Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: WugGrpKdDrQLgqTFBf9tXQ1Ruc++stajL2pJHcF8OYk=
Subject key identifier: 59:27:46:5F:32:E7:8B:90:27:8E:E1:92:BF:CC:59:BA:20:52:1C:A9
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 019A522C249119DEE550009A6D94EFDB90C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 04:00:15 +0000
Manifest this update: Wed 05 Nov 2025 04:00:15 +0000
Manifest next update: Thu 06 Nov 2025 04:00:15 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: a7a9Luk/RaE5Ltr5VNR5h20pp4TjbS57lh6G6vKyIn0=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:24:91:19:de:e5:50:00:9a:6d:94:ef:db:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Nov 5 04:00:15 2025 GMT
Not After : Nov 6 04:00:15 2025 GMT
Subject: CN=5927465f32e78b90278ee192bfcc59ba20521ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:b7:80:96:c7:3d:a2:53:26:dd:82:7d:e9:
ef:bc:3a:ed:97:6a:8f:94:b2:dc:86:02:ca:91:8d:
0a:51:a4:44:42:13:b2:f7:b2:df:e4:ea:2c:f7:94:
90:47:f3:01:c0:c0:8d:73:6f:3e:58:11:60:18:4b:
9e:bc:b5:7f:96:8b:94:a3:cc:2b:9f:48:c9:33:36:
02:09:be:3f:a9:8a:e7:f7:79:cf:a2:9f:ed:4d:0c:
95:f8:17:e7:24:48:b8:d8:e0:30:df:ea:56:f8:2e:
1e:37:23:a6:93:1b:0d:59:37:d1:61:53:4c:a4:28:
e9:e4:92:77:1e:5c:50:68:0c:44:29:49:5d:32:5d:
5b:e8:c3:26:f1:ef:87:a0:4c:8a:04:31:10:bf:79:
e5:95:cb:74:72:6b:a3:44:c9:5b:c3:14:12:72:86:
f9:27:8c:ed:57:a9:db:a1:bc:3a:99:cd:f1:37:80:
97:4c:0c:16:2b:45:31:17:11:5f:03:e3:09:88:f8:
d3:2f:2d:95:5e:4a:72:6a:f5:bb:50:64:f2:0b:14:
c7:0e:6f:27:93:1c:db:b3:a5:31:62:11:93:ef:db:
bf:06:ad:54:d0:7a:6c:ca:d0:9a:92:72:df:2e:48:
da:e6:b1:14:30:17:0c:fc:0a:fa:e9:fc:fb:2f:d8:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:46:5F:32:E7:8B:90:27:8E:E1:92:BF:CC:59:BA:20:52:1C:A9
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:52:ce:fc:d4:29:b5:bd:1a:a3:c2:48:a8:4b:f4:59:b5:
0c:c3:2a:63:16:0c:b4:ef:58:d5:65:7b:51:4a:4f:3d:25:50:
d4:fd:1b:33:fc:5f:c1:db:1a:96:a1:3e:70:70:de:b2:7d:82:
4f:09:fb:0c:f2:04:74:f6:fc:8b:69:91:60:a6:3d:24:e3:16:
a8:0a:9b:36:09:ea:6c:e9:05:99:ef:b0:d0:b9:32:2d:fe:da:
e6:56:86:0d:52:43:d6:ac:e2:a2:ce:06:74:a6:b4:d0:91:22:
f3:7c:c0:40:1a:e9:e5:b5:1a:b2:fb:15:0c:a8:25:e9:91:a6:
2e:11:6e:f9:96:b2:00:bc:b2:00:a7:5b:35:fa:9e:79:50:71:
e4:3c:d5:22:b4:21:39:70:57:81:33:f3:f2:c1:13:06:4e:6e:
eb:12:21:bb:d8:2d:b5:c6:8c:e6:25:ac:95:ed:91:ff:bf:42:
c5:8e:0f:71:dc:1f:30:ed:f3:8f:d7:06:0d:ca:bf:9a:29:6c:
19:82:98:b2:e1:0f:8d:50:3b:20:ad:df:cf:55:a3:3d:fd:7a:
ad:b4:c0:2f:17:12:3b:8e:7d:01:f3:7b:1c:f3:e4:52:6d:0e:
d2:f1:8f:79:a4:f2:85:49:de:f4:5c:56:15:e1:a3:45:13:6a:
f2:ba:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:44 2025 by rpki-client