Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: 70IaMKQwfVC7hsLd9SPMk27PY8NiMITvFmp3j9IYKYE=
Subject key identifier: 8C:A6:0B:48:83:F9:68:0A:BA:45:F1:4E:E4:72:07:97:26:CB:3F:5F
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019A53E3D78A9BFFC040B5A6E07DAEB40908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0906
Signing time: Wed 05 Nov 2025 12:00:31 +0000
Manifest this update: Wed 05 Nov 2025 12:00:31 +0000
Manifest next update: Thu 06 Nov 2025 12:00:31 +0000
Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: fiTRuIAQuX00znCw74NxCOcybr0Pe00NZw59KZaZ5Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:d7:8a:9b:ff:c0:40:b5:a6:e0:7d:ae:b4:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Nov 5 12:00:31 2025 GMT
Not After : Nov 6 12:00:31 2025 GMT
Subject: CN=8ca60b4883f9680aba45f14ee472079726cb3f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:cb:c5:ad:22:d3:26:5e:81:73:66:5a:cc:
a3:c3:3d:a5:60:90:23:58:28:f3:d9:e0:95:ad:e9:
42:e5:6c:f0:ac:c2:43:d7:04:7f:38:e4:06:22:83:
b3:70:6d:73:fd:d3:c9:14:fd:a3:d7:db:12:ce:6b:
f4:b5:d7:da:e4:9c:d9:23:e6:70:21:de:6f:b0:cf:
db:27:80:00:e8:e5:bf:c0:9c:34:80:d9:af:22:76:
6e:32:99:80:31:ec:36:93:a8:ee:3d:25:68:e9:ec:
c9:61:86:fc:39:9c:c6:99:f5:53:a2:93:cd:d9:93:
b4:cf:11:5e:65:bc:1a:f5:1f:ed:60:c1:90:19:bf:
62:5c:d4:bd:4d:18:a7:b0:ac:21:38:fd:9e:80:fc:
47:9a:7c:2a:7f:1f:c4:b1:ca:33:5b:67:4e:49:a1:
b7:11:c0:ca:d1:6e:7d:ec:7b:0b:4c:78:23:4b:fc:
d6:d2:34:6a:26:6d:d7:59:09:39:e0:34:36:f9:21:
51:4a:8d:3a:25:e6:c1:2f:b2:45:25:2e:05:46:3c:
ad:4f:85:f7:67:2f:96:43:bf:79:d0:9c:52:68:14:
4a:41:86:81:8f:5e:d4:f6:95:86:0e:6b:5f:f1:87:
15:94:5d:29:9e:19:f7:69:26:15:13:bf:5a:c9:7d:
47:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A6:0B:48:83:F9:68:0A:BA:45:F1:4E:E4:72:07:97:26:CB:3F:5F
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:09:af:94:d0:09:0b:bc:9f:3d:f6:49:46:6e:61:57:0a:
73:7f:ba:0e:6c:99:32:5e:07:67:c4:db:ba:f0:c3:e5:44:d8:
85:ed:1f:a0:20:cd:46:c2:11:ee:a8:1b:78:d4:9a:c3:03:c0:
58:f5:60:da:05:0c:e2:be:38:5a:4b:1e:2a:68:b1:39:a0:c6:
c1:27:18:19:85:95:10:fe:a0:73:55:b5:86:09:68:20:f7:99:
d9:31:7c:81:af:05:ac:10:59:be:3e:f9:a4:94:b7:31:60:b4:
7f:a9:5d:6c:a9:37:68:a9:21:a0:2f:f9:68:be:ed:4f:3a:75:
35:0b:f7:d1:18:db:e0:ee:62:9e:74:fd:bd:51:dc:63:0f:32:
70:2d:42:a9:7e:b6:85:64:9c:c6:92:f2:3f:67:7f:07:77:70:
45:4b:3e:0f:3e:d3:7b:bc:a4:2f:03:3a:ca:ba:e9:cf:5f:da:
31:c7:e2:e9:23:1b:83:53:ad:f8:44:38:9e:83:47:81:e5:ca:
3f:25:a4:81:f9:ad:f3:7e:89:78:61:3f:ff:7a:36:d4:10:fc:
42:03:57:ba:6d:7b:a9:b8:ea:0d:74:ef:87:9a:a9:00:93:18:
23:5c:9d:26:91:1a:e3:6c:a4:30:34:d6:5f:a6:20:0c:5e:09:
cb:45:10:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT49eKm//AQLWm4H2utAkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl
MWI4MjUwHhcNMjUxMTA1MTIwMDMxWhcNMjUxMTA2MTIwMDMxWjAzMTEwLwYDVQQD
Eyg4Y2E2MGI0ODgzZjk2ODBhYmE0NWYxNGVlNDcyMDc5NzI2Y2IzZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdXLxa0i0yZegXNmWsyjwz2lYJAj
WCjz2eCVrelC5WzwrMJD1wR/OOQGIoOzcG1z/dPJFP2j19sSzmv0tdfa5JzZI+Zw
Id5vsM/bJ4AA6OW/wJw0gNmvInZuMpmAMew2k6juPSVo6ezJYYb8OZzGmfVTopPN
2ZO0zxFeZbwa9R/tYMGQGb9iXNS9TRinsKwhOP2egPxHmnwqfx/EscozW2dOSaG3
EcDK0W597HsLTHgjS/zW0jRqJm3XWQk54DQ2+SFRSo06JebBL7JFJS4FRjytT4X3
Zy+WQ7950JxSaBRKQYaBj17U9pWGDmtf8YcVlF0pnhn3aSYVE79ayX1HzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIymC0iD+WgKukXxTuRyB5cmyz9fMB8GA1UdIwQY
MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt
MGU1OWYyZWNiMTc1LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1
LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGkJr5TQ
CQu8nz32SUZuYVcKc3+6DmyZMl4HZ8TbuvDD5UTYhe0foCDNRsIR7qgbeNSawwPA
WPVg2gUM4r44WkseKmixOaDGwScYGYWVEP6gc1W1hgloIPeZ2TF8ga8FrBBZvj75
pJS3MWC0f6ldbKk3aKkhoC/5aL7tTzp1NQv30Rjb4O5innT9vVHcYw8ycC1CqX62
hWScxpLyP2d/B3dwRUs+Dz7Te7ykLwM6yrrpz1/aMcfi6SMbg1Ot+EQ4noNHgeXK
PyWkgfmt836JeGE//3o21BD8QgNXum17qbjqDXTvh5qpAJMYI1ydJpEa42ykMDTW
X6YgDF4Jy0UQAQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:20 2025 by rpki-client