Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: e+vsymCg2RwymQswSNaR64UHOYzdBzc2L1Lbcgnis9o=
Subject key identifier: F6:D1:88:C1:3F:B4:7C:DC:B2:71:DC:5F:34:A1:66:59:DE:E8:94:94
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 019A4E86CBB0855DFAAA14993FC1B23AD0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0C6F
Signing time: Tue 04 Nov 2025 11:00:48 +0000
Manifest this update: Tue 04 Nov 2025 11:00:48 +0000
Manifest next update: Wed 05 Nov 2025 11:00:48 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: 6SIl4zqrIVWWAFKbbxxV38+IIt6Cnwdi1s8tZaJdfMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:cb:b0:85:5d:fa:aa:14:99:3f:c1:b2:3a:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Nov 4 11:00:48 2025 GMT
Not After : Nov 5 11:00:48 2025 GMT
Subject: CN=f6d188c13fb47cdcb271dc5f34a16659dee89494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:ae:c2:18:7f:f0:bb:89:91:0b:f5:88:aa:
f8:24:59:4d:1e:d7:7e:3e:1c:cc:66:6e:fa:2d:87:
93:7d:08:6e:c9:90:01:f2:01:98:9d:e0:1c:82:19:
68:ef:bd:85:8e:59:f1:90:33:e9:ea:cc:23:b4:96:
36:7b:95:9b:f7:6b:a6:53:b9:25:1b:20:08:18:de:
fb:42:d5:37:b4:87:0d:c8:5c:65:2f:72:23:06:9e:
98:21:12:b0:fa:91:80:41:05:05:3c:40:e9:a4:fc:
4a:9d:ee:a6:b7:2f:5c:60:c2:65:e3:68:f8:ef:95:
f0:62:5e:7b:27:00:94:ba:ef:3c:b5:dd:cb:91:ff:
4f:dc:ef:8a:91:a5:d1:ca:a2:2c:ab:00:89:2f:a0:
32:a7:3a:dd:4f:f3:5e:b7:e2:8d:78:b7:a3:22:e1:
6a:75:8b:ca:5e:da:c7:08:66:3f:7a:7c:3d:9a:f7:
0d:4b:c4:21:59:4e:4d:56:b1:30:bb:14:37:6a:67:
46:77:bb:bb:99:e6:94:13:93:ee:35:a7:12:b4:12:
22:da:c4:22:53:dd:6f:93:a9:4a:5c:78:ff:4c:bd:
52:39:31:ea:ef:e2:24:8d:51:13:ac:b6:f1:a0:98:
14:2a:a2:f5:85:90:57:b6:a4:73:f9:99:e0:6a:46:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D1:88:C1:3F:B4:7C:DC:B2:71:DC:5F:34:A1:66:59:DE:E8:94:94
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:aa:3c:a9:1d:68:d2:d7:29:31:ff:cf:34:d2:de:44:ed:
8b:e4:3a:6e:c1:3f:48:0e:b0:95:b4:7d:77:51:15:5e:79:a3:
3d:6b:2b:2a:8e:34:c0:f8:37:bb:d3:86:d3:7d:a2:f4:9e:c3:
a8:6f:b4:dc:f9:83:d7:7a:5c:68:92:bf:a6:ee:29:0c:13:c3:
69:f3:56:47:1f:97:0b:5f:f1:21:96:4c:85:16:95:4b:7e:d0:
5d:95:47:67:e7:ca:43:8b:62:32:28:3d:bf:c9:6f:b1:a7:02:
12:a7:84:a5:78:25:81:ee:58:69:0c:28:ac:47:bd:c3:09:2b:
0d:76:f3:f6:4f:84:93:5e:50:a9:61:bf:f5:f4:20:b2:c4:4f:
11:49:f8:1b:15:39:6d:a8:2f:d7:74:18:f6:4c:4c:51:db:71:
32:00:89:45:02:c5:87:17:17:d6:30:5e:c1:7d:38:ea:5e:54:
1e:bf:7e:de:e0:dc:05:ec:3a:d8:fa:4d:53:76:2c:d6:be:24:
06:7e:51:9d:c1:43:7e:ce:aa:a7:ea:dd:9f:2d:54:6e:a7:7c:
e7:a7:48:05:3b:47:aa:4c:e3:ec:bb:f1:99:b3:2a:6e:22:a3:
71:82:a5:cd:33:e3:bb:b9:4d:55:3f:09:66:5d:18:e2:52:51:
ac:26:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:24 2025 by rpki-client