Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: I9HKZqusxMsjxr9Dip0K9R3StBoZcghHKLnEoZjnSoE=
Subject key identifier: 03:D6:23:EB:EF:20:56:8D:74:0B:A3:38:37:5C:42:FD:BE:DE:20:5E
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019A4EF49F6F6574744B9E5988A4AE52ADC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 07FE
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=)
2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: uSVkZ5uI/kRGropGwMsb6hjn7ODB5S7+ILeGdoAxpBE=)
4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9f:6f:65:74:74:4b:9e:59:88:a4:ae:52:ad:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=03d623ebef20568d740ba338375c42fdbede205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:24:9e:f4:85:3b:d7:b1:c3:d1:0a:dc:da:0a:
f9:bb:ab:ac:fd:ed:c6:04:ce:61:71:8d:71:25:e2:
61:cb:48:ba:25:93:6e:ac:9c:cf:3a:b2:be:d5:cb:
ad:84:13:ff:a3:2b:b4:41:ee:e2:3d:1b:03:3e:c3:
43:bb:4c:60:e0:d2:dc:3a:55:c2:97:cf:cf:68:f2:
22:47:71:02:df:7c:8c:8b:e4:65:78:80:58:95:ea:
83:24:32:7c:e1:91:52:68:b6:17:33:fb:86:d3:25:
c0:ef:84:9b:cd:2b:13:3b:b0:29:0c:0f:d7:10:c9:
f7:8d:7c:ff:41:4e:20:74:8c:b8:b6:56:51:a4:56:
11:db:16:98:01:11:df:9c:9a:ca:90:f9:33:81:ee:
c1:24:6e:72:41:a4:e7:4e:26:c9:7e:e6:8d:4d:25:
1d:e7:09:69:61:0f:0a:31:50:2b:0e:c1:fa:e1:17:
96:91:26:f5:7a:ce:8e:96:2e:55:a4:6f:2d:54:25:
9d:a4:d3:5d:4d:c6:46:92:bb:a1:fe:ee:97:bc:a0:
ec:6d:59:3d:8f:68:c5:37:67:84:81:27:12:85:ca:
d8:79:97:13:8f:2f:c1:0c:dc:ce:51:b6:fa:ab:73:
fd:e7:fe:33:02:1a:90:70:51:ef:50:3c:c3:93:3e:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:23:EB:EF:20:56:8D:74:0B:A3:38:37:5C:42:FD:BE:DE:20:5E
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:98:ad:56:b7:c6:3b:58:b3:01:d1:db:1f:63:34:06:64:
9c:76:11:bb:96:4f:a0:97:04:c6:7a:02:ce:b6:b0:ab:ee:ae:
52:27:bb:77:35:1a:a8:12:45:76:68:8c:4a:6a:08:f4:de:44:
b7:43:9b:7e:d6:e4:7a:9a:47:79:3b:e4:9d:89:2c:e8:16:58:
be:ef:bc:c7:a9:b8:cc:f4:1b:6a:07:45:d4:3f:a3:7b:09:8e:
65:ee:b5:c1:e5:a8:60:6b:29:4a:f0:f9:f5:3d:4d:fd:e0:48:
fc:7a:a6:5c:69:4b:87:bb:9c:99:98:90:db:f3:56:f6:c3:e4:
6d:91:d8:9b:04:76:4b:75:c2:a1:a0:f9:2c:43:16:b3:4e:0c:
6a:d5:f9:66:82:cd:38:78:98:7d:a0:6a:21:1d:c5:91:a2:a2:
40:40:cb:3a:d7:01:fb:74:14:30:fd:44:d0:ba:52:2a:9e:ff:
79:6c:00:4a:d5:5c:a4:fc:76:85:e6:6d:fd:49:47:af:7b:4a:
32:05:58:9f:3f:cc:04:36:64:ac:07:9e:b0:53:3f:4f:42:39:
04:0c:16:08:b9:df:f9:48:2f:5b:bf:13:7b:98:56:db:db:e2:
d3:45:cc:9e:7d:60:1e:bf:05:fd:81:31:bd:92:07:b8:6e:bf:
aa:25:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:39:01 2025 by rpki-client