Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: ld/ywfXYrh4LVy2VrPslqkX2EEom2K5hGw79LPfY5/U=
Subject key identifier: D8:CA:7B:EE:C3:8B:39:33:7F:0A:BF:47:2A:99:51:73:C0:C2:15:F3
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019A4D73A9EAA8F077CA461B857CD9F11431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0B8C
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: Y3uC72HEp44Uknp8MUGS/LTbkHhMA1boe77IXSC6lb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a9:ea:a8:f0:77:ca:46:1b:85:7c:d9:f1:14:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=d8ca7beec38b39337f0abf472a995173c0c215f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1e:3b:88:dc:b4:ad:91:15:ad:de:64:c9:10:
17:39:d3:69:76:58:0d:4a:67:3f:68:2a:f1:70:e2:
7f:5c:ed:4d:53:bc:0f:b3:10:e2:77:a4:4f:44:4d:
12:41:72:ac:77:f6:d6:2c:86:ab:0a:36:31:9e:24:
51:2d:50:76:c8:35:e4:a4:4c:2e:84:66:58:b6:d3:
fe:84:09:8a:82:99:37:b8:e6:12:e7:8f:27:8d:4e:
99:6e:86:0e:40:79:fc:af:9e:81:ec:89:89:04:af:
c7:15:ef:a7:1d:ca:42:64:f3:b0:24:09:0c:6b:78:
ee:6b:b6:0f:fd:fe:2f:a7:83:a3:0c:bd:e3:a7:f7:
ea:a3:91:15:26:1d:00:7b:ba:a0:b2:1a:84:79:f5:
c4:60:e6:29:b0:d1:35:3b:04:c8:69:19:21:44:bb:
14:76:b9:fa:25:18:40:69:81:aa:71:cd:47:c2:5c:
b2:11:81:28:0c:c7:11:16:28:64:ea:3b:df:3c:de:
c8:4a:8d:c2:36:28:6c:b0:67:e6:7a:c1:00:99:c3:
ac:e9:46:8a:7a:a7:fd:95:ee:a2:77:20:ae:20:b7:
5d:9a:15:e6:87:3f:79:e9:8b:b2:f6:ec:94:13:90:
00:a3:9c:26:13:b2:60:7c:a2:3d:08:02:a8:d7:ef:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CA:7B:EE:C3:8B:39:33:7F:0A:BF:47:2A:99:51:73:C0:C2:15:F3
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7a:5b:1c:e4:83:a9:e3:0f:18:90:cd:01:18:f0:e8:ac:97:
aa:44:fd:67:9d:c6:ae:79:ad:4d:31:8b:35:42:1c:f6:be:a3:
1a:49:e8:eb:43:da:e7:4b:f3:51:00:7a:0c:52:24:33:98:75:
1d:a4:10:92:e9:f9:9d:a6:49:c7:88:fd:c6:4b:ee:fa:60:52:
8f:b8:f4:ab:15:20:95:42:91:b1:95:07:7b:36:f4:ad:7b:01:
c2:11:e5:2f:49:12:0d:1a:14:c5:70:75:cc:0f:59:b9:de:08:
b8:59:25:41:df:bd:42:bd:19:30:1f:2c:b1:c9:51:6e:d4:49:
c1:59:3c:e0:df:39:05:97:7d:a0:cc:39:de:33:53:03:08:7a:
4b:15:dc:7c:84:17:bd:97:c7:69:a4:c6:d1:f4:3d:96:bc:04:
31:d9:e5:61:14:1a:a7:cd:b0:1d:e7:5f:dd:40:1c:9d:c4:ed:
7f:8a:aa:79:85:45:05:8d:de:39:cf:02:a5:8f:f3:bd:9a:fc:
9d:c6:0d:6d:cf:b4:53:29:01:91:ae:29:c8:02:76:46:ed:df:
c6:7e:02:0b:80:8b:39:e8:67:14:ab:67:bd:e8:a9:ea:7d:a8:
89:55:a1:cc:04:e0:da:e8:0e:48:f9:30:45:7b:bd:f1:1f:98:
22:bb:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:19 2025 by rpki-client