Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: X/n4GYJ14cBJCSRa4VwmYeWOu1VzBHl7S+y4yxYxx/o=
Subject key identifier: 56:8B:5D:78:5C:5E:62:FB:D6:20:3D:8C:0B:85:01:B7:6C:6D:5D:63
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019A4DE158CDB238492A7AEF00B49672CE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: euvK+WX4CmwYPGS+k9nC5enV9SWaD/XWFo3UJcJtNu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:58:cd:b2:38:49:2a:7a:ef:00:b4:96:72:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=568b5d785c5e62fbd6203d8c0b8501b76c6d5d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:60:86:fd:a8:90:d3:fa:48:b4:db:88:af:
e5:06:95:08:5a:07:32:d4:0b:c8:d4:84:7e:f8:77:
ca:7e:7c:92:a7:e5:12:0c:a2:2a:3e:aa:30:d8:7c:
48:a9:a4:9a:95:ff:10:48:eb:5d:d7:9a:af:a6:37:
eb:43:16:d9:b0:7f:df:1b:41:2e:be:5d:b8:a9:7e:
ff:7c:f1:92:6f:b5:af:3d:9d:c1:7f:1b:bd:51:8b:
0b:0c:f2:a0:b2:f7:4b:71:45:b7:94:e8:ad:8d:2e:
42:f3:f1:29:2d:a7:48:84:95:34:e8:70:33:7a:ad:
6a:34:15:a6:51:6e:f6:33:e2:b1:6a:69:6a:5b:3f:
01:ae:cf:7f:d8:67:2d:7d:8e:a3:31:c0:9d:06:33:
aa:f6:6f:40:a9:d2:53:7a:ec:6c:cf:80:f1:29:1f:
7a:99:84:ce:39:f6:06:9c:8d:e2:f8:26:24:8e:ca:
92:33:43:3c:67:89:71:65:d7:37:21:10:9b:e5:63:
78:17:7e:36:18:d2:8e:56:f6:aa:6c:59:a8:42:9d:
03:d2:35:c8:28:28:57:0d:bb:c2:25:ab:8d:a5:02:
0b:39:f5:a6:07:e0:1a:41:10:88:b4:25:e8:25:5e:
6e:fe:b7:a9:d2:ee:59:df:59:96:f4:38:b7:18:ba:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:5D:78:5C:5E:62:FB:D6:20:3D:8C:0B:85:01:B7:6C:6D:5D:63
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:11:da:21:7d:70:dc:ad:37:e1:5c:53:9d:c9:25:88:ca:e9:
02:d5:a9:f5:ae:74:af:3b:d3:93:d7:a7:a9:6f:16:9d:3a:4c:
53:c0:69:cf:e2:3d:3d:9b:b0:00:fb:4e:ef:47:43:4a:5f:9b:
ca:bb:63:e5:bb:c0:e7:6b:3e:2a:79:7b:51:a5:0e:58:2b:5b:
a8:a4:9b:e7:48:09:4b:59:65:9c:91:9b:00:15:f3:e9:15:cb:
0b:47:90:69:ff:3e:c8:2c:48:dd:00:af:3f:a8:98:99:08:d3:
48:5a:9b:90:67:26:ca:98:29:f6:3e:8b:fa:3f:aa:b4:0e:3c:
78:cb:f6:48:94:b7:b0:c9:46:df:0e:4a:9d:e9:a9:ce:a2:b2:
93:69:d5:d4:4e:89:6a:29:64:f9:68:8b:1a:4c:ed:c9:40:95:
c8:ef:9c:b9:72:b5:b4:43:72:78:27:87:d5:0e:ef:37:9e:1d:
f4:65:00:6b:53:8c:82:52:b3:13:a4:53:1c:ab:d6:8a:a4:24:
33:86:a2:65:25:68:5e:2a:5a:b3:86:58:48:2d:f6:81:b8:dd:
58:34:86:9d:cd:e1:37:c6:7f:b8:c9:08:8d:13:6c:8a:c8:46:
da:cf:7f:a5:16:c6:9c:23:7d:5b:8a:e2:f6:a5:3b:9a:9b:64:
39:13:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:08 2025 by rpki-client