Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: 5OJPPzt+wej1lX4Istqhj6BFCkbP5KSVlHbWyTCzmtE=
Subject key identifier: BB:CF:C4:A4:F3:83:41:A6:E5:D9:B2:15:2A:13:C0:68:AB:C7:0D:11
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019A4E4FF76E034668AA52C7E2B90C2A960F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 03A6
Signing time: Tue 04 Nov 2025 10:00:54 +0000
Manifest this update: Tue 04 Nov 2025 10:00:54 +0000
Manifest next update: Wed 05 Nov 2025 10:00:54 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: bmvDOvrkt0/dTPnSJzyxuuFkdXlNVFPt1RObYPUcOlg=)
2: etfgBsu-roNKpTur1pxThz9Fty8.roa (hash: t6BKDhi6DeRPBuJrkIbiHfHBaqibLItCOSZCg5shE08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f7:6e:03:46:68:aa:52:c7:e2:b9:0c:2a:96:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Nov 4 10:00:54 2025 GMT
Not After : Nov 5 10:00:54 2025 GMT
Subject: CN=bbcfc4a4f38341a6e5d9b2152a13c068abc70d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:41:b5:ee:73:21:59:9d:e0:a2:b1:13:ed:
59:72:5d:14:d8:b9:0c:ef:aa:05:71:fc:2f:b6:ed:
57:c7:df:43:71:e1:37:d5:79:69:3f:aa:87:22:1c:
6e:80:81:22:b4:82:97:37:93:09:64:f4:77:ce:cd:
b1:c2:03:a8:80:a9:4a:1c:1a:ff:ba:9f:ac:94:3b:
ac:0a:8a:e4:05:13:b8:3a:6a:97:ce:a8:ec:99:c3:
31:6d:21:cf:43:56:fd:81:70:c4:de:1b:14:7e:e1:
4b:cd:71:e6:5d:0e:c8:64:73:1a:1b:55:02:00:88:
40:d7:e5:26:fd:76:c2:94:8b:96:03:55:df:15:8e:
ec:86:ab:dc:27:c7:80:61:76:31:fb:84:2c:1c:cd:
ed:cb:a1:15:d4:b7:20:8a:29:92:fb:d9:da:74:2b:
38:b5:75:2c:1a:72:37:af:60:71:90:dc:fd:8a:3f:
92:25:ea:57:7d:a8:dd:3f:70:20:63:27:e3:71:d1:
d7:37:fc:37:dd:c9:b4:de:30:51:9b:4a:07:9b:e5:
59:dc:26:8e:db:07:71:30:c4:89:62:7e:7f:e5:24:
ca:2a:bc:a3:a8:c5:ba:f1:bc:1c:d3:26:fa:bb:8a:
62:88:a2:f4:52:83:e1:72:1c:12:34:44:b5:eb:ec:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CF:C4:A4:F3:83:41:A6:E5:D9:B2:15:2A:13:C0:68:AB:C7:0D:11
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:09:ba:3e:b7:88:de:11:5e:21:5c:82:a6:ca:75:60:90:10:
82:38:3e:d1:60:5e:89:99:4f:b7:cd:4c:5a:70:d3:24:5d:d5:
17:c4:bb:4a:3c:51:86:13:23:56:31:37:bc:06:aa:e5:b1:e0:
70:34:fe:e1:fe:7c:b8:80:4d:9c:1b:69:09:6c:27:22:94:46:
35:10:89:72:be:b3:6d:82:44:65:8e:d1:60:e0:97:9c:db:43:
1e:4f:24:77:63:0a:ab:95:b7:37:dc:4e:f2:38:9c:5b:a0:7b:
a5:2b:30:2c:57:82:23:e1:b2:53:bc:e9:45:73:5b:fe:d2:07:
c5:18:fc:b1:c5:77:c2:72:5a:19:ed:d8:57:1d:ba:19:ea:15:
00:60:fb:75:c9:b7:70:be:d0:5a:b6:e8:f1:01:48:c7:42:fc:
6b:56:67:80:3d:3b:38:15:c0:43:70:e5:0d:54:7a:38:f0:06:
f5:34:21:cd:1d:fc:83:11:61:e9:ee:02:76:13:4d:68:b6:ff:
bb:e3:89:0a:c7:c4:aa:37:22:f5:89:a8:b3:f6:90:8b:74:db:
5d:af:42:63:32:a3:98:54:9d:24:2f:a4:48:09:d4:5b:48:32:
27:c8:fe:0f:00:15:5e:e5:98:aa:02:ae:94:e9:2a:df:91:d1:
47:7d:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:45 2025 by rpki-client