Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: X3tkUfe7lR/ViDg5EivM0rp86irL9CWGmlx2xzo/0ys=
Subject key identifier: EF:86:0B:74:E3:3F:74:66:18:9E:CD:0D:71:70:0E:AE:86:81:05:53
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019A50E34F465161A8D3E10B821B632BB4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 156D
Signing time: Tue 04 Nov 2025 22:01:05 +0000
Manifest this update: Tue 04 Nov 2025 22:01:05 +0000
Manifest next update: Wed 05 Nov 2025 22:01:05 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: W1D0vLae5SEDfd6Oa0SJ/5ESBVsVyNU034AWeBcv3+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:4f:46:51:61:a8:d3:e1:0b:82:1b:63:2b:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Nov 4 22:01:05 2025 GMT
Not After : Nov 5 22:01:05 2025 GMT
Subject: CN=ef860b74e33f7466189ecd0d71700eae86810553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:ca:a3:68:06:08:c6:50:a3:68:b0:eb:9d:
66:f1:8f:1f:2f:75:c1:9e:24:7f:44:82:e3:51:24:
ef:e8:26:f6:10:8c:b4:50:14:2f:fb:68:1f:67:af:
ca:a2:09:01:fc:62:d0:e0:42:51:b7:bb:9b:cf:9c:
e3:f1:f9:c8:7d:02:f7:5f:b9:cc:ab:a7:98:8b:f4:
aa:0c:e6:84:ae:9d:16:0c:d6:63:0d:8f:f5:e5:b6:
bd:24:88:91:12:2c:e4:eb:bf:0a:fd:de:0f:e5:84:
bb:83:f0:19:5e:fc:92:20:a9:03:a7:d7:7e:f4:9c:
ea:f9:b0:e3:5d:83:5f:ea:85:58:b3:b7:14:dd:54:
35:7f:9b:33:a5:60:08:bc:b6:78:06:b0:7b:ff:92:
59:e5:ea:33:c1:e6:be:ae:81:7e:a6:f5:65:e5:81:
a8:2d:ff:2d:6f:01:5f:af:cd:a5:46:e0:6b:8b:f7:
8f:26:74:4f:09:81:86:60:29:b2:df:37:9c:c9:e6:
75:f3:b5:57:2d:b1:e8:74:55:78:35:fc:5a:42:f7:
e5:f2:5f:3d:8e:30:6c:19:fb:07:43:f6:5d:b9:19:
f0:94:80:89:38:9c:3f:75:74:15:8e:3e:8f:c8:e3:
13:bb:ce:45:1a:f6:87:57:59:64:29:1a:46:8f:ef:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:86:0B:74:E3:3F:74:66:18:9E:CD:0D:71:70:0E:AE:86:81:05:53
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:d7:d6:d0:c4:f0:a9:75:02:00:b3:56:ad:48:e8:bc:52:
bf:d9:b6:24:f3:fb:ec:5b:81:80:51:70:00:65:54:5e:5a:94:
59:69:b6:1f:f3:a2:79:e0:64:b3:01:93:d0:48:27:26:b2:5f:
00:b5:13:0d:18:c5:b6:79:3b:28:49:4c:dc:c5:22:65:38:e1:
9f:70:e6:8c:d7:47:69:c8:b7:dc:22:21:a9:9f:78:6c:1b:e7:
e8:82:2f:12:50:82:4c:1e:7c:eb:d7:54:4a:6f:0f:5f:d5:fb:
09:a5:6e:bf:fa:dd:c8:17:a0:08:20:4c:9f:fd:a9:7c:4c:1a:
bf:11:e5:14:35:c0:2a:87:b5:02:8e:db:8e:c6:fa:26:4f:45:
9b:f7:55:59:ef:3a:6b:c5:7d:2c:61:03:54:9c:90:f7:c5:af:
33:91:81:27:a6:15:33:02:42:b8:f3:77:66:c9:e3:72:7b:fc:
20:75:13:9f:1c:47:a8:64:7a:b4:a6:01:3d:2b:d2:3f:45:24:
1d:3d:95:99:f9:6a:98:83:a4:30:e4:bd:dd:4f:72:b6:09:9c:
c4:c7:59:83:a3:ac:df:9f:d8:67:9e:c7:dd:ad:8d:4d:8b:73:
39:ff:23:e3:ed:b7:83:83:6f:c5:29:4b:24:3f:81:81:25:00:
de:61:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:02 2025 by rpki-client