
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File: BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier: BT2syVWIzXfbxQimqEjs6sItfcyMS8cW+DN31tJ/vtE=
Subject key identifier: 39:D2:52:5A:FD:C6:9D:D1:39:1E:9F:F3:B0:43:F9:AC:67:E0:5B:04
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019A4F9942F8FE97B733412152D6899AE71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number: 1816
Signing time: Tue 04 Nov 2025 16:00:35 +0000
Manifest this update: Tue 04 Nov 2025 16:00:35 +0000
Manifest next update: Wed 05 Nov 2025 16:00:35 +0000
Files and hashes: 1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=)
2: 0t-N62F11L22RXi8LFNfQS2TvDQ.roa (hash: fZ442BH/ml9qRqaBuzjKJulrHPDUDH1jI4JlwuQOcx8=)
3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=)
4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=)
5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=)
6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=)
7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: jme1pMfYR4viJAMRmWUgfd6K3m6T/Gj1hkYIhPzMLK8=)
8: D8-tg2HFfaxtzWtLFVQ2_Tw33X4.roa (hash: W0yzlxsbtTJh4rdHCOnewjEeTldRIygMs+3n84CIFt0=)
9: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=)
10: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=)
11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=)
12: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=)
13: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=)
14: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=)
15: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:42:f8:fe:97:b7:33:41:21:52:d6:89:9a:e7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Nov 4 16:00:35 2025 GMT
Not After : Nov 5 16:00:35 2025 GMT
Subject: CN=39d2525afdc69dd1391e9ff3b043f9ac67e05b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7f:49:41:5c:02:f9:65:ec:bb:f8:87:08:4e:
ef:6b:08:7b:9f:21:55:c2:12:f6:8e:8e:0b:c2:12:
82:b4:e7:58:a9:72:13:df:d8:ac:53:31:64:9d:e1:
f4:b8:dc:90:9b:a3:df:fb:8a:e1:20:4d:73:0d:bc:
64:8b:20:dd:f5:2e:bc:04:e4:2d:f4:ee:00:66:bb:
20:2d:53:1c:f8:66:0c:37:6b:11:fc:4e:e3:b6:39:
04:34:d8:15:99:a9:9f:2a:8a:cb:a7:2c:6a:e3:e0:
34:7e:ca:c9:0e:f5:a9:28:2c:65:21:a8:f1:73:8a:
9b:73:b8:2b:97:92:14:b3:0a:d8:a9:4e:cd:61:7f:
80:55:8f:4b:ab:86:96:75:86:56:d9:8d:51:a2:33:
ba:b0:d1:18:4a:18:82:97:01:2f:b5:73:4e:df:68:
4a:45:0a:88:7f:70:73:36:36:ef:39:42:b2:eb:95:
ba:3f:37:b6:e4:f0:52:31:d4:0e:b0:ea:e9:f0:98:
0a:cd:ca:ea:0c:d0:dd:d7:46:39:3d:7c:56:48:fc:
c8:38:d7:79:d7:9c:62:b7:57:fb:d6:62:be:9c:b8:
27:dd:7a:9f:68:62:29:ad:7c:18:74:f0:fa:be:bd:
c7:39:04:ed:ed:5f:e2:3d:e4:96:59:43:0e:7c:69:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:52:5A:FD:C6:9D:D1:39:1E:9F:F3:B0:43:F9:AC:67:E0:5B:04
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:96:7a:12:db:1d:3f:0f:b6:f2:d9:fb:e7:4a:79:89:49:dd:
2e:b5:9e:76:4e:49:2f:3b:14:3e:a8:24:f3:90:f3:6a:b1:2a:
5d:cc:d5:e4:76:9a:79:ec:d5:94:f7:e2:78:ec:b8:43:e9:0e:
e5:d4:46:7c:a7:18:72:e6:af:31:93:7e:f6:e5:9a:03:38:a6:
8e:d5:98:73:8e:e7:bc:47:7d:c4:d6:2d:50:45:6c:55:b0:68:
76:61:2e:48:b2:c4:ed:a1:ce:3f:0e:d5:1f:36:d6:35:1a:04:
22:15:aa:0e:c6:fd:b8:bc:b0:c0:4f:37:74:67:5a:b9:96:da:
dc:b9:4e:c7:35:a3:bc:8a:7f:89:57:0a:9a:ef:ca:ff:6e:11:
27:3e:88:e9:72:19:51:20:5b:5b:0b:c2:4e:02:b2:42:c8:26:
51:b8:01:56:09:85:da:a7:35:b6:87:b6:dd:cc:57:ee:ea:0c:
c8:83:64:7e:90:2d:ca:d4:c4:4c:a5:7d:31:ac:c8:e9:46:bc:
f6:b4:7a:5a:e2:5e:65:34:39:7b:80:b4:7d:b4:c9:f8:5f:c2:
44:f7:39:96:6e:eb:7b:a5:59:ed:a4:64:e3:26:88:52:06:3b:
ba:7d:12:d4:8f:18:23:87:81:6c:07:fd:1e:ce:f8:e0:f9:93:
b0:af:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:07 2025 by rpki-client