Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier: fKa87oMnAHGG0XoEMWZbirOlH/miONVA1GBQHHUu0cI=
Subject key identifier: B6:8A:22:C4:42:D9:A5:66:24:36:44:87:8A:7A:CE:B7:0A:DC:6D:3C
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial: 019A4DE1C1C93BEA230295442B10BA1EF352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number: 0640
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: POJpPqAGgL5w7tfAu9/Wk1WTqaEe0ymLs6GjeLXXJQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c1:c9:3b:ea:23:02:95:44:2b:10:ba:1e:f3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=b68a22c442d9a566243644878a7aceb70adc6d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:d8:d3:67:d0:60:ef:33:a2:7f:21:33:a2:
a5:b2:bf:2e:cd:27:2b:e4:27:ad:5c:a2:65:87:b4:
a8:ca:1b:3b:04:96:4d:11:6c:b1:aa:38:50:05:cd:
5d:5a:dd:f9:c9:37:48:0c:d8:62:e6:2b:8a:41:45:
8e:5c:a8:f8:d5:fe:90:a4:b7:19:48:15:9e:a7:38:
58:5a:5c:67:21:69:44:7c:f4:ba:b8:0d:07:ba:9e:
77:89:10:e6:ed:06:04:6b:3d:63:6c:ae:d6:2f:5e:
0a:a7:3e:04:06:74:07:bb:15:74:15:b2:0c:67:8e:
44:08:75:71:e1:95:89:60:11:ff:6b:89:66:26:53:
1c:7b:c2:0b:27:98:c4:39:f2:04:25:ed:72:ab:e2:
9a:30:27:24:f7:e1:3c:8f:94:30:dc:ed:51:b5:44:
88:a0:f4:0b:86:7c:57:b7:07:a8:a4:ba:11:30:6a:
2b:8a:ec:41:5a:79:2e:46:98:3e:50:1d:e6:3d:f2:
c3:c7:65:9a:ec:0b:02:5c:3f:26:09:d0:93:99:b1:
22:ca:88:69:79:71:79:21:d8:e2:ad:f4:35:d8:a5:
9b:bc:6e:46:68:fc:2a:ba:b6:cd:fa:6f:26:b3:08:
c3:84:c4:13:ff:fd:7b:9b:9d:54:b0:1f:f7:c2:b4:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8A:22:C4:42:D9:A5:66:24:36:44:87:8A:7A:CE:B7:0A:DC:6D:3C
X509v3 Authority Key Identifier:
keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:bc:79:5c:da:8f:1b:12:0a:fc:b9:d3:df:01:87:d4:a5:18:
03:db:c1:aa:92:78:e1:a7:57:2d:a5:73:0b:38:72:c2:cb:01:
29:35:33:33:dd:e9:8d:e9:54:a4:ac:72:b3:9b:d3:57:47:31:
bd:f7:05:13:fe:d4:13:e8:bb:e5:62:13:47:3b:78:c0:05:e0:
5b:aa:c8:a5:5b:fd:e4:0a:0a:8c:28:71:95:94:7c:08:70:2d:
53:cf:0f:64:9c:9c:a0:05:d1:78:73:97:7e:f2:28:eb:1a:a1:
4f:59:65:5f:16:ad:75:b4:99:19:d3:d6:c0:7e:c2:d6:ad:b2:
b5:ff:b8:f7:60:cb:d8:ea:1f:e5:97:e8:39:41:52:28:85:85:
84:b9:4f:e1:73:c7:ec:f2:f6:75:f3:7a:c7:91:d1:f7:c6:a9:
fb:ca:e8:22:11:51:b1:d8:1d:45:13:58:9e:5f:ea:5e:64:f3:
81:bb:c0:47:e2:5b:f3:60:d3:41:50:b7:c0:b3:51:a0:71:2b:
ac:9a:f6:5e:f8:08:77:1a:05:40:fa:e0:da:39:7d:d4:b3:d8:
eb:a0:16:72:48:c9:a1:c3:d2:04:51:ac:8c:91:76:1d:83:11:
a8:a4:be:6a:93:0f:db:8f:b4:28:da:21:2e:e8:0f:96:1e:14:
37:5c:69:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:04 2025 by rpki-client