Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
File: BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft (raw, json)
Hash identifier: A4j5lHpDfEXUsdnkaj/lF3PfkGOGrVgcxuyO/AXmXxQ=
Subject key identifier: 25:FA:FC:36:2A:16:36:C9:82:CE:C5:34:82:D3:41:6F:0D:C6:5C:AD
Authority key identifier: 06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
Certificate issuer: /CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Certificate serial: 019A5119513774D65FC7F820E6EE9ADC59A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
Manifest number: 03D1
Signing time: Tue 04 Nov 2025 23:00:04 +0000
Manifest this update: Tue 04 Nov 2025 23:00:04 +0000
Manifest next update: Wed 05 Nov 2025 23:00:04 +0000
Files and hashes: 1: BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl (hash: 3mcwHQwVcO2wRv3xqNM5OIZ8iIL2wXVFYiFsICVbUqw=)
2: IBb1HqZFTHsm_sCmjR2ccm8RUCA.roa (hash: KJ8NP0RBTfkNOG7Be7nzu7TlYeYPrpFzbgBEOJgWVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:51:37:74:d6:5f:c7:f8:20:e6:ee:9a:dc:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06188adfd16445a2a014e012e739bb812fe9cd0e
Validity
Not Before: Nov 4 23:00:04 2025 GMT
Not After : Nov 5 23:00:04 2025 GMT
Subject: CN=25fafc362a1636c982cec53482d3416f0dc65cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f3:44:18:ae:c3:4f:3b:7c:52:da:a1:d4:ff:
a3:e5:f6:b8:c6:6b:39:a4:27:c4:43:21:69:09:fa:
ce:a5:c2:fb:e2:4f:ae:a8:55:be:43:dd:32:3b:6b:
d6:2c:28:b6:c3:cc:f9:e9:26:e4:ff:62:d3:29:5a:
6a:3d:46:33:cd:ea:d1:f6:af:38:72:6d:49:1c:08:
b7:ec:42:98:cb:53:88:69:7f:01:d4:17:f1:70:06:
0f:13:bb:59:a8:45:49:fb:c0:65:c4:5d:19:df:59:
3f:9a:05:7f:7d:fe:7e:cd:96:21:32:0e:7e:b2:4f:
11:dc:5b:df:ce:37:b3:a2:b4:42:3b:88:b0:72:23:
3f:34:73:ca:88:a0:82:26:49:48:d4:51:8a:34:ed:
cd:fe:cc:c2:cf:b4:de:ab:ec:c4:31:fd:4d:5b:f1:
68:d5:22:5a:53:82:ce:93:3f:6a:f6:37:bf:57:ed:
37:7f:7c:5f:17:76:4f:d1:ef:9f:6a:e3:2f:4d:cf:
9b:f9:6f:d0:c2:a2:d8:93:ba:c5:fc:f9:ad:09:70:
5d:0e:bb:c7:b4:0c:b9:33:8d:a2:ff:5a:c1:84:a3:
8b:44:60:a3:63:65:67:85:a6:79:74:51:e9:98:d1:
d0:5c:88:4b:a0:5a:f0:0b:89:74:bd:7f:7a:e9:b9:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:FC:36:2A:16:36:C9:82:CE:C5:34:82:D3:41:6F:0D:C6:5C:AD
X509v3 Authority Key Identifier:
keyid:06:18:8A:DF:D1:64:45:A2:A0:14:E0:12:E7:39:BB:81:2F:E9:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhiK39FkRaKgFOAS5zm7gS_pzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1cf0a8-1be2-49fa-8151-df6cab4e45b4/1/BhiK39FkRaKgFOAS5zm7gS_pzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:cf:a8:63:cd:d0:3a:51:3a:70:30:f5:4c:6b:c3:9d:1a:
31:4a:63:60:49:05:a5:e8:bc:2d:50:d7:82:e7:f9:c9:3a:94:
1d:29:ec:69:de:09:8c:82:7d:cc:cf:9c:0d:31:c9:59:1c:bd:
f5:37:e9:de:3a:31:92:4b:a3:a1:ef:69:5a:50:ad:7f:93:fe:
e9:c0:c4:e6:ce:a1:92:36:84:90:72:0d:47:58:0b:e2:27:8e:
25:84:a4:2d:eb:75:1e:1a:3d:f2:41:be:30:df:e4:52:08:08:
df:0d:61:67:02:90:79:5c:b6:51:b0:d4:e2:4e:57:b3:be:cb:
4c:14:ec:ed:aa:10:e4:f8:77:29:0a:e4:1c:6e:a3:47:e3:0f:
7e:eb:82:ea:a4:06:07:95:61:cc:6b:84:c9:aa:30:86:c0:6e:
ff:59:94:fc:40:6e:ed:c8:67:c8:93:09:c6:0d:fb:2c:ff:db:
af:bc:c3:a8:86:f3:4d:24:f2:7f:cc:5d:2c:c5:ff:b9:4d:d5:
62:7c:7a:dd:55:83:27:22:b7:c9:25:ed:28:14:29:a4:7d:34:
4e:37:87:89:3c:ef:f5:9a:c4:af:73:3c:0a:61:dc:b4:e3:41:
32:f5:7a:13:27:0c:99:9b:06:78:6c:29:e3:d1:a6:2d:c7:b5:
a6:99:7f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:12 2025 by rpki-client