Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: j9N1KY/XPmD+k7AuYHQaR4FWQfPoDQyQpG77xQONIog=
Subject key identifier: F0:64:A0:69:BA:75:D0:CB:C4:72:FD:81:56:C7:4D:04:33:18:62:52
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019A4D0646B523281DE04F2A478FFF2AB73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0F0D
Signing time: Tue 04 Nov 2025 04:00:48 +0000
Manifest this update: Tue 04 Nov 2025 04:00:48 +0000
Manifest next update: Wed 05 Nov 2025 04:00:48 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: kVwEDq4luWz8jW+8R2OKh5I5Ydtu31RjHft22mZFgag=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:46:b5:23:28:1d:e0:4f:2a:47:8f:ff:2a:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Nov 4 04:00:48 2025 GMT
Not After : Nov 5 04:00:48 2025 GMT
Subject: CN=f064a069ba75d0cbc472fd8156c74d0433186252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:1f:fb:c5:f1:60:ea:12:d5:23:5c:29:64:
62:f9:8a:76:49:a9:f5:84:75:56:9b:e5:e9:7e:c1:
c1:89:73:57:35:32:ae:be:53:f1:de:49:41:f8:49:
a0:b2:b0:d3:77:91:c1:8f:68:f5:98:70:7b:63:9a:
d1:17:8b:e6:f3:76:3a:7d:f2:4a:3f:4c:6a:69:f7:
03:2a:94:d5:1a:06:00:00:d3:aa:97:03:1a:65:c6:
de:ea:c1:13:95:83:6b:4f:a9:7c:1d:b6:82:71:aa:
b1:af:7a:2f:98:4a:e4:d1:86:b6:61:7c:d1:b6:f5:
28:9b:b8:53:2a:6e:62:3a:f9:a1:09:ea:1a:ac:c0:
23:0e:7e:a6:ac:03:0c:b4:50:d9:e4:31:df:11:ed:
4d:84:14:6a:d7:4e:e8:d2:e4:9c:e7:1e:f9:89:3a:
26:2b:60:bd:88:d5:20:98:90:39:f6:d3:ee:48:e1:
65:f7:6b:4c:d6:ed:af:b9:fa:a8:c2:f3:35:3c:93:
80:47:55:1f:95:b1:c9:6e:7d:ae:43:37:2d:24:57:
f5:00:a4:3d:3d:14:58:aa:50:35:f7:65:5e:f3:e1:
77:8f:14:ba:06:d1:26:68:4b:ff:7e:4d:c6:62:9f:
a8:d1:ae:d5:b9:dc:bd:60:47:49:57:b3:e0:af:e7:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:A0:69:BA:75:D0:CB:C4:72:FD:81:56:C7:4D:04:33:18:62:52
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:b9:c6:5f:71:8e:fa:3f:d3:cd:8d:86:68:1b:8c:01:c0:
0c:61:49:24:e3:2a:33:8f:57:10:1e:a5:de:0e:4c:e9:4f:60:
86:0e:a5:9a:7d:b4:fb:83:ea:26:ea:7a:82:2a:aa:00:77:d5:
b1:2c:a1:c0:3b:77:c6:af:e0:23:db:ad:91:3b:20:91:06:d8:
03:91:27:cd:45:19:12:0c:ea:b6:36:d7:95:a8:35:be:9c:4c:
cc:53:a6:30:d9:61:62:dd:94:12:41:72:c0:ef:26:d0:dc:e1:
17:91:b2:5e:3a:0c:e3:61:14:89:45:85:20:9f:5c:f7:ac:1f:
d0:7d:9e:28:f1:45:36:bb:38:fb:10:c7:3f:7a:42:85:04:df:
60:29:05:f3:a4:9b:72:1b:9e:56:94:72:f8:4e:24:62:82:e8:
b9:d3:f7:b4:e4:9f:7e:3f:79:e9:aa:0f:a0:81:8e:33:0b:14:
9d:ae:15:7a:81:0e:e5:94:99:15:23:ec:ca:11:ae:47:77:56:
f6:55:12:79:08:f4:9e:a6:4d:99:4d:b1:a1:42:20:85:3e:5b:
13:d6:f2:fe:27:93:de:b1:b2:98:8b:78:25:04:df:7f:43:db:
23:88:b1:10:67:af:86:8d:b3:11:3a:37:80:ee:e5:b3:3a:23:
ad:80:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:47 2025 by rpki-client