Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: Qzr3EBQvVQewCsvHPtVSQUiM3/LX0OfyYbBhnrIfmnI=
Subject key identifier: 5A:8F:77:22:48:18:42:B0:2D:40:6B:49:10:12:A5:FA:AD:C9:C9:B6
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 019A51873A234E12F6A81460D0C41ACC9CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 06D0
Signing time: Wed 05 Nov 2025 01:00:08 +0000
Manifest this update: Wed 05 Nov 2025 01:00:08 +0000
Manifest next update: Thu 06 Nov 2025 01:00:08 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: 4nJmxkqxxVFgPHAmRTDNmMlpV0NX6EdZ4lFX+xKBEYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:3a:23:4e:12:f6:a8:14:60:d0:c4:1a:cc:9c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Nov 5 01:00:08 2025 GMT
Not After : Nov 6 01:00:08 2025 GMT
Subject: CN=5a8f7722481842b02d406b491012a5faadc9c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:ef:c6:0d:4a:1a:ec:a0:01:ed:37:6a:2b:
e9:27:ca:c1:4d:06:47:11:c1:21:31:af:f0:11:83:
20:41:f2:b6:60:ad:40:54:3b:fb:45:06:34:b0:81:
52:f5:32:a6:c3:95:bf:9b:f6:79:e0:a7:83:ef:4e:
b4:ee:b6:5d:bf:95:3d:38:d4:3f:90:d9:c1:76:b6:
ef:2e:72:82:1a:8d:8b:b5:3e:0e:22:fc:81:a3:01:
e7:57:2a:05:99:1a:92:37:68:75:ad:fb:f5:da:d5:
b0:68:f9:a7:b4:87:3e:2f:01:34:18:ea:8f:3c:c1:
7b:de:79:eb:84:84:ad:49:be:07:7b:9f:05:55:f1:
48:cf:49:da:c3:e2:19:10:50:bd:b7:53:be:f6:7e:
0d:98:7b:2d:c9:1f:c1:b9:9f:92:2a:ac:c6:22:44:
86:7e:58:07:d7:5b:80:ab:e9:a8:3b:18:b4:6e:36:
44:08:0d:e1:c1:82:0a:dc:17:3a:b9:d0:ef:c8:e8:
bb:84:ff:09:20:28:a9:77:4b:65:ec:51:a1:7c:11:
1a:8d:53:83:4d:3f:92:19:f6:4d:4e:ec:80:1b:6b:
e8:50:a0:05:dc:40:8c:16:6f:4b:37:a7:7d:f8:8e:
98:99:d8:ff:88:69:29:aa:f9:cd:c9:c9:4f:aa:50:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8F:77:22:48:18:42:B0:2D:40:6B:49:10:12:A5:FA:AD:C9:C9:B6
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9d:a8:01:5f:06:e7:a7:c4:46:b1:d6:5c:33:b2:bb:d4:b4:
32:f3:d1:c2:47:bf:79:8a:41:db:f7:23:2e:fd:ec:ba:90:08:
48:ef:33:54:1d:a5:ca:5e:e4:26:bc:9e:46:5e:73:4f:56:c7:
68:cf:79:6e:2c:5e:5b:97:24:bd:bc:9f:40:d8:43:94:16:cd:
ce:bf:c7:9f:6b:e9:99:c8:9d:e7:6f:71:ce:19:ad:1a:78:b3:
c2:d9:a4:39:34:b6:78:6d:93:9d:ff:64:06:a4:11:59:a1:72:
cf:05:1f:6a:28:5d:1a:4b:4b:d6:8f:d0:7f:22:03:e2:53:02:
cd:c6:13:e5:ac:03:06:35:ff:b0:aa:55:d9:c5:3c:7c:ea:f3:
0e:6e:e7:b5:00:75:f2:aa:1f:ef:8a:d0:d0:03:4a:ac:d8:ae:
70:00:2b:42:88:ab:81:35:34:00:19:a2:77:8c:d4:c7:2a:78:
2c:b3:ee:fd:e8:b6:20:aa:f7:c0:bb:b8:94:28:8f:77:d7:01:
35:ef:d8:d9:77:9f:25:7a:40:dd:88:d7:aa:fa:f1:f2:5b:f1:
56:fc:6c:93:f2:48:96:20:43:c2:b6:5a:ee:2d:f9:f5:81:32:
57:9e:d5:99:65:f3:41:9c:fe:13:a5:80:82:a7:51:b9:01:31:
62:f5:a8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:24 2025 by rpki-client