Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: fLR3O7y3oeulwl/Y/u5c/3x54GM483RQXRBy+zHH9Rg=
Subject key identifier: D8:CD:0F:FB:76:15:D5:EF:0D:A4:0E:B9:25:6B:10:BC:46:AD:02:D0
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019A515121FE255876999EB2DA9EE28FDB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 06BA
Signing time: Wed 05 Nov 2025 00:01:02 +0000
Manifest this update: Wed 05 Nov 2025 00:01:02 +0000
Manifest next update: Thu 06 Nov 2025 00:01:02 +0000
Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: PGMHnKy2X1Nn4EyejSusglf1OjLyZHyqUyzWXY0bSHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:21:fe:25:58:76:99:9e:b2:da:9e:e2:8f:db:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Nov 5 00:01:02 2025 GMT
Not After : Nov 6 00:01:02 2025 GMT
Subject: CN=d8cd0ffb7615d5ef0da40eb9256b10bc46ad02d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:47:13:06:19:aa:5d:94:94:b6:12:69:e6:
65:93:04:05:c0:ee:57:2e:b1:b8:f7:16:91:18:6d:
01:58:61:35:ce:e4:c2:d9:bf:eb:85:99:96:e7:2c:
6d:4c:b2:4e:fc:46:34:b0:ed:a9:c1:73:df:d2:49:
18:80:c4:8e:ea:63:04:38:77:22:26:19:aa:d4:2a:
7c:e5:7f:ce:66:aa:66:9c:ca:4e:37:eb:0d:34:82:
32:c3:da:c4:8f:5e:3a:b6:1d:66:a4:3e:b8:4b:45:
4f:c3:99:98:4b:a0:23:99:1e:3e:09:05:43:84:40:
a9:b7:e3:f5:17:6c:ec:9c:53:0a:e5:34:33:e0:b1:
e4:89:57:cf:11:a8:48:b9:27:36:8d:f0:51:bc:1a:
26:6e:22:0c:5c:2b:db:f2:fd:ef:0e:57:6c:92:0c:
59:a0:d7:39:b9:6f:7e:4f:99:b8:58:88:bb:d0:a9:
8e:9c:79:01:d1:56:d1:8d:ca:6d:e0:ae:17:e4:bb:
be:05:74:70:eb:29:ec:23:e9:ca:3c:04:89:ef:d6:
df:b9:be:48:df:a7:49:49:44:cc:96:23:fa:a3:bd:
88:fa:95:24:7b:c1:6f:e3:3f:c0:63:7e:a3:35:58:
46:89:35:46:13:f1:df:5d:79:73:43:18:89:88:3e:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:0F:FB:76:15:D5:EF:0D:A4:0E:B9:25:6B:10:BC:46:AD:02:D0
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5a:d7:9b:79:0b:34:1f:db:74:4d:c1:ce:2e:2e:a1:d3:4d:
fe:2f:29:be:cf:b2:b5:8c:45:c8:1d:14:d1:36:c2:cf:9d:62:
e2:8e:ea:2e:44:0c:34:85:c9:fa:c6:16:01:54:82:df:04:61:
64:47:e1:70:9f:e8:69:51:73:18:d0:37:b2:99:6e:dd:1d:f5:
8d:ab:b3:d4:5c:1e:fd:a9:a0:d4:bd:86:14:db:96:9c:dc:61:
7e:79:83:ab:f5:98:18:fc:76:b2:9e:29:0f:7d:e5:10:bc:63:
ea:ec:01:82:6e:88:37:cc:6d:85:84:ee:52:bb:6d:c1:02:b1:
f4:c7:b0:e2:ac:79:96:24:7f:46:c5:d2:77:7e:28:db:ac:11:
fa:ba:f2:6b:5e:51:45:9c:50:bb:27:c6:a6:05:e7:6c:cd:26:
77:bc:5d:24:a4:ea:56:4b:90:9f:c1:80:86:81:a2:e2:1f:01:
5d:5d:86:a2:39:3f:c0:d5:65:6c:a4:26:27:e1:d7:7c:ae:69:
be:4d:93:14:74:7b:18:60:2a:4d:72:86:58:ea:1f:df:2f:2c:
d1:99:21:54:c7:da:b7:b8:99:d6:63:b7:c4:61:4b:cc:79:da:
7e:c9:2b:88:b5:ce:b3:4f:f4:25:d8:10:81:3a:9d:f5:0b:25:
b1:cc:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:58 2025 by rpki-client