Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: 6TQqocmnHphvtfn0qwZ7YFMKedXHry19baJCNrd4fGQ=
Subject key identifier: 3D:4D:57:86:E0:25:E1:81:78:73:22:1C:D6:F2:B9:44:B9:44:E8:54
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 019A4DE2428EAADB073194015A847132C7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0E81
Signing time: Tue 04 Nov 2025 08:01:04 +0000
Manifest this update: Tue 04 Nov 2025 08:01:04 +0000
Manifest next update: Wed 05 Nov 2025 08:01:04 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: xau5sBYKoPaRLQJmUrScAo2234Vfn7HZ9l7f79OsTVs=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:42:8e:aa:db:07:31:94:01:5a:84:71:32:c7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Nov 4 08:01:04 2025 GMT
Not After : Nov 5 08:01:04 2025 GMT
Subject: CN=3d4d5786e025e1817873221cd6f2b944b944e854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b5:9e:ca:38:ef:c2:1e:d9:86:25:2b:3f:f4:
6a:a6:95:4d:4b:bc:eb:6c:87:fd:a8:a1:6a:6e:4e:
99:98:b2:ba:f4:cf:00:2f:e7:f8:29:65:75:e8:dc:
9f:5b:77:a3:8e:3d:7d:aa:cf:56:3c:1f:5c:b6:01:
41:a8:9e:e4:7f:7f:ea:91:37:1b:74:d5:75:ad:9c:
1d:12:0c:28:cd:fa:3f:95:88:a6:67:7b:c9:15:ff:
db:3b:86:2d:b2:fd:b0:05:bb:23:55:92:6c:37:70:
6d:c1:0d:1e:c9:46:33:7c:05:e4:a3:85:49:b1:ac:
ef:69:39:72:a5:8c:f6:a8:17:85:ce:3c:78:1a:34:
9d:6d:3e:6b:16:91:9f:84:bd:74:a0:93:51:cc:f7:
59:77:f4:42:9b:dc:8a:a9:69:12:3d:41:ac:dd:8e:
e1:0f:8b:94:72:2d:87:21:fd:78:ad:fb:19:65:8f:
85:d9:5e:65:8f:d3:4c:99:6c:66:89:61:4d:30:d1:
06:a9:bf:bc:44:33:53:7b:b4:eb:35:f8:49:a7:4e:
06:d5:29:75:a7:a6:1e:84:1e:c1:4d:fc:80:06:c1:
13:72:20:01:c2:b0:a0:77:bd:bd:01:6a:7f:1f:58:
cc:ea:74:3e:e5:54:e3:e4:12:47:be:6e:ec:5d:67:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:57:86:E0:25:E1:81:78:73:22:1C:D6:F2:B9:44:B9:44:E8:54
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8a:c1:73:2b:52:8d:1d:8a:b4:ac:5c:7c:6d:82:6e:fd:6b:
15:76:04:36:6a:68:1f:67:17:21:b9:49:c9:be:42:21:3c:6f:
0e:31:24:db:e8:31:e8:26:65:ab:ce:91:24:e1:b5:f5:d3:4e:
c5:57:cc:1e:6f:cc:60:bc:44:32:ce:fe:dc:8b:66:c2:79:a6:
cb:e3:8d:28:14:3e:95:4c:7a:35:48:c3:5d:00:17:c9:3d:ab:
21:ca:61:6a:c2:1c:d9:fa:c3:49:68:61:78:b7:fc:44:9b:63:
db:e5:7c:c7:91:37:5f:48:a0:c3:97:a0:ab:53:98:1b:56:a4:
2e:ba:71:94:e8:a3:75:0d:80:69:99:16:c3:3b:f0:e7:c7:d4:
35:c3:ec:2f:27:07:5f:56:78:df:7b:5f:f0:05:38:d0:94:8c:
76:f4:08:80:1e:19:ff:48:5b:93:6e:04:fc:d6:0b:73:e8:ff:
79:57:34:1d:ca:1b:1e:f3:6e:aa:1f:4a:ef:8f:47:c8:cd:7d:
4e:7d:ea:58:fe:b5:c1:63:c9:73:59:d2:33:5e:53:07:44:1f:
59:2c:98:cb:7f:06:2e:f9:4b:59:4f:c3:85:06:a1:0f:1d:d6:
f5:f3:9b:72:74:e3:44:53:b5:86:5b:a7:a2:06:1c:59:50:fc:
fd:8c:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:42 2025 by rpki-client