Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: uHIxqKO0hZBlbe8eow+6shAQplUpShLc2fi/G4aZal0=
Subject key identifier: 61:0C:D6:AB:1E:25:35:C7:B7:47:6D:87:E2:89:1D:1F:35:78:1B:91
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 019A541A939A575FDDC0F01285DF341694C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 39
Signing time: Wed 05 Nov 2025 13:00:19 +0000
Manifest this update: Wed 05 Nov 2025 13:00:19 +0000
Manifest next update: Thu 06 Nov 2025 13:00:19 +0000
Files and hashes: 1: WjcSjh6POY6LWkWYqO1bxe4QWMo.roa (hash: EMKQU+NBxhwDeLKKNuWDe+hRPzEsX0tK8R9e3SjV4E0=)
2: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: lFMGeQhzXquYvLcUdhAsjAmvILoZJbXyWkguz69wN44=)
3: mS84In4S2GtxRNAcGIAkAfe8QQ0.roa (hash: hsZtK2/ugBC0ghQCXcfOgaUjDKhDrffwOoLgS5vdrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:93:9a:57:5f:dd:c0:f0:12:85:df:34:16:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Nov 5 13:00:19 2025 GMT
Not After : Nov 6 13:00:19 2025 GMT
Subject: CN=610cd6ab1e2535c7b7476d87e2891d1f35781b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:e0:dd:61:d1:db:d7:a5:15:30:9f:62:c4:
50:07:69:b0:34:af:da:b5:5e:8d:8a:9d:cb:3d:4e:
7e:a0:62:3c:8e:a5:87:94:46:e3:c6:11:84:2f:c0:
71:b2:0f:82:12:7b:e5:91:18:86:3c:b4:3d:0c:7a:
16:5d:43:1d:6e:7b:c5:b0:dd:b5:a6:e9:77:14:84:
df:17:22:05:ac:11:eb:26:3e:76:64:b3:f3:64:2f:
10:62:19:35:86:f8:c6:c8:9f:ba:81:02:32:5e:b6:
79:49:f8:0f:95:5a:ec:0f:e6:9d:2d:b7:e7:7a:a5:
cc:f6:3e:5e:45:ae:9b:f5:39:0f:d4:f1:f6:ed:42:
e0:a8:02:ca:8b:68:bb:53:fa:75:2c:cd:2c:52:ee:
d4:1d:ed:b3:d7:54:1b:9b:7b:b4:8c:69:b9:42:dd:
a3:00:04:e5:9b:85:e7:3e:1e:c4:55:c7:b4:a8:b9:
a1:9f:28:e4:37:15:44:c6:36:14:86:4b:ca:21:50:
9f:6e:27:d1:33:0e:53:20:79:0b:c7:ae:2e:7f:86:
3d:14:75:85:9e:6b:11:89:53:13:d1:51:b3:b6:03:
3c:6f:bb:d4:11:85:71:9f:73:dc:8e:cc:66:54:f3:
58:fb:cf:35:ad:0b:2c:c6:f2:91:e7:fb:9d:c3:e2:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:D6:AB:1E:25:35:C7:B7:47:6D:87:E2:89:1D:1F:35:78:1B:91
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:37:d3:6e:c1:f1:0f:74:c0:af:e9:11:0f:ee:31:e9:d3:17:
1b:00:3e:f2:7e:5a:cf:e9:53:95:e6:ec:6c:66:f0:2f:dd:ff:
ec:f4:80:38:10:af:c7:10:a6:98:59:6b:8a:89:39:ba:0d:33:
80:9f:ea:c1:85:0f:e8:87:3f:19:82:2f:5a:dc:d0:20:b6:78:
52:13:27:8d:76:6f:e4:50:1b:dc:2d:94:11:c4:57:5c:e7:de:
53:2c:ae:e8:e4:dd:bb:60:0d:04:6c:80:d7:0b:c0:7a:68:85:
40:95:98:16:bd:fa:5b:ee:c0:0d:19:c5:bf:08:75:15:69:cd:
df:63:30:51:07:d8:ef:37:d4:09:f6:6f:fc:ba:d2:a9:a7:4b:
8a:5e:71:30:d5:7d:5f:bd:ca:a4:ae:3d:bc:33:66:94:a8:2a:
c2:83:2e:8f:f9:04:97:5d:cd:c6:92:c9:d7:05:20:2c:97:18:
8f:5a:80:01:f4:ae:c0:55:03:a8:08:5f:fb:5c:28:3a:9f:27:
15:2f:b8:07:26:aa:95:3e:00:50:ea:92:e3:a7:2c:9e:4f:4f:
df:51:28:4c:74:82:21:4f:47:93:12:08:ce:43:62:e3:de:cb:
8f:40:63:d5:1d:10:d3:77:ab:75:a8:76:b5:9a:3e:e4:67:83:
6d:cb:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:58:32 2025 by rpki-client