Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
File: bxS5AO_2EKQYf2-9ReO4V9CJagA.mft (raw, json)
Hash identifier: 9Ux3ZMccwYJBDDd3PPcYsRKyoLmn5kdvCXO4HdEEEEQ=
Subject key identifier: BE:E8:7D:C6:21:6E:CD:6C:B9:53:DC:68:17:6B:03:69:D9:66:F8:04
Authority key identifier: 6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
Certificate issuer: /CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Certificate serial: 019A4E4F85AE1D4714A09C6E46134732D920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
Manifest number: 12DF
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: SypHcS2TCeSzWsz9z2kBBl8vAYI.roa (hash: BOfV4yJp6FkVF9lKaxd4Gzr149eV94r4oonhHz+9iv4=)
2: bxS5AO_2EKQYf2-9ReO4V9CJagA.crl (hash: a3XrnL1k11dk33y6imEgsHG4ILZqcosBHG96Q/KDuAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:85:ae:1d:47:14:a0:9c:6e:46:13:47:32:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f14b900eff610a4187f6fbd45e3b857d0896a00
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=bee87dc6216ecd6cb953dc68176b0369d966f804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:15:2f:c3:5a:e1:71:ff:ae:2c:aa:c0:18:
ce:99:7c:ec:ae:7b:d6:2d:99:65:b1:53:4e:55:53:
15:ad:a1:1d:af:1c:f3:4c:93:e8:25:32:3b:2a:df:
ff:ee:11:3c:e8:74:66:e9:03:a8:04:3a:50:20:62:
14:12:ff:25:b0:90:21:d9:58:ba:dc:82:be:1a:6c:
22:c0:38:74:11:8f:cd:ae:6b:64:ee:22:6f:28:28:
4b:59:41:ed:a7:9a:7a:65:b3:79:a5:48:59:f4:e1:
2c:89:6d:98:70:7f:7b:cc:a2:37:af:90:05:09:36:
70:3b:af:12:19:75:4e:3a:03:f2:a0:c4:1e:e0:dc:
a0:67:1c:31:51:e0:68:cb:7d:c7:98:60:9a:82:16:
d0:ed:92:d7:9f:6e:d2:46:43:8f:99:ae:3e:04:b4:
9e:e1:65:3e:93:39:76:66:e0:cd:75:fe:ad:81:e3:
09:40:ef:74:47:6d:45:67:1c:83:e7:b7:77:54:17:
32:21:5c:07:61:c8:66:12:59:78:e9:5c:4c:02:9f:
ff:85:55:05:14:ab:f6:66:79:54:9a:35:c4:b7:4e:
97:8a:48:14:65:7e:db:4b:c2:83:a9:68:4d:bf:dc:
63:fb:f2:84:68:81:ec:e5:16:e9:0a:08:49:7c:a4:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E8:7D:C6:21:6E:CD:6C:B9:53:DC:68:17:6B:03:69:D9:66:F8:04
X509v3 Authority Key Identifier:
keyid:6F:14:B9:00:EF:F6:10:A4:18:7F:6F:BD:45:E3:B8:57:D0:89:6A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxS5AO_2EKQYf2-9ReO4V9CJagA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7b1826-a6af-4704-8f85-5181a2f0d197/1/bxS5AO_2EKQYf2-9ReO4V9CJagA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:01:8d:53:c3:f4:b4:b5:0c:87:09:ef:89:99:84:3f:bd:6a:
a8:03:5d:b8:0d:59:f5:1b:9b:38:0a:c9:bb:14:ec:1e:57:47:
cb:d5:53:8c:74:d5:1b:96:5e:c2:46:49:d4:46:95:ea:c2:7f:
ee:65:ea:6c:4d:ac:1d:06:1c:63:c6:b5:e2:91:41:3e:78:96:
d2:e1:0e:ff:46:52:9a:d5:72:d8:01:78:b9:94:10:33:59:5c:
09:96:8d:b1:05:e3:06:f5:81:d1:2e:ad:65:19:d7:95:52:6c:
cf:3e:05:14:a6:a9:8b:3f:62:90:24:57:65:e7:86:e3:8b:8d:
bc:69:12:db:51:f8:58:ea:97:30:bb:e9:0a:b6:4b:55:94:ca:
40:3b:70:c4:06:f9:6b:48:92:5c:1e:f5:da:d8:42:8a:1b:19:
a0:25:c2:7e:c6:d2:50:d6:bc:70:4a:9d:c2:72:14:cf:5c:6a:
7b:59:fc:7c:54:0c:50:2d:d4:e4:fe:f9:81:c9:8c:ae:93:bd:
a0:39:42:33:cb:91:5c:a2:e5:a2:8e:e2:b7:53:5e:d3:46:b0:
60:29:96:7c:cf:6d:4e:b9:c1:a4:f3:a9:c7:bd:f6:e6:13:53:
fd:55:a4:c1:44:8b:48:4e:a8:c2:bd:0d:a9:4a:6d:f6:bc:22:
6f:32:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:51 2025 by rpki-client