Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier: 7RVLQ1+CLBSMnchvkWDQ46UoZo2TcduuWcxyV2QxbMs=
Subject key identifier: 4D:50:D7:F9:CA:62:4E:FB:BB:F5:08:DA:B3:F5:ED:73:D1:F5:D6:8A
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer: /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial: 019A51F53912C81975CAF9BC700A720AB0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number: 0DA0
Signing time: Wed 05 Nov 2025 03:00:16 +0000
Manifest this update: Wed 05 Nov 2025 03:00:16 +0000
Manifest next update: Thu 06 Nov 2025 03:00:16 +0000
Files and hashes: 1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: T+sk9lcWN1p6blMnr4Br+MkBwYiMM2ChcxbI1sNU4fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:39:12:c8:19:75:ca:f9:bc:70:0a:72:0a:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Validity
Not Before: Nov 5 03:00:16 2025 GMT
Not After : Nov 6 03:00:16 2025 GMT
Subject: CN=4d50d7f9ca624efbbbf508dab3f5ed73d1f5d68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:c0:a4:96:6a:81:60:c4:9a:37:3e:df:ed:
53:10:d2:4f:59:dc:0c:fe:20:b0:89:34:d5:62:a2:
fc:af:8a:73:65:fb:8e:f8:45:e4:39:e2:d4:09:94:
3b:86:fd:8b:95:9a:fd:4d:90:0e:75:6e:8f:eb:4d:
75:80:8c:e2:63:1d:33:09:f3:b8:f7:0d:3c:0d:33:
ef:a8:a1:b5:8f:16:4f:ed:93:d8:cd:b0:b3:7a:be:
94:72:b5:9f:b3:59:15:29:02:91:8b:4c:03:6b:be:
45:f2:0c:25:1f:32:71:98:79:05:04:d7:ad:f0:ef:
bd:9d:75:80:f2:6d:f0:0a:69:fd:17:38:54:c2:10:
ed:2d:3d:8b:c3:bd:e2:af:ed:7e:ba:7d:a5:7e:e1:
58:78:7c:1d:0d:1f:6a:53:38:31:e4:8c:cb:d9:9e:
77:ca:bd:26:e5:c0:e3:cb:50:b8:4a:4c:8e:53:64:
02:0d:b6:b6:c3:4e:c8:e0:ab:9e:60:4c:d6:79:76:
ec:5f:d1:c4:a6:6e:cf:c2:52:b8:19:26:55:00:2d:
fa:e6:65:0f:52:b7:98:9e:11:0a:9d:95:79:43:6c:
14:67:60:13:21:bc:34:15:4e:41:9e:00:4d:20:cd:
72:55:ad:f1:6c:5a:cb:81:01:c4:65:a5:32:6c:fd:
82:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:50:D7:F9:CA:62:4E:FB:BB:F5:08:DA:B3:F5:ED:73:D1:F5:D6:8A
X509v3 Authority Key Identifier:
keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:64:87:05:6b:98:06:4d:05:6f:1c:c4:1c:d4:45:b9:e4:
30:a9:fe:9d:c1:dc:21:3f:c3:92:bc:50:2a:53:76:c0:b9:19:
50:a9:5e:fe:57:af:dc:bd:75:98:89:9a:16:30:6e:72:44:0e:
1f:63:83:7c:ab:17:07:d6:f8:4a:75:f5:8d:e2:01:78:62:cb:
58:19:1a:65:bb:c1:ff:34:20:3b:05:2e:23:d2:b6:e9:50:57:
3c:38:76:be:34:24:41:42:e5:2b:0a:fc:24:3f:5d:f5:f2:2b:
9c:5b:ed:f2:a4:96:3a:06:20:6b:72:b2:30:7a:f3:11:d3:fb:
75:bd:be:c4:7a:8a:99:7f:e2:d2:f9:ee:92:12:35:8f:00:90:
5a:cc:fe:fe:53:d9:69:14:2f:9c:1a:d4:2d:64:26:8a:ca:88:
cf:54:e9:3c:9e:d2:76:01:60:c9:7e:dd:6a:2a:f9:23:7a:57:
c5:47:14:db:f2:ef:35:4b:38:be:d7:53:d4:48:e0:bf:ce:4d:
ff:b1:f4:da:e0:cd:81:84:51:83:b5:cc:0a:af:4d:09:c0:e7:
8c:d8:5b:ac:43:bd:ae:1d:69:66:8b:4a:94:bb:7c:00:ea:a4:
f0:65:07:5c:a4:48:f9:2f:0b:4c:51:dc:43:8f:d5:39:40:99:
d9:3e:ac:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:21 2025 by rpki-client