Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: S8Kb1BMfZWnLWwbw8bYsL6zechsU2po2b9yitk5MswE=
Subject key identifier: 4C:E3:5D:2D:5D:11:6D:2F:4A:DD:ED:50:F3:91:58:CD:93:47:B9:11
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019A53E3E262252C29823098EAC576624D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 0185
Signing time: Wed 05 Nov 2025 12:00:34 +0000
Manifest this update: Wed 05 Nov 2025 12:00:34 +0000
Manifest next update: Thu 06 Nov 2025 12:00:34 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: OgXZnYWQ7QvaGujMJFFnYsNlQIO3wiU+U7+U+5D3bxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e2:62:25:2c:29:82:30:98:ea:c5:76:62:4d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Nov 5 12:00:34 2025 GMT
Not After : Nov 6 12:00:34 2025 GMT
Subject: CN=4ce35d2d5d116d2f4added50f39158cd9347b911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:42:db:5d:21:09:6f:61:88:cb:df:f5:7d:
67:05:40:68:4e:f6:72:93:eb:8d:f6:d7:a0:1f:67:
d8:1f:2c:66:18:03:22:c7:ff:47:0b:d6:5b:9d:15:
b0:6f:74:7c:ff:06:00:12:72:b3:fe:b6:8d:50:11:
03:3c:da:48:9d:c5:c8:47:64:e9:2a:67:e1:7c:db:
9d:51:bc:41:4b:bf:be:46:5d:94:a6:49:06:3b:04:
cf:56:c4:1c:33:73:22:15:18:06:79:f6:e0:3b:48:
fd:ac:5a:cb:c6:bc:5d:06:a4:cb:7a:ce:19:e2:4f:
ec:0a:90:c5:a7:2e:63:8e:29:30:53:d8:4d:21:c0:
9a:f5:d4:b4:30:d2:6e:d6:d9:9c:50:22:e2:a9:6a:
28:0b:00:36:db:a3:76:42:5e:89:23:32:80:88:51:
37:81:3b:9a:33:c8:90:f2:a2:96:a5:60:da:02:83:
45:92:d5:64:73:2a:64:7e:c7:f7:56:f7:b1:07:87:
45:49:93:cd:a8:93:1b:01:5d:a2:34:72:45:c4:26:
f5:9e:04:bd:bc:8c:83:1d:13:5b:65:c7:31:ef:79:
69:33:59:37:c6:53:a0:ce:50:e6:ed:6f:21:e2:d7:
e9:4d:1d:01:6c:a6:8a:fa:75:d6:f4:d3:44:a9:3e:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:5D:2D:5D:11:6D:2F:4A:DD:ED:50:F3:91:58:CD:93:47:B9:11
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:96:7d:5c:a2:6a:15:46:b2:c4:69:89:72:3f:62:32:f3:
dc:b6:16:9c:02:7f:16:cf:71:45:a7:12:0e:60:6d:ca:73:82:
52:8f:e5:a8:3a:55:fd:ec:15:7d:b2:5e:31:53:51:0f:e2:26:
2e:40:69:83:85:a0:cd:44:ea:ec:7d:2b:ca:4e:6c:57:21:09:
bd:c5:67:c4:8d:79:88:b0:42:e9:61:12:f8:79:0e:f4:05:3d:
ae:bd:22:4d:1a:b0:c1:42:b4:3a:ff:5e:aa:98:2a:71:72:ac:
1e:95:44:7b:85:69:93:ce:a3:29:70:77:48:f9:b9:60:81:75:
9f:ba:72:9b:cc:05:49:ef:ba:b2:ac:31:06:9a:03:7d:d4:d1:
39:5c:6d:a7:77:69:2c:90:de:77:10:57:90:dc:a8:23:2f:e1:
f6:45:0b:40:6a:94:3a:ad:ff:48:78:54:96:28:3e:0d:c4:f9:
eb:fe:66:be:c4:8a:24:95:ff:7d:78:3d:f3:6a:ff:a4:ef:72:
f1:8b:cb:1d:b6:67:3e:4e:81:0e:03:a3:96:4f:10:8a:18:31:
1e:7a:1e:ee:66:52:55:a6:1b:3c:96:ab:17:41:ed:93:20:ca:
d2:d1:1a:31:40:b5:95:eb:06:44:c4:a5:d6:13:ab:a5:2d:62:
7e:31:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:52:14 2025 by rpki-client