Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
File: bd1AUuD8dlNjYcu9x3UId93zYK0.mft (raw, json)
Hash identifier: JR3Xzt89ZAZ4k6uoyizPv/A7Xx+JwAA7cWOXL3fxLUY=
Subject key identifier: E5:C9:CB:AF:1A:48:C4:96:4D:41:C9:4F:F9:6C:23:27:D2:C2:7F:8F
Authority key identifier: 6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
Certificate issuer: /CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Certificate serial: 019A4E869D8457DAC7CFC0C1AC662EFCDD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
Manifest number: 101C
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: PBeiTxVVl13KulRPara1RXYVicA.roa (hash: RXsTBTBPcZfgBdF/8hAfnipircCVtF7KKV+ZAN7eFr0=)
2: bd1AUuD8dlNjYcu9x3UId93zYK0.crl (hash: op7FJe9zni8TtSfxxaP/c80mCYtbTjiHAiY8/C63ppM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9d:84:57:da:c7:cf:c0:c1:ac:66:2e:fc:dd:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd4052e0fc76536361cbbdc7750877ddf360ad
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=e5c9cbaf1a48c4964d41c94ff96c2327d2c27f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:dd:b2:41:37:6a:d3:0d:e8:18:2c:67:ba:
c9:c9:52:79:6d:41:9b:0a:c3:0e:29:06:c4:de:25:
16:fd:63:34:7e:01:52:9c:62:e2:e7:ec:0f:76:7f:
f7:f2:7b:14:67:59:83:37:33:a9:95:7e:d8:f5:5f:
0a:86:5b:61:0c:b8:76:49:e3:cb:26:2f:4a:9d:f1:
f1:f3:24:78:6c:bb:0b:1f:33:62:af:1a:c9:82:4c:
d9:a1:d3:94:f2:0c:5b:53:27:22:e7:67:48:46:25:
9a:f1:e9:59:37:d0:57:a2:d5:01:af:1b:e5:e5:a6:
74:9c:91:6e:14:44:a8:23:9e:c7:ce:82:a9:86:97:
67:45:a6:28:90:aa:0b:13:3c:04:3a:e4:f5:8e:6c:
78:42:64:2b:df:de:21:a6:93:0a:32:a4:4c:ca:95:
5d:ad:dc:4d:c0:bc:6b:9e:c0:6d:63:39:18:78:69:
69:e4:11:46:12:e9:9c:e4:38:25:5f:ad:89:93:dd:
60:03:5c:98:99:b4:76:42:f2:08:94:f1:61:c2:2a:
42:10:b4:9a:45:5f:5c:4c:2b:b1:37:62:a1:ab:00:
b7:85:c5:53:a2:8b:bc:02:2f:9d:f1:87:2c:d2:81:
bd:0c:df:60:c2:80:17:a4:0a:89:e8:b3:01:30:0d:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C9:CB:AF:1A:48:C4:96:4D:41:C9:4F:F9:6C:23:27:D2:C2:7F:8F
X509v3 Authority Key Identifier:
keyid:6D:DD:40:52:E0:FC:76:53:63:61:CB:BD:C7:75:08:77:DD:F3:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1AUuD8dlNjYcu9x3UId93zYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/923448-3027-4941-98a4-ba7b1f3769e3/1/bd1AUuD8dlNjYcu9x3UId93zYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:90:6a:a6:74:58:1b:c0:da:fb:45:39:0e:30:49:ac:07:a6:
57:01:3e:eb:bd:cf:73:fd:ec:c6:14:53:24:9e:32:7f:c2:cf:
f2:1a:16:0a:34:99:9c:ff:fe:42:f2:5e:5a:9a:d5:98:e3:fd:
0a:34:b4:b2:3e:df:2d:4a:0f:49:30:42:cd:83:bb:fd:13:d3:
cb:a2:09:37:76:10:f8:75:3c:2a:2f:d1:67:aa:4f:b0:70:4b:
cc:d7:51:7e:6b:2f:74:81:4b:34:a8:ff:ce:99:68:b2:af:cf:
46:7b:57:64:82:d9:39:d7:4c:22:13:45:0a:b4:5c:92:19:d5:
b0:4b:c9:8e:a3:ee:65:3a:1f:47:37:db:0e:fc:31:f6:c6:8f:
a0:1f:0b:e0:dd:f7:70:76:41:f8:42:c8:ff:39:50:b0:97:94:
e6:3a:11:28:1e:19:10:ab:e9:03:d0:0c:fa:08:ca:09:da:fd:
e9:70:e7:24:43:bf:19:4a:9c:c9:79:f1:de:55:0d:de:d7:c5:
f0:08:06:fa:ad:76:61:62:26:3d:fd:8d:bc:ad:0a:97:d6:17:
73:f9:19:43:9c:52:1d:d6:c2:93:e3:3f:79:09:32:f0:62:64:
d4:8d:4f:5b:bf:71:c1:16:50:8d:29:3a:8a:27:bb:08:83:9b:
e1:34:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:43 2025 by rpki-client