Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: W0DFLpZRQQ4nbf/6CdeYbWXp1F6apj2htaP42f8zf08=
Subject key identifier: 33:4E:4C:A9:9E:20:D9:46:CB:08:5D:21:0D:89:92:15:11:EC:B0:17
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019A548853531547B3E43E02E44641FB80DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 08BE
Signing time: Wed 05 Nov 2025 15:00:11 +0000
Manifest this update: Wed 05 Nov 2025 15:00:11 +0000
Manifest next update: Thu 06 Nov 2025 15:00:11 +0000
Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=)
2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: I3oADG65FLoISx7Jlc1gwAmr+mA0J82+JVWXUg7+KQY=)
3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:53:53:15:47:b3:e4:3e:02:e4:46:41:fb:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Nov 5 15:00:11 2025 GMT
Not After : Nov 6 15:00:11 2025 GMT
Subject: CN=334e4ca99e20d946cb085d210d89921511ecb017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:bb:1c:0e:76:1e:3c:93:5b:88:87:b9:e2:
c1:56:d6:74:3f:8d:c5:f5:d7:14:b6:65:ef:e0:72:
5d:b2:5b:31:79:ec:c5:ac:e8:c5:20:b2:e8:e4:ec:
bf:be:2d:c6:75:44:a2:02:cc:7f:3a:06:fc:06:8b:
39:a9:04:be:2e:51:8c:d5:3d:13:1b:89:5c:9c:fa:
5b:e7:1d:c3:7a:6c:3d:89:a6:f5:29:0f:13:38:86:
58:a0:d6:89:a5:c1:26:5e:27:9a:e6:71:a6:ff:88:
df:18:a5:87:d7:40:59:8c:10:52:75:40:d0:2a:e3:
7d:3c:7d:72:5c:d5:2d:90:47:28:42:05:a1:4e:8d:
6a:99:c8:e8:7f:94:b1:81:67:7c:3f:9d:d4:e9:7a:
55:82:08:fe:f3:f4:b1:69:b9:3b:0f:eb:bf:1a:25:
9c:fd:5f:cb:00:0d:bf:23:7c:f4:0e:c7:4c:99:55:
e5:3c:c0:d2:49:91:31:ea:a3:3a:e9:06:48:25:ef:
e4:95:63:b0:71:ba:c3:f6:6d:f7:58:bf:e5:05:7e:
50:55:d1:ce:4c:b9:84:5c:35:ab:5a:41:a3:9e:1b:
8b:08:a8:3a:a7:12:d1:df:6b:44:e5:11:be:7c:55:
2e:eb:f6:03:27:85:77:11:10:53:6c:71:db:6e:1b:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4E:4C:A9:9E:20:D9:46:CB:08:5D:21:0D:89:92:15:11:EC:B0:17
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fa:6a:21:48:77:eb:d9:51:3f:e8:10:5a:34:ce:ab:be:ad:
b5:16:a1:8b:2e:c5:40:7b:53:d6:b7:8a:e5:87:b1:4c:2b:e3:
6c:fd:87:ec:f1:7f:b0:70:95:c3:d1:89:e8:06:fe:94:18:9d:
70:3b:16:4c:3d:7d:7a:3f:81:1f:09:07:df:45:16:06:a2:72:
02:74:50:16:ad:1f:e3:9b:1f:be:f4:9b:f0:2e:3c:77:ac:7a:
60:c5:80:74:d3:17:d8:94:7c:bb:4c:7e:7d:be:0a:bc:ca:55:
03:05:dc:82:b1:64:75:6d:59:b4:ef:78:3f:61:fa:35:bd:73:
cf:ed:ef:ed:f3:de:b9:ca:19:00:72:2c:32:a9:53:19:83:bb:
e8:52:9a:1f:61:26:52:f3:a9:8a:6b:cd:c8:3e:a1:11:e6:88:
80:a8:d5:2c:ca:49:8c:fd:b2:85:8b:e0:ab:66:5b:44:4e:cd:
f0:4b:ee:63:fd:39:87:31:4b:d1:38:e9:7a:36:7f:ec:dc:ee:
a4:17:98:bf:2b:3c:d5:a6:57:d8:91:83:1e:a9:35:ae:68:00:
36:3f:a9:fb:3f:59:a9:b9:0e:c5:73:07:c9:50:f4:04:0e:e3:
ca:04:d3:7f:35:dd:10:60:37:1e:94:81:49:21:c7:ec:4c:a5:
18:23:ce:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:04 2025 by rpki-client