Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: o+Gov6GOrYF4ybCMreqXm4SvXavei/fYNWUDiW6ZHZg=
Subject key identifier: AB:63:DB:A9:7D:81:33:40:14:66:FA:D9:9E:C1:81:23:65:79:9A:CB
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019A50E270451D6AFF1D6172177E039BE505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 1015
Signing time: Tue 04 Nov 2025 22:00:08 +0000
Manifest this update: Tue 04 Nov 2025 22:00:08 +0000
Manifest next update: Wed 05 Nov 2025 22:00:08 +0000
Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: 6+dVgYdW911M8/SWXl4LliKTFjhGi3O2eBTKf3mw5XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:70:45:1d:6a:ff:1d:61:72:17:7e:03:9b:e5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Nov 4 22:00:08 2025 GMT
Not After : Nov 5 22:00:08 2025 GMT
Subject: CN=ab63dba97d8133401466fad99ec1812365799acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:a5:29:62:08:a0:bf:60:1a:aa:f8:17:71:
7e:3e:7d:45:78:41:66:6f:8f:aa:85:a1:e7:ee:b6:
d0:d3:5e:37:06:66:48:19:ae:10:3f:e7:28:fd:eb:
fe:22:4f:08:c1:ec:97:b3:34:cc:9d:c2:1a:a6:34:
25:97:72:58:b4:71:c5:4d:10:64:14:1f:cd:51:01:
f3:8c:c4:a2:ac:be:fd:f3:6b:d4:5c:e2:d1:bf:0a:
c6:69:7b:11:b8:a1:a3:dc:2e:c0:0e:14:95:66:20:
c8:00:58:18:dc:63:a9:9a:e5:2b:93:bb:c8:e8:0a:
6c:1d:aa:55:4e:f7:af:f6:fa:dd:ab:e5:ff:ad:86:
0d:2f:71:8f:16:4b:e1:ee:d5:b8:ff:c4:e9:3c:f9:
ab:a3:d7:98:a9:34:54:07:91:00:09:39:d6:c5:a3:
32:a0:47:cb:aa:22:39:85:5a:b7:bc:34:d4:14:f2:
0b:1f:5a:97:2c:56:1e:46:8c:00:74:00:fe:e0:4e:
de:76:19:94:af:cf:1b:a9:79:d7:13:c0:a3:23:aa:
21:57:8d:bc:a7:b9:fd:b7:4b:47:8f:9c:f9:c4:f7:
30:45:14:ab:13:3c:ec:27:05:ce:cc:73:e6:15:ad:
eb:29:3c:8a:6a:d7:d1:fe:3c:53:f6:6e:3b:9c:93:
d3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:DB:A9:7D:81:33:40:14:66:FA:D9:9E:C1:81:23:65:79:9A:CB
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:07:ca:ac:95:f7:e8:8c:e7:eb:61:dc:39:68:74:db:b1:5f:
26:b9:e4:aa:96:b9:9d:a1:84:31:62:6d:21:4b:ff:ca:9d:c0:
b6:e4:71:c3:7f:8f:4a:6e:93:6b:91:16:a7:19:ae:63:76:98:
7a:76:70:26:9a:de:78:f4:6e:62:9b:f0:ed:ae:2a:16:39:16:
a3:4a:82:ad:22:de:ce:43:4f:1f:57:66:93:81:f5:45:3f:d9:
28:7b:f4:b6:59:29:59:a4:c6:69:74:9d:4d:bb:33:6b:68:ba:
04:cc:be:58:a1:20:ae:a5:be:1a:a9:63:0c:6f:c8:72:79:96:
11:a3:8a:8e:5d:95:18:14:ca:1b:7a:ab:09:5c:76:1d:9d:8e:
a6:c2:ab:3d:ea:fd:cc:2b:75:68:32:fe:44:96:00:c7:b9:31:
ce:f0:a5:2d:4c:46:ad:8a:e1:f5:b7:ec:ce:f8:cd:35:9b:50:
b5:93:48:2e:d5:f5:fb:ed:1e:f3:34:69:c7:81:70:c5:6b:34:
f9:33:28:cd:58:ff:ad:95:7d:45:c8:9b:f8:4a:73:f7:de:d8:
c6:ef:a2:df:70:03:f2:3f:4d:4e:30:c4:5d:c4:ea:90:3e:66:
8b:be:28:c0:c1:b1:3d:e5:da:53:b3:d4:a0:b2:a7:4b:0a:2a:
02:a0:db:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:17 2025 by rpki-client