Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: 0rxgSWYMIlLcDgaDwwxZxcuUWYUq6PDVshSSN/jUZX4=
Subject key identifier: 07:58:BB:9F:3F:DD:C3:3D:79:F2:03:37:26:30:05:F2:A0:D6:70:29
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 019A52D20C599475EEF29A9764DC4C237C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 147A
Signing time: Wed 05 Nov 2025 07:01:28 +0000
Manifest this update: Wed 05 Nov 2025 07:01:28 +0000
Manifest next update: Thu 06 Nov 2025 07:01:28 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: EdCU13/yge+p4iQ+ptF1V+3SREANLUeGoRMfkRlKFas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:0c:59:94:75:ee:f2:9a:97:64:dc:4c:23:7c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Nov 5 07:01:28 2025 GMT
Not After : Nov 6 07:01:28 2025 GMT
Subject: CN=0758bb9f3fddc33d79f20337263005f2a0d67029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:c3:52:4f:89:51:c4:28:7d:ff:59:b8:8e:
46:28:d9:8f:22:76:a1:d1:ea:5d:ee:bb:07:12:a8:
84:17:c3:ce:c2:a8:9b:63:ac:25:50:1e:f0:d4:1d:
cb:98:60:c7:2a:38:42:3e:8d:23:fb:44:e2:bd:1b:
aa:31:f6:f8:70:c1:33:3c:bb:1f:87:17:7d:5e:63:
41:8f:2d:f2:35:d2:3e:43:de:18:a5:de:4a:7e:04:
7b:8c:c8:92:e5:49:f4:7d:7d:ba:a5:d3:77:1e:f2:
51:fd:53:5f:4b:3e:ea:c7:89:f7:2f:9c:f3:f8:14:
09:1d:e4:69:bf:a2:fb:36:c3:b2:2e:fe:b1:3e:0f:
5d:cd:28:50:93:19:a9:ad:2e:78:e0:af:1d:b1:6c:
59:8f:13:cd:d0:e8:79:5d:d1:a5:c1:8c:b8:34:f6:
ba:ed:09:ba:30:89:15:cf:0d:c2:8f:82:a9:e2:12:
d5:02:c5:ce:46:ec:c5:d6:e8:ae:e4:71:8f:20:ed:
0b:6a:41:da:97:0f:ac:31:b3:fd:da:2a:0c:2e:b4:
0d:b1:c9:33:cd:a0:d9:a2:98:97:25:76:8a:05:6b:
81:1a:e3:f2:a9:1f:c8:72:93:ee:4f:68:e6:51:f2:
b6:42:39:2e:27:50:07:67:38:2b:6a:e7:79:1a:ef:
18:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:BB:9F:3F:DD:C3:3D:79:F2:03:37:26:30:05:F2:A0:D6:70:29
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:ac:24:3f:09:59:7e:b9:10:75:24:7c:7e:45:cc:23:68:
61:a4:c3:9c:0a:2d:c6:ff:ea:5d:69:c8:d3:04:7e:6d:9f:30:
43:c3:ef:79:10:fc:e3:92:5f:36:f3:db:7b:15:52:88:02:8f:
6a:c7:7d:e6:47:12:07:c6:0f:97:6c:8c:b1:2c:f2:ab:82:a7:
a6:f3:1e:b8:a6:0b:b8:e3:c4:a4:61:08:76:38:85:60:47:50:
15:a7:67:9b:bb:d9:4d:d3:cc:08:61:ff:55:1c:29:fc:81:c5:
6e:a2:d1:6a:97:09:c8:a2:da:95:8e:28:83:7b:69:f7:b1:d3:
f0:f2:8c:6b:70:98:b5:8f:73:1c:2b:b7:71:0b:ea:9c:ca:9a:
13:f1:9d:c5:e1:d4:57:86:df:24:00:b0:78:18:f6:93:ec:ff:
7a:d0:2a:40:01:b9:61:21:cb:3d:b0:68:a2:c0:c9:e6:09:b8:
1c:37:5b:4a:b4:b5:a3:7e:4b:00:2b:22:0c:dd:76:ba:7b:69:
19:3c:2b:cf:a3:9b:30:21:a6:82:ee:fc:9c:bf:4c:a7:b5:b9:
cb:42:a0:29:26:e6:b7:ad:2c:81:cd:3a:4e:99:eb:fd:82:f9:
f3:c8:fa:8b:8d:21:d2:f3:6e:a1:1d:5b:c2:7b:07:44:45:59:
48:1e:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:30 2025 by rpki-client