Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: t6N/bCVa+2MFTro4+B/w1clkP+wH8tWAo6QyaWpd3XI=
Subject key identifier: A9:9F:4C:A0:B5:FA:41:3C:ED:00:31:96:88:7B:25:F8:39:8D:45:87
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 019A4E8672AAFA85243E52C2184DA8E67B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:25 +0000
Manifest this update: Tue 04 Nov 2025 11:00:25 +0000
Manifest next update: Wed 05 Nov 2025 11:00:25 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: 9R/n3Z3Nk6rILtuOmrL4yGb7UMYN4k8NyYsmGEDZP6Q=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:72:aa:fa:85:24:3e:52:c2:18:4d:a8:e6:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Nov 4 11:00:25 2025 GMT
Not After : Nov 5 11:00:25 2025 GMT
Subject: CN=a99f4ca0b5fa413ced003196887b25f8398d4587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:1d:41:c6:d1:f7:c6:80:77:a0:27:ab:8f:
7c:62:9c:fe:ea:ed:7a:b4:26:13:8d:81:be:b2:81:
5b:ee:1a:6a:79:18:a6:b5:e0:59:e5:69:b6:d2:2b:
2b:4b:72:98:dc:1c:ef:eb:6f:d4:1c:3f:d8:fa:6d:
f3:78:96:53:4d:94:ba:af:1f:31:d0:96:a7:5c:ba:
3a:38:94:5c:f1:35:4d:38:61:f4:91:1a:82:d4:d1:
d0:c7:ad:c2:16:9d:d3:82:61:5d:56:bf:a4:bb:d4:
c4:03:55:ac:32:e2:53:c3:27:c0:63:6b:f5:53:b6:
5f:70:d2:c3:d0:78:78:48:87:c2:79:b4:c4:3d:93:
d9:53:8a:b6:f1:18:ab:93:39:61:d3:1a:34:6e:9e:
34:eb:93:70:48:61:2e:31:99:ed:33:da:f6:7f:1d:
da:10:c7:0e:a3:34:c3:74:ee:dc:37:de:d1:00:ec:
8a:9a:7e:01:80:95:65:4c:58:08:e4:10:62:70:f9:
48:8d:9d:93:fb:d5:a4:3c:e8:17:5c:a7:cd:03:43:
01:be:da:74:80:29:91:d4:60:14:31:17:1e:c1:bc:
5b:2a:22:50:e7:b5:4e:73:cf:37:36:9d:58:2d:ff:
5f:09:ed:5c:17:14:ac:57:62:98:83:fd:f9:fc:fd:
49:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:4C:A0:B5:FA:41:3C:ED:00:31:96:88:7B:25:F8:39:8D:45:87
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:0c:35:6b:03:87:22:3b:eb:61:96:e7:e2:e2:83:10:23:
bb:60:8b:54:58:c9:fe:cb:7e:a1:a3:ea:e2:d0:34:e3:0c:9d:
ef:e4:1f:ea:9f:0e:c9:76:a0:be:09:8e:d8:6d:8e:2c:69:da:
45:86:72:c4:fa:be:fb:5b:a9:43:9f:57:9d:48:b0:23:bf:23:
24:ea:d6:78:27:d1:e0:21:20:27:d0:f0:04:e6:14:53:8f:ae:
e7:32:83:a7:d1:12:c5:18:c8:dd:97:d3:6c:42:e1:2c:88:d0:
aa:95:f6:3b:85:0e:34:21:1c:d6:ae:4f:b9:eb:31:cb:31:54:
5e:99:23:74:fc:03:32:31:4d:5e:20:e3:b4:ca:3c:a9:b7:b0:
79:03:cd:6b:85:73:4f:8a:4f:05:c3:bd:26:eb:64:f4:6a:9b:
bc:85:3f:b5:13:be:e4:6e:b4:cb:fc:03:83:95:23:de:73:64:
45:a9:b4:08:f5:4b:7c:db:56:81:1c:16:1a:6f:ce:73:5d:f7:
b6:f6:48:00:89:bd:95:89:1f:85:18:1a:80:fb:6b:e0:31:3d:
d4:ea:9d:a5:dc:c5:e3:b1:c4:d4:49:9c:58:7b:58:5f:52:08:
77:4c:df:1c:26:22:3e:52:65:24:f9:ec:d3:4d:58:77:ab:91:
f6:ec:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:29 2025 by rpki-client