Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier: ZhxxkKEPYSKPODPoo7+GvzgwtnHIFxoM8rvpSHDiu5Y=
Subject key identifier: E1:4B:1F:65:56:18:82:46:C6:9B:3C:B7:05:F5:31:85:C0:D8:3A:EF
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 019A52D2BD8CD820491475AACFECF6B7DEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:02:13 +0000
Manifest this update: Wed 05 Nov 2025 07:02:13 +0000
Manifest next update: Thu 06 Nov 2025 07:02:13 +0000
Files and hashes: 1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: MLfeMKKSugsXJDkYxB2GJ3wS/DVuhRRLkLy0lSfcH1k=)
2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:bd:8c:d8:20:49:14:75:aa:cf:ec:f6:b7:de:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Nov 5 07:02:13 2025 GMT
Not After : Nov 6 07:02:13 2025 GMT
Subject: CN=e14b1f6556188246c69b3cb705f53185c0d83aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:97:da:9f:fb:45:d3:82:ef:3d:b5:cf:44:
da:60:39:9d:bd:e4:12:5d:87:5e:86:b2:5c:78:82:
70:e8:2f:4f:51:2d:d7:39:90:13:10:f0:f3:5e:a4:
14:b2:54:c2:df:d1:e9:56:21:fb:39:4d:61:6d:81:
f8:5f:45:d2:b0:14:42:55:9e:47:7d:3d:3d:e9:07:
07:bd:f5:20:b4:b1:53:79:69:32:27:e9:0a:10:3e:
0c:72:f1:ea:65:5b:77:67:8e:17:c9:25:90:56:3b:
34:d1:7b:8b:e7:44:bb:5f:e6:90:0c:57:2a:1e:f4:
25:a5:0c:f4:c3:c5:d8:f2:b4:2c:2e:e1:b6:e6:8a:
7c:4e:ea:10:9a:cf:7c:9c:03:c3:67:27:88:b1:9d:
d8:e1:80:45:f5:fb:b8:b0:dd:35:4c:b6:6a:e9:29:
a7:45:7b:e8:37:f1:0b:bf:33:34:82:cb:47:ce:d2:
d9:53:9e:4d:38:9e:79:80:cc:cf:12:e9:dd:bc:1c:
dc:05:b7:8d:d1:38:b7:fc:0d:c6:2d:ac:0b:41:8c:
19:3d:09:80:1d:f4:7f:f3:b8:70:78:bd:fd:f4:9f:
b3:3a:2a:f9:48:ba:f0:6f:3e:ac:e3:e8:12:62:1a:
df:fd:9c:0d:0b:a1:aa:6e:a9:0c:3b:dd:10:b8:1e:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4B:1F:65:56:18:82:46:C6:9B:3C:B7:05:F5:31:85:C0:D8:3A:EF
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:29:d5:0b:5b:ae:ae:9b:a0:08:dc:6f:ef:50:64:9d:ad:c6:
72:e1:5a:bb:75:d8:19:47:ef:ab:d6:f7:81:24:5f:3a:eb:7d:
32:2f:56:48:2c:b3:b8:30:16:2c:76:0b:9e:d8:f4:8d:5b:c1:
0f:f9:6f:99:3d:d1:c1:4b:20:40:cb:7d:23:f7:34:e6:8f:59:
5f:58:cc:ac:c2:50:87:a9:06:a1:5c:9d:e6:bf:95:c2:fa:ef:
b3:fc:87:fe:11:e1:e6:cd:7b:d2:cb:26:c5:bb:f9:6c:fc:bf:
2e:cb:59:c0:59:cc:53:ee:f4:07:45:02:8e:df:16:d1:35:79:
24:9e:3a:55:92:cf:89:0d:93:7e:44:20:d6:17:e3:31:e4:bf:
8c:f3:be:c8:bb:69:df:e1:3a:0f:3b:3e:86:e2:83:95:ac:ea:
82:67:4d:3f:c6:78:da:e8:4a:cb:72:55:b8:7c:2c:b9:80:ba:
a4:28:00:de:34:6b:5f:37:ec:af:59:b3:ed:e6:c1:77:dc:39:
d8:d6:30:77:eb:1a:a1:bd:b7:a0:53:9a:f5:1f:3b:b9:80:a3:
61:d1:23:d7:c8:46:22:d3:34:a7:2a:b2:15:08:11:84:16:54:
c5:ca:a3:f9:0d:91:60:d3:22:08:f7:d3:16:3d:5e:23:80:ca:
ef:91:1c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:13 2025 by rpki-client