Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: 3XI2C8H9kbaL+AXle9KvJFQumvmpv/LqHnImv6L95JE=
Subject key identifier: 57:23:89:AF:1F:00:4E:17:38:D5:AE:66:A0:8D:7B:21:AD:EF:9C:1B
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019A4F623D9BCE288EB20739F8B37CFF4502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 06B9
Signing time: Tue 04 Nov 2025 15:00:29 +0000
Manifest this update: Tue 04 Nov 2025 15:00:29 +0000
Manifest next update: Wed 05 Nov 2025 15:00:29 +0000
Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: 4e4nAesoOLiUkOYg3qKsQNwJLWuPkp5DSMi09vmK80g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:3d:9b:ce:28:8e:b2:07:39:f8:b3:7c:ff:45:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Nov 4 15:00:29 2025 GMT
Not After : Nov 5 15:00:29 2025 GMT
Subject: CN=572389af1f004e1738d5ae66a08d7b21adef9c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:2e:35:a1:c9:ba:7b:ed:ef:2a:42:dd:62:
bf:9d:8e:c2:f1:51:10:3a:a2:a1:0e:62:bc:2b:ff:
5d:02:1f:6c:d2:61:11:02:dd:8a:9c:74:95:c6:86:
22:9e:cd:1e:77:bb:d5:95:5e:c5:bb:5e:5a:fa:2b:
4c:d1:fd:a7:97:21:b6:f0:06:49:1d:43:21:26:c1:
5a:46:59:aa:77:c3:15:51:6c:fc:ce:cf:31:4d:7c:
ab:f5:a3:bb:65:aa:08:5d:ea:86:79:ff:5d:50:bc:
73:66:4f:a8:3f:58:fe:3f:b4:d7:55:c0:88:51:c6:
df:d1:aa:76:4f:1f:9d:df:c8:d4:83:82:1e:49:5b:
bf:f2:c4:45:6e:50:71:33:23:2a:a0:f4:99:57:8c:
b0:81:8a:15:9c:0c:95:7e:4e:8d:23:2f:f0:31:e7:
4a:51:a8:67:b7:89:3d:ef:8c:72:11:c5:c8:03:db:
12:a1:c4:c2:d4:25:cf:ca:64:49:39:fa:a4:c9:b1:
4f:8c:6f:a7:27:d2:5c:3d:6e:e3:2d:b5:19:20:16:
df:c4:4d:a6:f3:bf:87:a3:cc:74:47:b8:ad:27:f2:
56:3d:25:55:ea:2b:98:1b:2f:45:e4:5d:a6:5b:94:
32:50:09:66:96:0a:4a:b7:6c:c3:b8:f7:ba:6d:07:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:23:89:AF:1F:00:4E:17:38:D5:AE:66:A0:8D:7B:21:AD:EF:9C:1B
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:bf:9c:2d:17:3a:ec:3e:89:6c:31:a1:09:c5:03:22:5b:
e0:33:6a:65:e4:f1:a0:93:96:fe:1c:88:b3:4f:d5:53:83:9e:
bb:b7:00:3d:91:25:02:b1:8c:27:33:57:9a:a9:a0:39:9b:07:
4d:d5:2e:39:ae:56:21:b0:3c:a7:0e:42:38:15:cc:96:ed:17:
11:82:6f:5f:ec:66:6b:98:9c:58:0a:17:db:9f:76:e2:1b:09:
d8:d2:ad:59:01:0e:8f:1b:a8:08:19:45:93:00:d0:9f:e5:66:
d1:98:4e:32:f3:dd:98:98:d2:7c:c0:1e:da:4d:52:5b:25:9b:
bb:f3:d1:89:49:f8:4e:fd:30:26:22:ef:7c:82:af:d4:99:fa:
fa:60:87:ac:59:54:4d:b2:07:7f:5c:75:dd:fc:3b:20:26:d5:
00:4a:9e:9a:ad:e2:10:4c:8c:91:c1:40:ef:3b:9c:87:1c:dd:
1a:06:a2:8a:9d:66:10:70:db:d4:86:f0:e0:f1:0c:e5:b0:f5:
72:4d:9b:b5:45:08:94:c8:d7:c0:2a:8f:8a:bd:73:a4:e7:7e:
17:06:ba:56:da:1d:a8:e1:62:d8:e0:6c:00:ef:c4:3f:14:df:
3b:a2:71:41:15:08:cd:fe:bc:eb:a3:79:5b:9b:52:7f:16:13:
b5:55:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:51 2025 by rpki-client