Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: 43k7H6MBj3/vIjUGhNpWp0UfQ6W5RJhbrRJNXrOjAQk=
Subject key identifier: 85:DC:21:AD:8C:E2:1F:5C:9E:BC:4F:8F:46:75:C8:E5:76:CC:E5:F8
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019A4DE19CB360E007D7FC69924CF47E2FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 07F3
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: K9UKhjptfS8LTaJYsCfpZjPLgA9mlqgVvmt9GNink5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9c:b3:60:e0:07:d7:fc:69:92:4c:f4:7e:2f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=85dc21ad8ce21f5c9ebc4f8f4675c8e576cce5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:46:1b:3e:72:2a:9d:be:78:39:e0:61:7f:
65:b2:81:12:07:05:63:3b:9e:b8:5c:e0:55:f9:88:
37:b4:17:7f:1b:68:7b:58:de:bc:38:38:93:30:83:
30:1f:60:c8:cc:17:7f:b1:36:ae:04:85:92:17:d7:
ce:ad:b7:fc:e4:a9:5e:cb:a3:47:ec:7f:de:be:5c:
dc:59:5c:f4:30:d4:c0:01:a0:ac:59:14:49:7f:ed:
b7:24:31:f9:eb:f2:9e:b4:d7:d7:09:a3:c5:5e:e0:
5c:e6:57:75:ea:5a:14:29:94:63:43:9d:90:1b:1f:
6e:69:f3:16:32:80:2a:b5:da:7b:a6:d9:d5:79:0f:
5d:7b:7e:d6:7e:85:28:95:04:34:5a:02:b7:d5:a1:
4d:bc:00:78:0b:5a:e3:95:32:85:cc:98:5e:0b:6d:
80:da:d8:76:6b:61:a7:33:ea:05:87:65:02:ec:8b:
6f:86:b3:06:59:38:31:d6:ae:f0:d0:bc:2b:e8:0d:
7d:91:c8:19:48:8b:5e:ff:dc:a1:c9:b6:70:9d:42:
f6:8e:bd:70:d1:e1:cd:2c:50:82:49:4b:5f:72:00:
df:a5:49:33:18:e9:9e:d6:cc:dd:e1:94:ed:be:36:
e7:6c:16:f6:cf:ff:f5:ec:22:ff:d7:5f:78:cd:08:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:21:AD:8C:E2:1F:5C:9E:BC:4F:8F:46:75:C8:E5:76:CC:E5:F8
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:11:22:73:f3:da:87:4c:b8:11:e8:39:02:43:a6:f9:44:01:
f8:40:cd:2c:c7:08:b7:56:44:15:de:63:bc:f6:df:76:a2:c2:
6a:17:c3:d5:5b:07:4f:fe:64:22:f4:18:bf:75:14:6d:70:ca:
0f:61:df:cb:62:43:d5:c7:2c:96:de:a6:d7:d6:be:ca:25:a1:
8b:81:15:a8:aa:d6:a8:4b:f3:ff:49:6e:f4:eb:01:b4:ec:ff:
67:78:06:52:2f:3d:40:64:6c:81:39:1d:99:a3:58:d1:0e:df:
ab:3e:1b:b5:f4:42:aa:d9:98:1b:94:37:7c:4f:e0:d2:db:18:
ac:5f:32:9a:f7:ae:a8:ba:a6:8f:23:bf:20:d3:8c:69:ef:2d:
38:3e:c1:89:73:c9:19:20:ef:5e:d4:61:5a:ba:71:e9:12:44:
57:8b:6b:64:9b:51:b8:e5:2c:44:ee:0f:4e:c6:f8:52:16:4c:
c9:47:27:f4:ec:0e:1c:96:91:fa:3d:3c:52:bd:bf:0f:4d:b6:
4a:40:56:91:1b:51:1a:f3:ee:a0:52:57:60:0a:2e:53:0e:9a:
34:bd:c7:59:8e:68:5a:80:ed:44:ae:5b:a0:f7:d2:3d:e0:c0:
50:05:17:9e:c1:e9:59:3b:d9:cc:db:7d:3e:f6:68:5d:dc:08:
3b:37:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:32 2025 by rpki-client