Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: /83eY/4oSwOP/Hi3RFqnjsLzLXP8iHnfk9lQ/VP6MA0=
Subject key identifier: D9:7E:6A:BA:38:45:5A:F2:57:FB:09:0A:67:FC:D6:94:A2:30:31:AB
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 019A4E1903F0F1E144C2AE87EFD3CDFA3360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 0875
Signing time: Tue 04 Nov 2025 09:00:53 +0000
Manifest this update: Tue 04 Nov 2025 09:00:53 +0000
Manifest next update: Wed 05 Nov 2025 09:00:53 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: SZkzc2b9GfsNKJJmg+i+wLZxFJG8jsOqqs7cUk3j8eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:03:f0:f1:e1:44:c2:ae:87:ef:d3:cd:fa:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Nov 4 09:00:53 2025 GMT
Not After : Nov 5 09:00:53 2025 GMT
Subject: CN=d97e6aba38455af257fb090a67fcd694a23031ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:92:8f:bc:cc:34:b0:5b:b5:62:22:ac:e8:
eb:51:d3:fc:e4:38:4e:da:c4:20:85:d6:ad:78:5c:
30:9a:e3:72:bc:6c:94:99:e7:1f:96:7c:14:3b:25:
99:af:f8:50:29:46:62:b5:9c:94:ab:a8:82:f1:b8:
40:b1:dc:50:ac:f0:b3:34:cd:5a:71:ad:0e:57:9c:
f0:04:f0:e6:8f:83:5d:0f:bd:de:8e:c4:64:ac:ce:
0a:b3:06:a9:22:cb:25:e2:10:72:74:d7:e3:fe:56:
8c:78:b4:b1:e2:52:5c:0c:32:79:61:c2:b4:36:38:
4c:d8:e9:11:40:fb:1f:89:d4:0b:e1:87:86:0e:6c:
9f:52:f1:83:23:90:10:b2:c4:3a:99:14:c6:90:35:
0e:00:ea:90:a8:59:ed:9b:30:f8:4f:d1:c5:b5:df:
46:e1:a7:ef:79:d4:be:a2:77:22:f0:99:e6:f4:c5:
dc:99:c6:16:3a:7f:d8:14:b0:9f:79:19:7f:b2:5c:
27:f3:02:d5:cd:02:cd:eb:5f:56:1c:78:4f:ff:0d:
0d:b2:94:78:22:90:73:fc:32:c9:51:41:24:0d:04:
14:ed:16:e1:1b:be:cd:ec:2c:1b:bb:37:ec:a8:16:
29:be:6c:41:6f:04:15:70:30:5a:f0:07:07:aa:ae:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:6A:BA:38:45:5A:F2:57:FB:09:0A:67:FC:D6:94:A2:30:31:AB
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:42:e4:3d:33:52:cb:4a:b9:85:e4:8f:53:f9:ba:4b:31:ac:
7a:43:86:cf:6b:cf:1b:44:9a:51:5a:d8:fd:23:c4:e8:1d:14:
cf:20:36:1a:ee:90:af:7d:0c:55:6f:1b:c8:3f:23:d8:63:4a:
18:0d:22:3f:66:41:e5:ca:ca:3d:ff:22:72:84:52:87:b9:d4:
5b:a9:58:e7:2c:c5:78:bf:b6:27:25:3f:ae:48:23:60:29:a3:
85:c4:1f:a5:2c:1f:d9:c1:67:8b:01:db:2d:87:99:6e:f4:36:
bc:96:86:d6:d8:b6:38:b6:11:e1:d5:ae:65:6c:34:a8:2d:4d:
4e:26:84:f0:04:63:e2:3e:da:5a:43:03:50:1f:16:89:59:5b:
12:0a:12:fa:87:56:70:40:94:27:88:a6:e5:7c:89:3b:2b:43:
b7:c5:dd:13:35:a4:35:e9:cc:68:9f:59:c9:0e:e4:e8:3e:02:
d9:84:1c:22:b6:06:77:7c:fa:ac:8d:40:64:ec:dc:ca:dd:e6:
59:a5:3f:e2:ca:d9:ce:bf:35:5c:ae:44:ea:3b:4f:09:f2:0c:
ec:7e:d8:c4:f2:cc:5b:54:72:53:82:57:69:0b:3b:54:cb:b5:
4a:01:05:d6:00:49:a7:47:86:7e:2a:fe:70:59:cc:2c:b6:47:
35:81:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:16 2025 by rpki-client