Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: Vj0Y/u94yrf59xisc2WjQg2OkTiYwQsZKENmAiSo4Uk=
Subject key identifier: 1A:D4:99:67:5D:E1:2F:7F:61:C6:E9:AE:69:40:0A:A6:10:11:91:8B
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 019A4E86894C2DAB8D131A3B0DBB2941C5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 080D
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 5GMmz8vlYX0qjGsJgcSUzajpW9yIhJFIC/k4lx2oX/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:89:4c:2d:ab:8d:13:1a:3b:0d:bb:29:41:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=1ad499675de12f7f61c6e9ae69400aa61011918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:cb:70:5f:1a:26:24:23:37:2e:79:c8:ee:
a2:41:82:e9:b4:00:ec:f5:a2:8e:75:b6:c2:d2:ac:
61:3e:f2:b2:3b:98:5e:3a:33:fe:c7:f7:f1:10:33:
87:6b:29:a4:d1:79:ef:a3:7a:78:40:b0:55:cc:fa:
3a:0a:b5:19:58:d5:ba:0c:58:cd:b2:73:a5:d4:e0:
e9:6b:a7:88:46:55:86:d4:d0:f6:17:0f:a9:00:66:
02:77:a1:70:2c:61:57:89:73:d1:6f:de:81:74:7f:
b1:e3:8b:e3:19:57:f7:5c:04:f8:0d:b9:3d:ec:3a:
19:38:92:43:f0:55:f9:f0:52:f8:e6:2b:8e:b6:f3:
25:2a:26:13:61:1b:9c:a8:e1:76:8d:13:7d:ab:5b:
c0:d6:29:f2:f6:7d:97:5e:b3:3e:d1:59:92:73:c9:
55:2d:ac:ea:2b:c7:70:49:2b:08:88:61:71:0d:77:
8b:a2:3f:38:19:90:f2:91:3d:4d:2e:3b:c7:99:ea:
aa:b8:b2:8b:62:be:2a:be:5b:20:3d:43:9f:3d:00:
fd:35:2e:a8:77:89:71:0a:62:d7:7f:de:07:66:6b:
13:09:ae:9e:b9:0a:e2:8c:35:0f:a5:99:89:3b:ce:
a4:53:fc:a8:99:90:b3:1c:ae:84:7c:a1:1c:80:68:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:99:67:5D:E1:2F:7F:61:C6:E9:AE:69:40:0A:A6:10:11:91:8B
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8f:42:59:8a:19:9a:63:b5:4b:5a:55:32:06:03:38:6a:44:
b5:06:1c:66:dd:bc:66:4b:f7:93:08:6d:9b:97:05:56:cb:38:
ed:fe:5c:53:09:c8:d7:23:95:e0:c0:63:72:6a:d7:e0:4b:86:
ed:d2:74:fa:5a:82:5c:2b:0b:b8:8f:15:ca:81:fe:55:36:72:
a6:bc:e6:3b:c7:d0:82:9c:9d:5f:47:09:e4:3a:02:81:d9:bb:
94:6b:96:5f:9c:76:1d:94:e4:79:a4:6f:d8:0b:d2:40:58:9e:
d7:20:21:95:18:4b:6c:a0:d9:93:39:8e:36:9d:2a:a5:76:39:
f7:18:43:c5:1c:d1:c0:6e:f0:80:b0:b2:e4:09:31:56:3f:ed:
bd:bb:39:68:73:5b:db:dc:c4:c8:15:0a:84:fd:bb:76:6a:84:
86:3a:9e:4e:35:95:d6:ef:d2:01:4c:12:c7:66:bd:a8:59:3f:
66:bb:d7:8e:ad:86:58:fc:e4:16:54:07:80:16:3a:59:aa:0f:
fc:a4:76:89:64:08:4e:c2:ef:83:fa:28:78:71:7b:63:08:f4:
ca:ed:f3:d0:87:63:24:57:21:a6:15:a9:3f:b9:28:5f:22:b5:
26:ce:49:9d:30:a4:0b:44:3f:aa:0c:1c:a0:c3:b1:42:37:fa:
0b:2c:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:05 2025 by rpki-client