Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: FVaiHRSq+jrcarSMF7fJacivlRRyEXnNwqvvNl05tgM=
Subject key identifier: E5:91:35:DB:F9:D3:C6:03:66:49:36:93:3D:13:08:0A:C1:7A:68:20
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019A54C0945038497A875BFE5E83D541095B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 16:01:38 +0000
Manifest this update: Wed 05 Nov 2025 16:01:38 +0000
Manifest next update: Thu 06 Nov 2025 16:01:38 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: BG7MSx8Y0GwFK6rrcx5GVtKSHbQH2OULM0MkAe/oT3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:94:50:38:49:7a:87:5b:fe:5e:83:d5:41:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Nov 5 16:01:38 2025 GMT
Not After : Nov 6 16:01:38 2025 GMT
Subject: CN=e59135dbf9d3c603664936933d13080ac17a6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:11:35:01:41:9e:b9:e6:80:36:d1:5d:bd:
d8:7d:f7:47:b7:2d:b8:91:f4:c2:b0:01:d3:5a:fb:
62:03:bc:9d:9e:7e:82:94:42:2c:be:2e:c2:df:6d:
7a:ba:29:2b:f9:a1:0c:6f:1a:4c:86:77:60:62:95:
12:57:41:f1:9a:18:da:c5:c1:ba:27:6c:a0:69:52:
da:76:32:e4:52:fe:25:fb:87:b7:25:a3:b3:65:cd:
67:7a:f8:44:0d:1a:62:a8:72:e7:fc:8d:0e:57:73:
ec:9a:d3:56:c4:6d:40:f2:55:6c:69:9b:8e:66:95:
3d:61:ac:c2:2d:d5:11:23:c8:7f:00:8d:f1:b3:8e:
80:5c:6c:bc:16:f0:63:c3:dc:a9:b5:39:ff:f2:66:
68:de:20:ae:4c:b7:11:92:62:b1:14:c8:57:95:e4:
44:30:7d:5d:2e:29:cd:b2:a9:10:2c:61:27:43:73:
7c:59:a1:a6:39:a7:ab:c6:8b:b3:6d:20:e8:ac:68:
3f:fb:95:09:a6:e4:99:7c:60:ba:02:79:31:da:01:
e5:5b:f3:81:f0:dc:73:d0:15:48:84:f2:f1:92:f4:
51:94:f0:e4:ff:6d:ce:bf:5d:30:13:8a:9a:1c:9f:
b0:af:3b:85:b3:e2:1c:31:a2:d5:3c:8a:dd:8d:c7:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:91:35:DB:F9:D3:C6:03:66:49:36:93:3D:13:08:0A:C1:7A:68:20
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:fe:73:c0:9c:51:a5:9c:9c:dd:dd:72:50:f7:d4:72:d3:
b3:68:9e:11:df:89:fc:bf:b1:a7:43:0b:0b:12:33:60:c8:4d:
ae:63:b4:d5:0a:31:44:78:fd:af:8f:e7:31:1b:ea:bd:e3:48:
60:16:e7:f6:4c:63:8c:6c:f4:00:17:09:55:76:2a:ce:63:33:
f8:76:c3:4d:0e:27:8c:5d:5b:9c:e4:15:2b:aa:c6:b5:99:cf:
87:64:52:e9:bc:13:33:6e:f6:7b:58:51:a0:54:75:9b:65:2e:
1f:85:32:15:7c:1b:39:e3:c1:1e:92:16:49:b2:0a:df:6b:b8:
88:c4:71:da:df:67:98:e7:26:89:3c:71:73:b0:c2:07:4d:5f:
07:e8:cf:d9:c2:65:36:93:01:97:ad:c7:db:9e:cd:fc:03:db:
f9:3c:40:38:3c:f5:f6:44:df:19:72:b5:33:65:f7:11:95:bc:
c7:49:d5:2f:7d:36:c7:4a:b3:4c:fb:dd:f7:70:ab:06:51:38:
12:d8:58:4e:1a:97:73:20:5c:36:3c:a5:fc:c1:ba:db:cc:e6:
68:52:55:84:79:78:58:97:e2:78:b8:84:7b:c9:fb:29:a1:78:
38:eb:97:14:08:b9:de:07:bd:51:85:ef:d6:aa:20:5b:52:26:
a5:ce:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:32 2025 by rpki-client