Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json)
Hash identifier: EYc7kpLihpgqVeh6IJxPogbJNwIxxnHKfEw3q94OKls=
Subject key identifier: 4C:FF:14:7D:F5:54:84:91:D1:B3:C4:08:CB:31:79:2E:9E:94:3A:0A
Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc
Certificate serial: 019A4EBD49FE417666E8FDF4DACAFA49AFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
Manifest number: 1411
Signing time: Tue 04 Nov 2025 12:00:19 +0000
Manifest this update: Tue 04 Nov 2025 12:00:19 +0000
Manifest next update: Wed 05 Nov 2025 12:00:19 +0000
Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: 2XzFcwB6DcLDYDm094P86LPhrqhpJ+fS0qBfSthuxJA=)
2: 4F5-U-IyeBv7jgG-t4o9hlhRjTc.roa (hash: gpdr7Kl3pmYPlDObQ8u3VFe1L12/MWoBa72QoNTdi8I=)
3: CpPijEmYlerTV19r3A6mYbWd_7U.roa (hash: paOU+LXyw4VdCUY8Gvj627Nds5jNeA0tyswAnoZqaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:49:fe:41:76:66:e8:fd:f4:da:ca:fa:49:af:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc
Validity
Not Before: Nov 4 12:00:19 2025 GMT
Not After : Nov 5 12:00:19 2025 GMT
Subject: CN=4cff147df5548491d1b3c408cb31792e9e943a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:e3:2c:ab:10:58:7d:61:b5:ac:33:a2:b5:
7f:0d:8d:55:ce:95:3a:96:f1:d0:a0:1d:ac:60:fb:
a9:1f:a8:d1:5c:bd:b3:4b:09:e0:16:19:ef:2e:5f:
0e:c5:f8:bc:23:f2:c6:d8:7f:56:75:ae:42:09:a0:
a7:00:73:37:a2:1c:b1:0c:de:5d:46:54:4d:8c:63:
5b:5a:76:34:bd:c7:90:68:1a:48:8f:d9:97:8c:cb:
b4:08:06:0a:de:50:ce:0a:1a:db:eb:7c:5c:1a:63:
03:0d:4e:37:89:4c:d2:25:25:4d:9d:b4:d4:94:22:
71:88:09:dc:3f:04:32:53:dc:98:22:0c:1a:59:a9:
73:57:aa:ca:6b:cf:df:a7:c6:fe:bf:00:b1:a4:f1:
01:e0:85:cd:7d:9c:ba:24:ec:98:43:20:a0:3a:d2:
f3:c6:f1:10:0f:ec:9b:c2:65:06:4c:41:03:83:99:
f5:46:4c:3c:92:22:42:1e:d6:b6:a0:fa:2d:df:d0:
6c:42:45:b4:20:f0:64:d6:d5:7f:e9:76:6b:b1:ce:
e1:ca:fc:2e:04:e3:7b:3b:ff:5e:79:18:44:c8:fe:
fe:fe:d8:fc:f9:d8:ee:e3:da:e6:02:41:f5:fe:37:
a6:2e:c3:8d:19:b2:d0:64:b4:af:9e:6e:5b:50:b8:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:14:7D:F5:54:84:91:D1:B3:C4:08:CB:31:79:2E:9E:94:3A:0A
X509v3 Authority Key Identifier:
keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:42:74:ab:70:13:08:b7:64:e3:82:96:fc:b7:b2:cb:e6:71:
9c:4d:f1:42:1d:75:ea:a5:9f:b8:6d:67:c8:87:0d:11:9d:93:
7d:28:bc:a5:be:e2:6d:33:df:0f:c2:c9:ef:72:4d:35:90:ed:
10:ec:ef:74:41:cb:af:f9:e8:ef:39:9c:eb:33:e2:18:b7:89:
ca:75:5a:75:47:8c:91:9c:65:b8:b0:73:87:0a:df:61:97:61:
8b:26:18:fa:da:e8:2f:02:2f:3a:1e:f2:da:2e:75:0d:33:4b:
e8:6d:bc:73:c5:a3:60:02:88:2b:cb:58:9d:f7:3c:61:57:37:
6c:35:06:96:56:8d:ad:2c:60:6d:ce:a5:9c:24:b3:27:33:5f:
d5:73:9f:59:ea:10:f3:b0:ed:e7:46:d5:11:d5:e6:87:ac:73:
72:bf:b4:47:74:05:fb:2d:ed:75:c9:63:25:19:ca:43:76:2f:
25:03:0f:bc:bb:29:4c:83:00:53:01:8a:e4:0e:49:f3:a3:52:
0a:dc:46:6e:9a:0f:42:4a:43:ac:52:83:74:63:11:f7:02:d8:
ae:62:10:68:57:ef:5f:ef:7d:b4:40:6c:75:c0:8a:42:64:e8:
cb:d5:01:5c:09:5e:31:5a:99:1b:4a:51:80:ec:10:18:b3:e8:
56:9f:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:22 2025 by rpki-client