Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: DCF7IENJ9fcz4xD2WP63n6wif7zs4xqtUIMVHtUnYPE=
Subject key identifier: 91:B7:33:D2:E2:A1:E6:DC:4B:1D:6B:4F:E9:A7:25:81:F4:2E:F0:BE
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019A4FD09E43ABEB376F2399E281DB7E7811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 17:01:03 +0000
Manifest this update: Tue 04 Nov 2025 17:01:03 +0000
Manifest next update: Wed 05 Nov 2025 17:01:03 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: bawsKLz72is/IXZlzhbuELmPTsb/2JMIXdGH0LCmFTw=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:9e:43:ab:eb:37:6f:23:99:e2:81:db:7e:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Nov 4 17:01:03 2025 GMT
Not After : Nov 5 17:01:03 2025 GMT
Subject: CN=91b733d2e2a1e6dc4b1d6b4fe9a72581f42ef0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:65:52:a8:da:93:31:40:df:44:6e:e6:a3:
c6:f3:a3:a3:e1:c4:3d:7b:e4:23:a2:1f:c6:06:a5:
80:99:72:c4:4b:eb:2f:11:fa:47:b8:c9:36:2b:f9:
ae:ba:55:a2:5b:a1:14:82:14:e5:98:eb:d6:a5:44:
ab:55:c3:29:d4:0d:67:ee:7c:8e:e9:9c:35:e1:8a:
04:6a:68:89:31:97:ad:27:ae:e6:c3:8b:2f:13:c4:
5b:44:71:38:e2:ce:93:a7:77:08:69:f1:3b:8a:d7:
1d:b3:2d:7d:0a:0d:0a:68:eb:a2:39:34:62:bf:98:
5d:35:83:35:05:a7:06:21:56:94:73:12:cf:4d:56:
83:3f:1b:11:40:6b:ba:29:d2:11:83:b3:f5:a0:42:
0a:77:d0:0a:53:f5:8d:fb:00:09:66:5b:e4:f9:e3:
06:cb:f3:0c:b7:d8:a9:20:bb:88:62:b9:0b:26:97:
b3:db:77:67:57:75:de:18:23:ec:46:ce:74:e0:14:
44:d0:55:f5:7f:35:10:98:17:a3:37:31:66:f7:8f:
81:fa:53:68:ca:be:b2:2a:1f:2e:96:7e:a1:93:38:
d6:2f:69:39:53:72:2f:14:a5:d0:24:3b:bb:ba:49:
70:0e:6d:15:96:72:91:70:25:9c:26:77:18:f4:d6:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B7:33:D2:E2:A1:E6:DC:4B:1D:6B:4F:E9:A7:25:81:F4:2E:F0:BE
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9d:27:29:32:47:b8:6b:82:49:af:c7:7c:91:e5:78:64:b0:
94:3a:e7:79:b0:95:c5:7c:b8:ee:f0:39:1f:e5:0a:1a:54:e5:
af:1d:eb:cc:77:3d:e5:fb:f8:31:83:77:99:8f:b5:9e:cd:dd:
1a:61:ef:3d:21:24:a4:e0:1b:24:4a:5f:86:02:d7:21:6d:07:
30:4c:16:34:29:e9:3a:7e:d9:dd:fe:c7:b4:bd:1d:1f:ee:7b:
1d:05:0b:c2:d3:92:5e:75:93:e3:cb:d7:95:40:9e:8d:12:29:
c2:75:c5:6d:08:f2:be:27:8a:35:a9:fc:83:9b:a9:80:1d:4b:
2b:91:13:41:7e:4f:c8:d1:24:49:90:71:6b:f1:b8:6a:59:2a:
98:ae:9b:77:a5:46:f8:6f:e9:b3:08:02:9c:d0:a0:0d:34:c8:
8b:3b:d7:56:7d:7f:b8:2d:15:ab:e7:aa:46:17:f2:af:42:06:
d7:6a:78:2d:cb:4e:4c:97:8e:ee:f8:b6:86:05:d8:19:a3:bc:
6a:18:63:80:ac:43:02:8e:58:f9:14:ff:f6:8a:0e:01:7f:d0:
71:a6:ef:84:38:18:d6:71:6f:ee:51:86:d9:ba:3f:dc:13:c6:
72:8d:e9:99:3d:85:92:43:3d:f5:0d:55:ad:4b:e5:4d:a9:f4:
db:b6:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:13 2025 by rpki-client