Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: FXelXTS6cr+Q6TlHFinUNArTz2sJV0pyEkmv0G0FoXg=
Subject key identifier: FF:9F:68:96:30:2E:32:C1:95:8C:17:E5:49:18:37:55:6A:06:7A:D8
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019A53AD50B59D3A0C387B5381D0EDA293AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 14F4
Signing time: Wed 05 Nov 2025 11:00:58 +0000
Manifest this update: Wed 05 Nov 2025 11:00:58 +0000
Manifest next update: Thu 06 Nov 2025 11:00:58 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: HQpWXq0PnQ5Qa/cPW99EF3c+kZ6jZC3LrJrHm5GjhAo=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:50:b5:9d:3a:0c:38:7b:53:81:d0:ed:a2:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Nov 5 11:00:58 2025 GMT
Not After : Nov 6 11:00:58 2025 GMT
Subject: CN=ff9f6896302e32c1958c17e5491837556a067ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:71:d0:81:ac:bf:00:0e:01:90:d6:fd:39:
c9:76:db:58:39:a1:01:50:b7:e3:bb:ff:92:91:a5:
e9:5a:82:9c:7a:64:b6:57:c7:cb:66:5f:fe:83:24:
04:59:3b:e3:8c:ae:b6:ec:fc:84:d8:aa:7c:10:04:
ec:a5:ca:43:75:fa:89:1b:07:08:45:1f:ba:fd:da:
68:76:a9:4a:3c:fe:a1:24:17:fa:a7:91:45:4b:df:
aa:4e:d6:a5:7b:70:bd:24:c5:1e:78:ac:b4:bb:8d:
30:65:2f:e2:f2:a7:12:8a:40:cc:91:49:68:18:39:
d1:9f:c7:eb:89:ba:d8:58:2a:09:d6:9a:e1:73:be:
8f:a4:4e:59:19:b5:5d:e4:56:70:97:be:e8:45:10:
b4:6d:30:19:28:68:c7:be:65:e4:21:4f:9e:dc:c7:
cb:81:71:84:3b:6c:dc:11:c9:ce:fe:67:9a:af:f3:
46:52:c8:d9:3f:98:4d:fb:b0:69:11:3b:ce:bb:b7:
0c:c5:a2:f7:fd:2a:ae:85:69:31:9b:37:29:d9:45:
00:e6:26:1f:51:f5:f9:9c:59:dc:0e:a0:90:f6:8b:
6c:32:a7:58:12:74:39:8e:97:d4:d6:1a:27:17:97:
a4:dd:03:ef:62:61:b9:fe:c1:70:66:2e:3c:52:5a:
d6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9F:68:96:30:2E:32:C1:95:8C:17:E5:49:18:37:55:6A:06:7A:D8
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7c:ae:8c:81:95:30:22:81:94:45:ce:39:11:f6:cf:38:db:
bb:d1:49:d8:91:91:45:2d:c2:14:47:7d:93:14:3d:2f:d6:6c:
1a:9a:19:db:41:b0:d6:d2:23:e7:92:14:cc:55:37:0f:e3:93:
db:94:a9:0e:ed:63:d9:3c:09:49:a3:9a:b0:49:c4:d9:4a:6d:
f2:b2:7a:ee:03:0f:9f:b5:39:30:f7:c8:de:b7:be:4f:39:69:
19:7c:61:3e:7c:2c:f0:cc:fd:2e:0e:37:08:f8:e9:4e:2b:6e:
60:f9:2a:60:38:95:31:68:d4:4c:77:d7:ca:9f:71:15:03:44:
4f:9f:3b:25:35:8b:7f:ea:84:74:fa:24:75:5a:76:80:50:1b:
94:a8:a6:95:e4:e0:de:62:b6:d5:e9:61:63:33:49:5b:27:35:
44:7e:81:54:f9:63:83:d7:39:04:53:01:f9:c9:f8:45:a7:4f:
c9:02:94:6d:b1:13:99:24:eb:a4:be:cf:2c:2f:8d:23:43:ec:
57:e7:36:2e:8d:76:16:55:45:11:71:3a:1f:b5:f9:e6:38:3f:
79:4f:0c:0c:13:28:7d:39:c8:84:66:9b:21:17:d5:43:e1:ea:
a7:91:a3:5d:ab:13:fd:89:3f:42:86:79:ab:c7:f3:a3:08:a3:
c7:b3:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:15 2025 by rpki-client