Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: ZJpelZAT1pnFj6YuvfqjdZirEVfjZLoFXzhT5rcnCW4=
Subject key identifier: 87:E3:8A:ED:F5:89:0E:B8:93:1D:FD:C6:06:38:FD:C6:3E:77:9A:08
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 019A4EF5642E8DB35D46BA9330AEC31CD169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 0783
Signing time: Tue 04 Nov 2025 13:01:36 +0000
Manifest this update: Tue 04 Nov 2025 13:01:36 +0000
Manifest next update: Wed 05 Nov 2025 13:01:36 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: MuoAtpt0GNvPg6oLXWVdmuZsQbd7DkFSkSgO3+u3KdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:64:2e:8d:b3:5d:46:ba:93:30:ae:c3:1c:d1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Nov 4 13:01:36 2025 GMT
Not After : Nov 5 13:01:36 2025 GMT
Subject: CN=87e38aedf5890eb8931dfdc60638fdc63e779a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:24:cd:97:f0:b4:59:d5:20:12:75:b5:90:
6e:a5:e0:7e:0a:bb:94:a9:2b:54:6a:9b:a1:92:58:
a1:83:35:ac:f6:40:2d:02:d4:85:da:83:a4:22:a8:
b0:c1:83:77:bb:52:28:a5:1a:79:d7:1e:78:06:3c:
01:07:9b:85:20:a4:ca:e8:0e:6b:07:ad:ba:59:3f:
9c:53:bd:e0:79:7a:cd:dc:03:fc:cb:67:04:46:ca:
97:c1:cc:0c:d5:84:4d:2a:fd:15:fb:95:7a:31:21:
c8:a4:ea:89:3b:d2:e2:27:95:0f:fe:cd:b3:53:df:
5d:19:29:65:be:df:96:b1:97:d7:8c:07:d4:3c:b2:
cb:77:c2:e4:38:2b:47:c3:bc:9a:39:7b:e8:34:af:
02:e5:30:92:e5:f4:29:41:1a:be:61:5a:99:4b:0a:
99:90:fe:d0:88:c7:66:2e:13:cf:f2:87:f2:75:d7:
e9:e1:cd:44:70:83:31:36:a1:fb:16:e7:ba:f7:d5:
4f:c2:78:32:f0:21:bd:b9:25:8f:f1:e7:2c:76:39:
f8:c1:8f:a9:ef:c3:fa:fd:6d:95:07:77:40:a7:f9:
be:6c:08:2c:4f:0f:5c:0f:a0:be:40:90:35:16:b8:
f7:63:26:c1:46:14:a6:39:17:b5:40:25:8f:ea:35:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:8A:ED:F5:89:0E:B8:93:1D:FD:C6:06:38:FD:C6:3E:77:9A:08
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5c:13:ba:f9:5b:7f:10:1e:1a:3c:27:f1:74:f6:fe:34:cc:
38:4a:11:55:b9:6d:71:43:8a:39:a0:27:18:39:37:79:87:47:
84:0c:13:5c:16:7e:03:51:80:70:b2:d3:18:47:b9:27:e5:23:
07:31:cb:6a:a1:15:33:7c:48:34:37:1b:02:7c:38:7f:ca:fc:
4c:5f:91:2f:73:d7:20:c3:f9:dd:b7:b4:c0:7e:d8:f4:34:61:
1c:cf:94:b1:bf:08:f4:39:08:48:8e:cf:40:74:1d:7f:35:b2:
9f:6f:06:a5:4d:83:2f:13:f1:bb:e4:3b:53:86:8a:17:1f:ab:
30:49:34:ea:d7:91:e5:16:cd:6a:da:26:2b:3f:eb:56:bb:a9:
75:14:7c:5d:58:bd:aa:42:0a:21:20:54:2f:6d:e7:13:47:55:
16:2f:db:5c:4e:c5:71:08:1d:05:c4:de:60:77:49:cb:e8:bc:
50:c2:1b:67:55:8c:94:2f:16:85:00:45:4c:c9:17:f0:1b:11:
fa:ba:ee:7b:4b:00:98:ea:79:f3:50:09:00:39:a5:c2:27:13:
bf:d1:28:48:e3:de:aa:ce:3f:7e:b5:60:6f:85:c1:8a:db:e0:
20:fb:1c:db:6f:17:50:ee:98:c9:85:38:f3:fc:4b:10:34:a2:
1f:14:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:42 2025 by rpki-client