Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: vQL85h7QfhTNLnNvgUqwNs3K6lHU8loGoavVs10Ahf8=
Subject key identifier: 6E:DC:3F:CA:21:26:B3:5A:81:1B:6F:FC:66:BE:C9:41:E9:70:7F:8E
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 019A4F62F44C05AE91B4BFF837A407D1F78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 03F5
Signing time: Tue 04 Nov 2025 15:01:16 +0000
Manifest this update: Tue 04 Nov 2025 15:01:16 +0000
Manifest next update: Wed 05 Nov 2025 15:01:16 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: 7Opu5Zn1d82G92gnyu6acSv3Q+YRVQClE/vC5L8zMxQ=)
2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:f4:4c:05:ae:91:b4:bf:f8:37:a4:07:d1:f7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Nov 4 15:01:16 2025 GMT
Not After : Nov 5 15:01:16 2025 GMT
Subject: CN=6edc3fca2126b35a811b6ffc66bec941e9707f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:06:bb:84:da:76:76:8a:16:7f:e5:1c:e3:
2a:fa:b6:26:79:c7:f0:e5:67:5b:0d:c1:52:6b:da:
84:b4:ec:a2:f2:7d:1b:e8:91:c5:ed:2d:47:c8:b7:
0f:17:e5:d7:fb:55:39:c6:61:4f:5f:b4:bc:9c:e1:
c2:87:a2:09:5b:75:b5:8d:0d:72:b7:ad:1d:c9:4f:
d6:31:23:ac:23:31:19:01:ba:ab:07:7b:fd:d3:5e:
8b:4e:64:c6:6a:59:df:ae:c3:17:12:90:07:68:95:
be:91:14:00:59:d7:ab:e7:78:37:67:10:86:9c:a1:
2b:b3:70:2a:c4:4e:f4:b7:60:a5:60:1e:87:01:3a:
e7:d1:45:1d:49:82:a6:d0:96:54:e8:dc:5a:49:2e:
85:c5:e9:a2:71:f9:ad:24:1c:99:22:93:15:95:78:
2a:95:5d:e0:f6:89:22:4a:a4:e5:af:0b:ca:51:3c:
b7:16:85:2a:23:ca:e9:89:54:e8:f1:04:ac:8d:28:
f8:b0:b2:19:9e:4a:3c:64:c3:fb:8d:8b:f1:85:6f:
3d:02:55:d2:4f:9c:ec:c8:ee:a2:67:64:f7:7a:1a:
8b:7f:0a:aa:e2:f8:26:8c:f1:1e:a8:01:fc:9c:95:
79:60:54:25:b8:4b:05:ad:32:25:5d:da:a3:8d:02:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:3F:CA:21:26:B3:5A:81:1B:6F:FC:66:BE:C9:41:E9:70:7F:8E
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:bb:48:08:92:b9:a2:1b:43:6b:ed:8b:33:95:7b:f9:77:
e5:51:b8:3c:a1:d1:41:79:a4:7c:9b:56:30:4e:5c:0d:d1:25:
e0:10:50:7b:73:7c:13:5e:42:8a:c7:a7:88:a6:54:7f:7b:86:
92:01:5f:ea:63:da:46:ff:e8:d2:2c:4e:54:02:48:89:e8:51:
84:81:c3:c8:d1:9a:f2:1c:3e:36:c4:e4:d9:db:d7:eb:8e:67:
fa:f1:9b:1e:85:bf:f6:7b:52:a2:89:bd:b0:a1:e5:8b:3b:4b:
c9:d1:df:e5:04:e5:7b:35:d9:2d:3c:98:5a:c9:ba:f0:08:c9:
5e:ac:ac:c3:5c:f1:88:a3:ad:42:e0:d5:59:05:1b:db:d0:4e:
2c:7d:ee:5b:53:b9:16:82:ef:60:fd:5d:e0:6a:89:ac:2b:2f:
db:2f:8c:cb:ef:22:77:d7:91:3c:a6:c6:68:e5:8f:d5:5d:0b:
b0:a8:f6:de:71:95:aa:47:f1:2a:8e:9d:bb:43:f0:c1:05:18:
62:c0:f2:f4:d8:aa:2c:71:49:44:16:ea:f5:0a:9e:a7:53:51:
81:37:6e:6f:01:40:15:25:2a:fc:57:72:cb:fe:9f:da:60:d8:
dc:80:05:7a:58:5f:2c:2e:43:64:67:75:4b:a1:e3:5f:ae:22:
14:59:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:41 2025 by rpki-client