Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: O4ExIOkozeY912zIypx+gIf8bxH4Y/bPC8PZzZLiBAw=
Subject key identifier: 34:F4:90:A0:2B:3A:6D:7F:60:24:6F:A3:39:A6:89:B6:6A:5D:8B:2C
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019A5187438DF0B57633AB640F1603B69070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 09E6
Signing time: Wed 05 Nov 2025 01:00:10 +0000
Manifest this update: Wed 05 Nov 2025 01:00:10 +0000
Manifest next update: Thu 06 Nov 2025 01:00:10 +0000
Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=)
2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: Bo6ex8Dqa150fhi19B3dfDw2uOybXqYkJ/L49F27TRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:43:8d:f0:b5:76:33:ab:64:0f:16:03:b6:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Nov 5 01:00:10 2025 GMT
Not After : Nov 6 01:00:10 2025 GMT
Subject: CN=34f490a02b3a6d7f60246fa339a689b66a5d8b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:5b:29:3f:bf:26:5b:00:13:2f:15:6c:9f:
b3:9b:98:dc:33:ec:d5:d0:6e:64:64:2c:57:3d:7e:
ed:75:98:0d:b5:55:e0:6f:46:a6:78:fb:ef:01:31:
7f:df:bf:4a:b2:c2:33:00:2e:79:37:d4:94:f5:14:
e3:a3:01:b6:cb:4a:3f:46:66:62:32:32:f4:24:de:
e6:e2:7c:9d:fe:de:8b:98:ff:d4:6b:87:71:41:c9:
27:f3:bc:86:a2:00:2d:43:85:c4:60:89:aa:77:b9:
8c:e0:fd:27:a8:f4:b0:aa:eb:d2:b8:62:92:0c:e5:
49:2b:ee:5d:78:9b:25:36:00:5a:16:3d:e5:e1:f5:
df:5c:33:b6:93:f3:95:2a:46:de:04:84:a3:5b:ce:
ea:50:77:4a:43:d8:c7:ce:e2:47:cb:b0:eb:f4:dd:
48:ef:d1:6b:a8:b6:d3:06:f4:4e:3a:77:a4:c2:df:
43:97:27:af:1d:c7:89:4c:05:bd:56:08:c8:dd:a4:
d6:e8:98:90:20:a8:38:2e:cf:8c:e0:60:a6:21:f6:
71:8d:94:1b:06:a3:2e:e3:45:8c:33:77:8f:21:35:
0c:62:bf:32:2a:c1:55:d8:3c:70:a9:ee:fc:9d:e8:
da:77:0e:34:28:cc:cf:f9:89:1b:fa:cf:41:a0:eb:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:90:A0:2B:3A:6D:7F:60:24:6F:A3:39:A6:89:B6:6A:5D:8B:2C
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2c:db:f7:41:1d:33:8a:71:b1:3b:2b:9e:46:e2:3a:ad:a1:
88:9c:81:96:5c:71:d5:b6:0b:ef:af:d5:51:84:3c:81:4d:4b:
11:f4:f2:6e:aa:2c:ef:ac:ef:a5:93:cc:92:31:16:22:32:ab:
5a:06:03:b9:34:0c:5b:01:6a:2a:8f:09:62:94:e2:ef:a9:65:
3e:18:78:1d:60:81:ee:e4:38:6e:2e:37:c7:e4:8d:74:9c:1f:
83:1c:a5:fa:24:0b:c0:d2:0f:6a:a2:41:bf:91:67:12:cf:8e:
42:7b:c2:04:97:09:ea:50:76:e3:b8:32:45:00:26:99:65:71:
7b:1d:a5:5c:2c:1e:32:78:7f:37:65:a0:d8:8d:93:6d:9e:02:
18:b7:86:eb:08:35:cb:19:81:0c:d8:0b:65:c4:a6:f1:39:62:
b0:35:a5:70:7b:db:ee:92:8e:e8:45:bd:ff:00:74:ce:f0:c3:
f8:64:33:ae:c9:dc:9c:58:eb:09:7b:06:c2:b5:84:42:d0:bb:
a9:7f:06:57:e3:01:17:03:9f:a7:0a:78:0b:89:01:07:58:65:
36:6a:2b:93:2d:89:ac:d1:7f:83:b4:fd:30:94:a7:b2:8d:bc:
9d:5c:44:83:f6:4b:10:7b:a4:db:3c:ef:50:49:e5:bc:42:26:
4d:4f:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:20 2025 by rpki-client