Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: 49/6BjdbWsAVdLWcn8tZxGJcdrm0MkByaPbnb1xGwiY=
Subject key identifier: 5B:22:ED:95:72:F6:CA:A3:0C:D9:4C:D5:05:9A:00:D3:A0:BF:02:02
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019A5676ABC1B7B3651C4FA437AA9B94E156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 08BF
Signing time: Thu 06 Nov 2025 00:00:09 +0000
Manifest this update: Thu 06 Nov 2025 00:00:09 +0000
Manifest next update: Fri 07 Nov 2025 00:00:09 +0000
Files and hashes: 1: 2WHBj7nv7xMvbv08rHniyjR0Fos.roa (hash: NBxIqPQUMGuLMFXfKzH7d1UwTfg7bcWtx2M9b2UcFWM=)
2: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: rmcMQddy8IWXBgET57o5vR2acWas/WvjupT0Md28GmM=)
3: cq_1j-d1kfo1p9Be3sTMytcMD24.roa (hash: JNpsnNRxrePb5e9Un324eWpFZYp8SbD0XvG6AqlNJIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:76:ab:c1:b7:b3:65:1c:4f:a4:37:aa:9b:94:e1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Nov 6 00:00:09 2025 GMT
Not After : Nov 7 00:00:09 2025 GMT
Subject: CN=5b22ed9572f6caa30cd94cd5059a00d3a0bf0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:b0:9d:cb:dd:69:63:d0:cb:ab:02:1b:39:
a9:67:61:1a:fa:2d:77:af:ee:9a:b0:1a:e2:82:c8:
de:14:cf:e6:fe:db:ef:fd:42:e0:33:4f:c8:45:dd:
ae:11:13:b7:32:ff:8c:ac:38:e7:51:30:29:28:f0:
f5:71:78:48:ca:ff:52:ce:42:0c:01:2b:01:8d:c2:
a5:17:41:23:a8:85:8c:51:9b:3c:41:86:ff:1a:6c:
c4:57:4b:a7:9b:65:d6:8b:65:21:5b:05:f6:b4:32:
a2:4e:fa:de:37:fa:f3:08:b6:7e:51:be:a1:75:cc:
f2:b3:df:ae:d1:f8:ef:01:e6:6d:c9:2c:22:a8:c7:
ec:a6:09:f6:60:8d:80:a9:c9:09:c2:a9:e6:d8:45:
ed:de:3b:13:43:ad:a5:cd:5e:ca:c8:d2:89:26:6f:
c2:df:69:f7:96:eb:75:13:32:c4:3c:f5:31:cb:75:
a1:c9:d6:0e:01:5e:01:e4:1e:29:a4:62:1a:52:81:
b2:94:d9:90:9f:fc:a0:61:67:33:88:3d:c7:6e:61:
fe:5b:b6:7f:be:0c:33:fc:de:44:f2:28:4f:05:90:
6f:3b:d9:85:c9:4d:7f:8a:dd:cf:37:a1:70:6b:1c:
06:db:5e:12:02:00:88:91:dd:6d:e4:c4:73:19:0f:
8a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:ED:95:72:F6:CA:A3:0C:D9:4C:D5:05:9A:00:D3:A0:BF:02:02
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a5:13:ce:3f:07:07:b2:95:23:8e:6f:f2:a3:b1:41:58:8a:
d3:1c:86:9d:75:9d:44:f3:a2:e9:a9:3e:6a:99:30:01:d8:98:
1c:43:e0:b0:6b:d6:e5:57:04:17:60:2d:d3:bc:85:f8:b4:af:
39:5c:e0:98:47:61:e2:6b:46:65:4c:a6:49:37:07:f3:95:3f:
07:1a:8c:9e:93:06:9b:d3:20:a5:92:39:9e:b1:0b:29:fe:fb:
b2:32:35:47:20:5b:3c:5e:d3:35:c5:6f:2c:94:0b:e6:ae:34:
ee:d2:2e:f8:86:6d:b5:c5:d5:c8:ef:0d:52:a3:54:46:a7:b8:
fd:11:53:d4:aa:bb:96:53:58:55:0d:17:8d:eb:ed:78:fc:73:
86:3e:11:45:17:ee:eb:2f:8d:55:e1:50:54:fa:35:76:ad:6d:
f2:6b:10:c2:6c:14:1a:a8:9d:54:7c:73:ee:36:21:82:75:15:
a4:2e:8b:e1:fe:30:22:04:07:02:50:f2:8b:38:43:1b:16:56:
80:90:6e:00:34:87:e6:7c:cc:11:4c:7d:0f:dd:18:48:d9:14:
9a:29:68:0a:63:c6:4b:fd:9a:c4:1d:69:cf:31:e7:4a:44:b5:
6c:f2:4e:b5:91:ec:52:19:77:e2:2f:3c:2c:4f:8d:64:a4:3f:
94:74:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:36:38 2025 by rpki-client