Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: 3opuZzLw4YWnjzUYeuiOXWkf9Ik3/8ZRv9n2+IM/wZo=
Subject key identifier: 50:9F:5C:8F:B1:04:E1:32:0D:53:3C:A9:94:13:11:91:A3:D9:66:9E
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019A4F62B4085FAF1B386E3299E2F036F5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0CE8
Signing time: Tue 04 Nov 2025 15:00:59 +0000
Manifest this update: Tue 04 Nov 2025 15:00:59 +0000
Manifest next update: Wed 05 Nov 2025 15:00:59 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: HllFkmpLM8ows9D8gyJOI0LGyGIiL9rdm35X78f2fSU=)
2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b4:08:5f:af:1b:38:6e:32:99:e2:f0:36:f5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Nov 4 15:00:59 2025 GMT
Not After : Nov 5 15:00:59 2025 GMT
Subject: CN=509f5c8fb104e1320d533ca994131191a3d9669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:0b:f6:f7:68:75:1b:19:fe:30:dd:da:f3:
f6:37:cf:c8:c2:00:87:4b:dd:2a:e6:44:c9:4a:22:
f5:51:27:30:8b:a7:45:88:4c:ae:7c:e1:34:f7:25:
87:99:0a:a1:e8:70:6c:ec:34:12:39:d2:56:29:0f:
11:71:38:9c:85:79:f6:93:9b:98:7d:22:91:19:1b:
ab:ff:a1:15:6b:b8:d6:c7:ab:4e:c1:83:91:a1:e1:
58:f2:6b:64:97:11:f9:5d:50:3d:80:d1:16:dd:e8:
b4:c5:4c:ad:a9:1c:bb:99:75:e7:a5:0f:ec:d2:85:
02:78:97:c7:6e:82:dc:6c:fd:fa:0e:d8:c0:19:bf:
c2:54:d2:fb:ea:ee:62:bc:46:41:9a:97:c9:7a:2e:
15:9f:a0:68:dc:64:d1:16:e9:99:bf:26:ba:22:f5:
e1:f4:db:0d:ce:a4:34:7c:a0:ba:ac:14:b3:8f:f7:
18:93:ed:6c:e7:e5:20:85:93:2b:58:db:6c:e8:59:
f6:de:59:dc:3d:7b:fc:3c:49:37:14:d8:77:54:f7:
dd:03:cc:a3:fb:6b:49:a3:d0:f3:49:94:68:93:fa:
3f:b3:64:88:a1:3f:d4:66:c1:5a:f3:81:38:f5:9d:
7c:62:a4:d2:63:a3:06:e9:db:fd:46:67:f1:bb:3f:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:5C:8F:B1:04:E1:32:0D:53:3C:A9:94:13:11:91:A3:D9:66:9E
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:6b:06:8f:01:1b:4d:c1:30:50:1d:44:ff:26:8c:70:97:
27:9a:35:7c:c4:f2:85:93:13:63:02:da:db:8f:87:88:21:be:
fa:4d:6b:5d:8c:4d:c9:64:9b:d9:db:e0:46:ee:74:9d:f5:8d:
da:e5:5a:88:0b:68:04:ce:71:96:55:9b:a2:08:06:16:dd:9a:
44:76:9b:a7:26:fc:ec:d8:3b:47:43:89:5b:07:aa:70:75:00:
80:b0:75:3a:44:a3:51:19:f7:cc:78:01:5f:8b:b7:e6:b2:08:
c9:84:8c:cc:bb:dc:1b:68:75:8a:40:09:60:88:e6:15:e7:e5:
c6:c9:2c:93:61:f4:40:ce:05:51:06:84:f9:0d:98:77:78:30:
94:58:c3:44:28:7c:b2:a7:96:d5:9d:51:31:4f:64:e1:81:60:
43:b7:3d:6f:e0:61:9a:ec:1f:0e:d0:a4:14:44:82:81:ac:19:
94:d7:a7:f4:b8:89:9b:5b:f7:5a:1e:56:5d:1c:8c:fc:1e:a2:
e3:06:e2:db:13:da:03:36:33:96:21:de:4e:1f:a6:f6:1f:96:
60:e2:fc:56:ac:5e:81:db:3b:08:3b:5a:0c:42:54:ef:c6:b6:
27:8a:77:5c:b0:f4:60:ab:66:b5:48:7f:1d:a0:f2:f5:c8:77:
43:61:e9:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYrQIX68bOG4ymeLwNvWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjUxMTA0MTUwMDU5WhcNMjUxMTA1MTUwMDU5WjAzMTEwLwYDVQQD
Eyg1MDlmNWM4ZmIxMDRlMTMyMGQ1MzNjYTk5NDEzMTE5MWEzZDk2NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfIL9vdodRsZ/jDd2vP2N8/IwgCH
S90q5kTJSiL1UScwi6dFiEyufOE09yWHmQqh6HBs7DQSOdJWKQ8RcTichXn2k5uY
fSKRGRur/6EVa7jWx6tOwYORoeFY8mtklxH5XVA9gNEW3ei0xUytqRy7mXXnpQ/s
0oUCeJfHboLcbP36DtjAGb/CVNL76u5ivEZBmpfJei4Vn6Bo3GTRFumZvya6IvXh
9NsNzqQ0fKC6rBSzj/cYk+1s5+UghZMrWNts6Fn23lncPXv8PEk3FNh3VPfdA8yj
+2tJo9DzSZRok/o/s2SIoT/UZsFa84E49Z18YqTSY6MG6dv9Rmfxuz/JPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCfXI+xBOEyDVM8qZQTEZGj2WaeMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwBrBo8B
G03BMFAdRP8mjHCXJ5o1fMTyhZMTYwLa24+HiCG++k1rXYxNyWSb2dvgRu50nfWN
2uVaiAtoBM5xllWboggGFt2aRHabpyb87Ng7R0OJWweqcHUAgLB1OkSjURn3zHgB
X4u35rIIyYSMzLvcG2h1ikAJYIjmFeflxsksk2H0QM4FUQaE+Q2Yd3gwlFjDRCh8
sqeW1Z1RMU9k4YFgQ7c9b+BhmuwfDtCkFESCgawZlNen9LiJm1v3Wh5WXRyM/B6i
4wbi2xPaAzYzliHeTh+m9h+WYOL8Vqxegds7CDtaDEJU78a2J4p3XLD0YKtmtUh/
HaDy9ch3Q2HptQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:07 2025 by rpki-client