Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: mcVKE52p1X45fnHbAEcXcp8U3GbWbxLceW/H+80A5zY=
Subject key identifier: 34:BE:16:FC:AE:99:4B:3D:5C:20:B4:52:65:2E:1A:FE:FB:B0:FF:A1
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019A52D267459063CBE2803D848D39BEB825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 107B
Signing time: Wed 05 Nov 2025 07:01:51 +0000
Manifest this update: Wed 05 Nov 2025 07:01:51 +0000
Manifest next update: Thu 06 Nov 2025 07:01:51 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: U0r5frDHs44YwKRFcoGvS5VEOsjCa6q/McQCMr2hVGk=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:67:45:90:63:cb:e2:80:3d:84:8d:39:be:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Nov 5 07:01:51 2025 GMT
Not After : Nov 6 07:01:51 2025 GMT
Subject: CN=34be16fcae994b3d5c20b452652e1afefbb0ffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:24:33:e9:94:e9:8e:5d:f4:40:05:60:8b:
c7:30:65:0a:14:c1:88:92:50:7c:aa:d1:af:68:b3:
38:a8:52:e9:cc:f0:c7:a0:e5:4b:96:f6:47:ff:33:
e5:61:93:c0:38:1f:f4:5c:5b:91:41:08:7c:d8:2c:
4e:60:be:a4:5e:18:4a:5d:35:2b:7b:04:2f:5f:d1:
85:d0:db:5e:9b:00:69:8b:ac:d6:9e:46:7d:25:e2:
4c:7d:d3:8c:27:bc:80:73:36:e5:80:34:60:a4:ec:
01:5d:93:f6:f7:59:a9:8a:53:5b:63:86:95:b7:17:
cc:e2:6d:1e:84:ef:56:46:ac:7b:02:bc:ac:11:2f:
62:9b:45:de:3b:3e:8f:a2:7a:9a:61:d7:de:fe:e7:
6b:c2:09:42:3f:65:d4:1f:6a:8f:bf:88:73:84:27:
b0:a4:3c:a9:9c:91:8e:b3:0b:8e:8c:ef:dc:63:93:
84:af:4f:c3:c0:e4:91:bb:dc:24:a7:7d:ea:b1:c5:
51:b9:c0:52:54:86:af:34:3a:bb:11:0c:f8:d3:d9:
93:39:ae:48:cf:65:24:f4:7d:e3:9f:d6:a8:14:16:
d9:79:8b:b5:4d:27:bf:c7:87:5d:2e:fa:1e:1b:24:
9b:4f:a5:fd:3e:50:ce:65:a9:15:06:18:d0:67:28:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BE:16:FC:AE:99:4B:3D:5C:20:B4:52:65:2E:1A:FE:FB:B0:FF:A1
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:c5:66:9d:85:32:26:a3:e1:b9:c3:d2:73:fe:1e:77:94:
fc:92:47:11:c4:64:a4:c7:22:75:08:39:a8:0b:6f:d9:b0:ec:
58:bf:8f:06:96:7a:40:91:83:f8:da:19:86:99:fb:bb:b0:b8:
67:fb:5a:a3:72:91:f5:6b:0e:38:3c:b2:72:61:fe:d4:b3:32:
0c:bc:06:18:59:94:2b:ea:10:8b:d0:29:97:a1:5e:18:2e:00:
9e:10:ef:8e:38:4e:0f:5c:80:c5:db:10:67:a7:ca:69:08:eb:
98:ff:85:06:45:75:7a:de:0d:c9:68:9b:60:d4:6e:ea:bb:66:
06:2c:af:89:5e:01:a8:69:d5:ad:2e:ff:a7:94:fa:ee:e7:28:
32:0f:0f:c7:bc:dd:a2:fe:c2:08:e4:51:e5:29:78:ab:7b:a0:
cf:a7:7c:d4:44:2c:f7:2e:de:38:21:44:3b:72:04:8f:8e:d8:
c3:1f:3c:9e:3f:59:b3:13:d8:a2:a2:b5:14:81:42:04:8f:db:
9f:07:5b:a1:21:3c:2a:97:89:16:91:45:a4:31:09:1c:b3:9f:
91:c3:bf:09:d2:64:b8:66:34:d2:9e:64:32:04:11:36:ea:a0:
ab:95:97:96:51:f4:23:c5:f2:04:64:57:f6:09:73:7c:4b:6f:
a8:93:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:41 2025 by rpki-client