Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier: ZOYjzNA5Vy1JuRCfWSajB2t5AMwRBJmo6QkPYfaPGV4=
Subject key identifier: 93:D9:5A:D0:8C:F4:4B:C7:BD:6D:19:80:A7:F1:A5:BA:81:A8:9C:17
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial: 019A4FD0022C62C35577966EC1DDB9FE686E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number: 04BE
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: 7NXJKs3qu/ryPFa5TV49lAWB9L3XzqP41n6W1cFm4wA=)
2: r5LfqFNzBSvkVNYj6vVDPex2eII.roa (hash: zD3Y+yhvhdTCP2LNWWBpR2SBF00RvRC4BFmgCTYqEsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:02:2c:62:c3:55:77:96:6e:c1:dd:b9:fe:68:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=93d95ad08cf44bc7bd6d1980a7f1a5ba81a89c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:bc:2e:91:2f:6f:5a:25:08:9e:16:11:89:
ae:63:eb:f3:bb:1d:b8:68:72:57:d7:4e:29:e9:b1:
19:76:85:88:da:ce:9f:33:5f:99:7d:b1:e3:d5:74:
83:77:74:c1:39:90:17:75:92:53:c2:e9:5a:9b:ca:
73:fd:ad:45:56:5e:44:f2:03:29:09:13:fb:39:d9:
17:fa:4c:01:c7:1a:b0:55:07:37:b9:14:c8:af:99:
a2:b9:b3:51:a5:9e:1f:d1:33:ff:c2:d7:2b:a2:0f:
1e:e5:e3:a0:12:0a:13:91:a2:9d:88:fa:58:50:98:
10:1b:bf:40:d0:b3:1c:ca:3e:b1:72:98:e8:12:a3:
72:2c:6c:9b:14:37:85:3f:39:aa:db:f9:a9:2d:59:
23:d3:11:b6:64:82:b8:e9:da:11:32:3f:64:1b:b7:
0c:d7:f1:d1:65:80:2f:b6:5f:0b:63:9d:ed:06:82:
ae:ba:d5:33:30:f6:e9:8f:86:8e:e9:42:80:37:69:
e3:fc:77:73:39:a8:46:1c:c8:f8:f9:1c:29:e5:8a:
45:2b:6b:d1:0c:9e:6f:f0:95:29:63:cf:b7:82:aa:
7d:20:58:b2:b2:b6:0c:31:a4:58:3b:3f:93:a7:09:
3c:b7:72:20:09:08:27:74:63:cb:02:fe:5a:1b:6f:
27:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:5A:D0:8C:F4:4B:C7:BD:6D:19:80:A7:F1:A5:BA:81:A8:9C:17
X509v3 Authority Key Identifier:
keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:19:bb:29:3b:9c:5c:66:a8:32:7e:f9:74:23:e2:b6:b5:
2d:0a:99:3d:49:7c:a9:35:b2:00:ca:93:01:5c:5a:4b:db:57:
33:3d:71:32:8b:29:c5:dd:ed:e9:9e:62:5c:2d:26:0f:13:9f:
a5:11:13:bb:e4:41:9a:78:ba:8e:e9:53:7f:34:1f:31:7d:e7:
54:40:91:7c:16:b5:74:a3:7e:81:80:b1:8d:24:79:b7:8d:a3:
70:ae:06:0f:06:76:6f:bf:ec:51:03:bd:59:35:aa:38:9e:32:
bb:40:fe:00:66:02:9f:3a:04:fc:48:85:f4:45:bc:01:0a:44:
b7:57:48:c2:3c:33:26:25:c9:8a:dc:00:83:cb:46:5c:86:79:
cd:81:48:4f:a6:d3:4d:7e:2b:c5:c0:88:36:51:83:1a:10:2e:
5c:8d:89:72:f7:21:29:2b:1e:2c:07:12:d8:e2:d8:dc:42:c9:
c9:74:ad:31:e4:25:14:0d:7a:72:93:8f:93:2a:eb:1c:60:2b:
e4:83:00:9e:99:67:ab:30:a1:f2:d7:56:e8:4e:4f:87:1f:45:
60:3f:02:97:f3:22:73:44:44:73:6a:ec:25:e8:56:38:f8:e5:
bc:bf:57:16:31:5f:85:4a:3b:a8:9c:bd:57:93:0b:91:2c:ed:
a2:5f:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:32:33 2025 by rpki-client