Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: m727YteQwv66EzVLA4VlyifUnLNTE4aeTOvT1lNI6Qo=
Subject key identifier: 69:64:3C:F0:21:37:BC:5A:01:4C:34:10:66:28:B9:26:CA:D7:A8:2C
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 019A4EF46D9D99CFC1951ABC1801801B7B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 166A
Signing time: Tue 04 Nov 2025 13:00:32 +0000
Manifest this update: Tue 04 Nov 2025 13:00:32 +0000
Manifest next update: Wed 05 Nov 2025 13:00:32 +0000
Files and hashes: 1: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: pik66vfO3hpo9ENMAGiA/EkM9EdKXckGlcyFFZ5cVpk=)
2: c2zsKW42u9qFvcl-pNszF08tguU.roa (hash: V/eBjVd839gDYIh5zShIDIAcf0aMo/ChEoQd1e5SHwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6d:9d:99:cf:c1:95:1a:bc:18:01:80:1b:7b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Nov 4 13:00:32 2025 GMT
Not After : Nov 5 13:00:32 2025 GMT
Subject: CN=69643cf02137bc5a014c34106628b926cad7a82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:4c:19:0d:b5:4e:25:ef:07:df:b9:94:03:
a2:9c:48:e7:37:25:30:9a:23:c4:0c:10:e8:b8:14:
3e:b8:cd:45:42:af:b9:91:75:66:f3:ff:44:6d:06:
95:26:95:93:8a:d2:27:d5:d4:8e:3d:ee:e1:b9:3d:
6e:c3:dc:c8:78:ca:b2:61:0a:46:2a:10:e5:ce:b3:
a0:08:1e:75:fd:83:e3:2f:1c:ce:11:4e:8c:3f:08:
55:f2:c2:df:0d:08:d9:95:0b:55:f9:29:93:9f:67:
2d:53:88:ae:a6:3f:78:10:f0:45:92:bd:2b:29:d9:
d7:30:0f:28:e9:0b:11:df:d8:7e:2e:4c:67:98:ed:
a8:a0:93:43:ff:83:bb:a2:19:3c:59:22:e0:d0:01:
ee:81:03:82:e4:1f:4d:2c:25:55:05:85:fb:cd:32:
e3:de:8e:ab:41:d7:9a:7b:b9:0b:d7:c8:df:2d:c1:
c6:c6:4a:61:c3:db:5a:88:a8:b7:bd:c4:cd:8f:4b:
16:b1:0d:c0:ee:a2:aa:01:34:da:da:00:b4:48:a9:
ba:46:e9:61:4d:0e:fd:21:91:58:3e:16:d8:02:36:
32:f2:2e:bb:16:c6:75:ba:34:dd:67:f8:e0:42:f3:
fc:ea:e0:88:dd:9e:44:f0:b9:14:71:3f:b4:e6:3c:
94:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:64:3C:F0:21:37:BC:5A:01:4C:34:10:66:28:B9:26:CA:D7:A8:2C
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:c5:0e:2c:29:19:8e:43:3b:2d:62:e4:75:9d:9f:b2:0e:
5a:fa:1e:8d:4c:92:69:d4:39:cc:6d:48:7d:14:df:71:b5:11:
ae:df:4c:70:83:8d:85:22:64:d6:53:00:e8:28:0d:d0:0f:75:
5c:5b:9f:76:8d:20:7e:f5:5f:5b:f9:c5:76:3d:13:ed:4c:a9:
e5:41:b6:14:b5:97:84:5c:fd:c2:63:bd:e8:a2:c6:94:fb:1e:
ee:43:2b:06:5c:e9:8b:e7:b0:ea:10:ab:cd:cb:c7:9c:ea:c8:
f9:3a:fa:1b:f6:97:27:0d:68:31:96:08:7a:04:f9:1d:74:1d:
31:6e:7b:6b:17:1a:e7:d2:9c:6d:eb:a9:5d:59:0f:de:d7:75:
8d:88:44:a1:4c:30:fc:1f:66:5f:65:4a:29:f5:5a:19:0e:a9:
27:cf:55:17:5b:4c:c4:47:6d:09:28:ac:b6:5a:55:bb:56:2a:
bd:0e:45:bf:49:f8:55:fb:36:6d:81:b5:96:58:e6:a3:00:42:
36:6c:75:f6:78:0d:ac:83:a0:d1:19:f6:06:a2:f7:ef:a0:5f:
96:10:c8:d7:0d:7c:4f:ce:ed:14:23:30:78:c8:7e:f1:61:cd:
f1:93:f6:2d:04:19:94:df:41:fe:ed:a4:6a:83:c8:db:e8:45:
9c:6b:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:36 2025 by rpki-client