Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: bu2LVSUCwq9teE+Z5Q4cpzq6qT/PRoztWVrz+N5izqw=
Subject key identifier: 8D:B9:A9:FE:9C:35:D9:D8:C3:B8:13:E4:DF:83:D6:02:A0:B5:73:6C
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019A4E4FDE97477E4691A6CEB099BD55E281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1406
Signing time: Tue 04 Nov 2025 10:00:48 +0000
Manifest this update: Tue 04 Nov 2025 10:00:48 +0000
Manifest next update: Wed 05 Nov 2025 10:00:48 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: FPujHzM6pHo1Pg11WB8W8bBbRDIFwATs4AE3/4lPvsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:de:97:47:7e:46:91:a6:ce:b0:99:bd:55:e2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Nov 4 10:00:48 2025 GMT
Not After : Nov 5 10:00:48 2025 GMT
Subject: CN=8db9a9fe9c35d9d8c3b813e4df83d602a0b5736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:02:be:8c:95:7c:90:2e:a5:52:0a:7e:a2:
49:13:ab:6c:32:03:55:23:5b:35:ab:28:0e:f3:5c:
60:dc:87:c2:01:86:94:e1:22:eb:28:7c:00:40:81:
9b:46:3e:44:06:cc:e4:29:f5:2f:02:22:93:7a:74:
b0:f6:bd:a8:63:8a:86:af:6c:59:ff:0b:cf:7d:36:
4d:d6:86:e4:55:e0:f5:05:b6:a8:ed:6e:b9:21:13:
b9:24:de:9c:34:14:af:ac:10:de:72:b3:77:7a:41:
2b:5c:b3:ad:34:e8:5a:26:8f:5b:c6:b9:14:bd:1e:
3a:32:08:96:5e:dd:0e:9d:a9:0e:4e:78:c5:60:49:
b6:74:f7:5a:d3:af:63:96:5b:2b:1e:d8:f8:7d:3c:
51:27:c5:ef:ea:95:06:64:c3:77:08:5b:0d:53:17:
2b:0d:da:67:fb:8a:f9:a3:11:ee:50:0b:40:30:f5:
42:9e:ad:85:20:f8:8b:fd:4e:01:ff:05:bc:24:2a:
88:16:3e:49:2c:23:18:0f:8a:17:29:4c:85:cf:98:
fd:18:c9:e4:03:3e:7f:41:1a:84:90:fe:ea:0e:68:
09:92:09:d0:d8:99:db:fc:e7:33:62:ff:fa:15:74:
a2:e2:6a:d3:74:62:89:76:60:ab:fa:be:c8:75:bc:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B9:A9:FE:9C:35:D9:D8:C3:B8:13:E4:DF:83:D6:02:A0:B5:73:6C
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d5:b1:04:d0:b2:a4:7a:a0:54:77:7d:b6:3a:fc:95:4f:cc:
66:23:cc:f5:9e:4a:dc:be:55:38:98:4c:08:6e:f4:60:ae:dc:
fd:58:c9:fe:5e:b9:61:7a:aa:56:d1:fa:5c:28:53:89:58:c8:
80:80:4c:c4:6b:f0:5b:04:33:de:55:50:08:81:af:fb:0a:81:
38:8a:5b:39:2e:f8:1c:f4:86:00:78:cf:e8:76:b9:a9:0a:3b:
ca:ec:97:8a:f2:53:c6:33:31:6c:48:d7:e1:82:0d:cd:71:f1:
73:54:bf:b3:db:61:1c:d3:33:88:af:8a:37:c0:d5:4d:be:8f:
90:a2:7a:75:5f:7c:60:00:c1:03:e7:b9:d1:f9:16:09:d3:06:
45:da:ae:9f:bd:e2:33:62:77:0a:98:ba:54:96:3b:ba:2a:65:
9d:1d:3c:f8:ea:e1:4a:4d:a5:30:47:b6:a3:c4:38:85:0e:06:
84:be:ae:b4:e2:7f:f5:79:5b:79:00:22:5e:83:31:e1:15:85:
ba:72:08:7e:58:ce:f0:f3:9f:4d:48:7b:f4:32:30:06:c9:e9:
c9:dd:c4:db:42:94:92:35:91:d2:05:84:8b:8b:35:62:d3:11:
31:78:c5:af:ca:88:e2:92:48:7b:61:23:0c:71:69:51:85:70:
3a:03:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:58 2025 by rpki-client