40:10:56:c3:66:95:ab:6d:41:
77:19:ee:ee:9a:59:fc:02:8b:d1:06:18:b1:50:a1:
a7:ed:7b:0d:37:15:a0:44:cb:4a:12:61:b1:0b:b7:
86:de:5b:90:b8:75:b7:c2:0a:bb:8c:42:02:5f:4c:
5c:5d:6e:7f:20:33:b8:87:91:8e:29:95:7f:ef:5e:
36:02:df:37:6a:aa:8a:f9:cf:3d:88:b8:ab:87:f0:
d2:65:7a:16:3f:dd:3a:bd:ef:74:b4:c1:1a:56:bc:
fb:19:9a:59:43:ad:13:8d:93:17:a4:68:e3:aa:05:
9a:fd:85:9b:e2:1f:68:1f:94:d3:15:2f:9b:14:03:
ef:f9:ed:3d:b3:24:b7:4e:42:42:f5:c3:39:e1:23:
48:5b:0d:31:10:5d:c9:56:db:d9:e0:5f:c7:37:01:
55:0a:b8:df:46:eb:4f:84:de:4c:af:35:13:59:93:
2e:56:c2:d0:63:15:e9:1f:8f:90:5e:d9:13:69:46:
fe:df:2c:f6:a7:9c:5f:14:b7:09:85:17:69:7c:e5:
d5:6f:f5:40:92:90:ab:f9:f7:c2:2f:fd:11:8e:51:
05:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:21:08:94:A9:6F:A4:C6:5B:65:38:27:44:D8:1A:EA:8C:0E:A5
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e7:17:f8:90:93:16:dd:a8:d9:09:6e:f8:c9:12:1e:68:85:
37:9c:8e:01:b9:75:0a:57:bc:41:b0:d2:0a:a8:4d:ed:4e:17:
c1:91:7e:f8:f5:8b:6d:ca:83:77:bc:d4:17:45:a4:ab:69:6f:
4a:38:35:ba:5f:01:96:7e:3a:c6:2f:97:e5:b6:8e:f0:b0:3c:
32:78:5d:5c:7d:d0:62:5b:39:a7:42:01:5a:8c:84:3d:26:19:
6d:64:ca:82:1d:2c:c7:97:ec:9e:50:a6:3c:14:72:7d:6b:6b:
d4:82:98:85:1f:02:9c:35:2c:64:96:0c:62:1f:19:ff:53:03:
eb:f3:5a:f7:89:3f:2e:a4:3f:65:bc:ac:f4:3a:f5:46:f6:0b:
ad:e7:7a:cd:e7:8f:fe:4e:a2:d2:cd:c6:de:87:1e:0f:5a:a4:
34:74:84:8a:4e:60:5a:d7:3e:0b:06:ee:a3:01:5c:a7:d8:32:
08:7d:e6:17:b8:73:f1:b3:d7:db:37:e7:74:02:25:f4:90:bc:
a1:25:0d:f8:c7:48:58:ff:be:54:21:1a:35:84:99:81:c2:8e:
92:ad:67:14:ec:bc:a1:0d:fa:97:52:50:6a:ab:53:27:71:93:
18:ad:4e:f2:22:7f:36:2c:8b:5f:d5:ba:ae:8f:b8:6c:fc:f6:
ba:8b:66:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:01 2025 by rpki-client