Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: ERianeq1C7plSZ+ZewhTdbpJFxfu4hyiANhTyY/7NMM=
Subject key identifier: F1:25:8A:89:29:C7:13:87:5F:97:99:14:F1:BD:80:A4:B2:69:ED:C9
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 019A50E3B1963E3FDC10E1FFBC0038EF7D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:30 +0000
Manifest this update: Tue 04 Nov 2025 22:01:30 +0000
Manifest next update: Wed 05 Nov 2025 22:01:30 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: Ray3guA3XcjiPQBY1UZ4d4YJTaJzMnVpuh3QPKSfgi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b1:96:3e:3f:dc:10:e1:ff:bc:00:38:ef:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Nov 4 22:01:30 2025 GMT
Not After : Nov 5 22:01:30 2025 GMT
Subject: CN=f1258a8929c713875f979914f1bd80a4b269edc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8e:ab:62:5b:cb:02:b5:f8:43:f1:f4:82:97:
34:0c:e4:bc:8c:db:b1:e8:7c:c1:b6:36:f1:c3:ce:
83:59:fb:c1:02:0c:03:24:66:60:9d:70:24:35:0e:
f3:e3:2f:c4:f9:1d:fb:50:f4:ec:66:84:40:a1:61:
ee:30:bf:2e:da:3d:23:4d:70:b0:ab:08:0c:83:4d:
d5:3a:70:77:f3:b1:18:be:11:3f:94:d6:cb:72:ae:
ac:35:06:0d:ce:1a:d8:9e:88:70:59:b3:a5:2c:13:
83:f6:f6:8a:d5:eb:3b:ca:75:0c:56:75:c8:08:b4:
15:e1:0e:9f:6e:4c:82:df:29:6b:97:55:fe:36:21:
78:ae:eb:6c:18:43:10:61:a7:c1:c7:38:5a:d2:bc:
e7:1b:fa:00:a1:6b:ca:0b:4f:fe:df:9b:2f:b8:b4:
a5:35:a0:3e:a3:40:e6:df:94:e7:15:2f:5b:68:04:
0f:56:de:55:07:fb:0c:79:7f:3a:6f:c4:f3:82:30:
6f:b5:70:17:d4:2f:48:0c:5f:65:45:61:d5:69:14:
54:cd:f6:e0:05:0a:5b:b0:54:43:f9:01:10:55:d3:
5c:4d:95:fd:60:ea:d5:81:ec:b4:1c:35:75:e8:00:
4c:3f:a7:4f:d4:dd:1c:fd:2d:4e:9c:17:7a:82:38:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:8A:89:29:C7:13:87:5F:97:99:14:F1:BD:80:A4:B2:69:ED:C9
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fb:4e:a4:fb:4e:1b:49:34:09:aa:1c:92:a0:54:c7:76:f3:
53:88:82:28:fb:4a:19:d0:2a:d5:ef:27:c1:dd:2a:6a:04:9e:
20:d3:d1:27:76:59:64:f1:9f:42:59:42:53:5b:9e:b6:ab:49:
b8:65:29:be:08:22:14:c8:fe:45:45:33:f9:95:c1:b1:26:ae:
f9:87:7b:e0:47:d3:ff:82:a6:7f:6c:37:b5:b9:e5:be:21:00:
9a:02:ab:9a:31:53:0e:ad:16:58:ed:ef:50:24:28:27:49:7b:
08:fb:06:ea:f7:ac:39:a8:d8:00:c7:15:6f:f9:a8:58:34:43:
92:c6:c6:5b:cf:11:41:25:e6:35:ba:5e:1d:cd:d9:59:79:c6:
c7:8c:d0:3a:fd:5b:af:bf:1e:8b:1b:d9:cd:0a:58:4c:33:60:
de:7d:58:c1:95:3d:4f:4b:9b:bc:cc:44:ca:b6:1a:7a:c9:51:
4c:a1:5d:9b:2e:f2:a0:f9:a4:2e:fe:93:e6:cd:1d:c9:b4:ed:
96:75:f1:4b:00:6d:4a:cf:48:d0:b3:f7:8b:33:d1:e4:7e:a3:
ce:6b:00:d0:44:e4:ba:6d:84:52:d4:66:64:df:99:1d:ed:f6:
70:4c:ae:4f:d2:61:99:3b:7a:02:cf:bc:84:2b:90:e5:4f:ee:
9d:dd:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:24 2025 by rpki-client