Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: IVH8zcXFx12RBn4Vndg9/zwNyG2kH6hLA1OlgVeqwjk=
Subject key identifier: 8E:AF:DD:C6:16:C1:DC:3D:34:36:A4:3A:7F:6C:5E:03:E0:BD:C3:13
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019A541B15E00D2EDB61F82C877D41B9997C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0641
Signing time: Wed 05 Nov 2025 13:00:52 +0000
Manifest this update: Wed 05 Nov 2025 13:00:52 +0000
Manifest next update: Thu 06 Nov 2025 13:00:52 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: /JKMD976zP5e0FxPklMeCIPVGvwtI9Ejz2SAO5XZVW8=)
2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=)
3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:15:e0:0d:2e:db:61:f8:2c:87:7d:41:b9:99:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Nov 5 13:00:52 2025 GMT
Not After : Nov 6 13:00:52 2025 GMT
Subject: CN=8eafddc616c1dc3d3436a43a7f6c5e03e0bdc313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:13:21:cd:45:17:a2:69:59:a2:b2:1b:3f:
51:30:a1:18:b2:16:af:78:60:d0:40:7c:ae:19:fe:
65:69:b2:6c:eb:7e:b6:1e:72:8c:9e:01:44:6f:22:
74:a2:64:ed:34:c5:65:2a:92:5c:f4:b0:20:69:18:
3b:c5:af:b9:46:83:47:37:fe:7f:86:82:5e:fb:32:
a5:7c:d9:35:14:60:81:35:f5:b4:03:d2:36:c6:ff:
91:51:2a:56:20:03:5d:20:06:63:6f:a5:00:ab:e2:
83:87:d9:f9:a0:93:9c:06:d2:5f:3f:8f:63:ad:53:
72:12:f9:2e:bb:a9:7b:aa:b8:48:67:e8:17:25:b3:
c1:18:1b:57:16:d7:10:3c:54:1b:78:b9:e3:df:58:
da:36:d0:66:46:82:bb:49:99:30:5d:37:b5:8d:f9:
29:04:6d:ec:2a:52:b3:fb:dc:b5:24:7d:21:22:71:
a6:37:9a:44:23:09:d0:b1:8f:19:a3:95:21:e1:6e:
e0:34:c8:fe:a3:4e:77:95:9e:3a:de:4f:cf:41:86:
47:44:89:ec:0b:b6:c3:1c:4d:c0:42:d5:7b:a9:db:
31:31:c2:99:43:b5:7f:c2:df:7f:4c:3e:6a:8c:16:
64:ba:97:35:7a:31:47:4c:f6:99:ea:ab:6d:e5:0f:
3c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:DD:C6:16:C1:DC:3D:34:36:A4:3A:7F:6C:5E:03:E0:BD:C3:13
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:53:ee:ae:99:db:9f:97:23:6c:13:e7:8d:1e:4f:89:72:f1:
05:8a:9a:37:5b:f6:23:6e:08:1e:5c:70:fc:c6:f2:80:9c:0c:
85:71:99:a5:33:8d:f0:5b:31:4c:8e:72:d8:19:d0:0c:d2:29:
de:b4:be:0d:a6:03:36:25:e2:e0:22:63:87:b7:eb:1a:9a:63:
70:81:ce:63:55:65:bd:5c:4e:59:af:3a:21:47:ef:d0:72:5a:
f5:f5:2e:b7:4c:56:95:8e:47:59:1d:a3:08:9a:f5:c5:94:3a:
8c:8c:94:e8:fc:f2:32:fa:2b:e3:39:ff:81:94:5a:b0:27:33:
70:c4:06:fa:5c:e2:f4:ca:79:b1:e1:81:41:93:88:6b:ca:a7:
ad:7a:54:97:ee:65:4a:b5:a7:46:86:65:95:0f:99:95:ce:be:
74:86:3f:2a:e8:7f:3c:91:c0:c2:8d:2b:c1:99:e7:3c:6d:e2:
ca:a5:f0:5a:fb:3c:2a:bc:5d:c4:dd:8d:cd:bd:9c:19:5e:2f:
62:de:6e:fa:36:13:74:b6:44:a3:ce:31:a5:1a:41:06:d1:87:
c3:5d:8e:4f:76:b8:10:f9:d7:5e:d4:70:c7:a9:33:29:d2:94:
ee:3b:af:bf:27:b1:b2:23:f3:cb:ac:1b:85:f4:4b:59:80:d3:
52:bb:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:14:46 2025 by rpki-client