Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier: Jx/ZjjNc54Tk63qrEGDvRirOd8zBy3dgmk8WeWO3kEY=
Subject key identifier: 66:A8:7A:56:5B:50:13:42:94:22:30:3F:FA:41:1D:DF:13:98:C0:5A
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019A53086D0D3FD4AFB4875825D602FB0BF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 08:00:52 +0000
Manifest this update: Wed 05 Nov 2025 08:00:52 +0000
Manifest next update: Thu 06 Nov 2025 08:00:52 +0000
Files and hashes: 1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: y6/n7GAw+x3Dm8wSTxwhHu2OPAwGOl4N8vY/84ZStpU=)
2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:6d:0d:3f:d4:af:b4:87:58:25:d6:02:fb:0b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Nov 5 08:00:52 2025 GMT
Not After : Nov 6 08:00:52 2025 GMT
Subject: CN=66a87a565b5013429422303ffa411ddf1398c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:3a:db:68:89:b2:b2:1d:64:dc:b8:4e:eb:
58:38:2f:9a:ea:dc:a9:b6:cd:6a:d5:0e:6f:22:37:
c8:0a:29:82:8a:b4:78:4b:d5:1d:23:87:40:69:9f:
3e:40:4f:cc:ea:32:bb:60:55:bd:88:0e:dc:ec:cc:
1f:37:d6:a3:68:8d:01:84:e5:d3:02:24:cb:57:a6:
3b:c4:ba:c8:2e:3e:e5:00:ba:90:d6:07:a9:a8:01:
8c:ab:3f:a7:2c:f6:a1:cd:00:bb:23:64:87:cd:71:
8f:0d:53:6a:a5:8d:86:1f:e0:81:9c:87:9b:35:cf:
4a:37:0b:72:fd:89:cb:f3:08:2c:0c:c3:fd:17:dd:
fc:06:fc:46:5b:61:9c:3e:f1:dc:92:16:8f:b8:ff:
dc:eb:b2:40:d7:9b:d2:54:ca:53:08:6e:b4:40:f4:
01:ca:66:9a:74:7b:50:39:67:c7:71:91:7a:78:51:
e6:f8:60:07:3a:b6:2f:da:57:b6:db:03:07:91:86:
96:93:cd:a1:af:9b:3f:b0:4e:5b:ef:67:90:f7:d8:
82:bb:fd:1d:d0:27:20:fd:47:a7:5a:8e:15:62:fb:
2c:13:b0:b1:63:ae:36:9d:ea:b0:be:4d:a0:0c:f7:
b0:e7:bb:86:19:2f:e8:92:24:17:63:85:66:1d:5a:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:7A:56:5B:50:13:42:94:22:30:3F:FA:41:1D:DF:13:98:C0:5A
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a4:c1:fb:91:32:b8:ed:d3:08:95:1a:ed:83:6e:a1:0d:0d:
3f:e3:65:ff:bd:90:ff:59:d1:f9:3e:e8:1e:13:52:3e:9b:e6:
ff:5b:14:63:4b:bb:a4:22:db:70:b5:76:05:fb:fc:bd:43:1b:
a5:d6:aa:e5:88:d5:bb:bf:7e:bc:9e:6e:df:b8:a0:bb:e5:c2:
35:50:2b:a6:c7:78:7c:27:f9:c3:24:aa:db:20:7f:cb:af:ec:
d6:35:6e:40:9d:29:39:55:3d:76:b2:a3:e6:a4:05:97:fa:28:
c9:63:f0:10:f6:43:68:b1:a4:ec:c1:fd:05:66:f8:b3:c9:2e:
51:55:c4:48:ac:10:26:b5:75:95:58:d4:c8:26:02:77:57:bc:
d4:70:9b:5f:1a:ed:24:8e:27:ad:2d:a7:54:13:43:c8:3f:a9:
0b:40:f0:b5:93:80:29:44:74:76:65:e0:c1:51:6c:45:39:ef:
42:22:cb:81:a1:2c:e2:ec:56:46:0e:94:42:88:08:6b:0d:4b:
28:fa:bb:fb:b6:e5:1b:8e:1d:97:22:40:68:a0:2e:d4:99:69:
00:af:4d:10:bf:6f:fc:f8:d7:ea:e8:e0:45:5f:b1:d3:00:93:
3d:1d:b9:21:4a:6c:30:c8:e5:8f:ae:1e:21:04:47:f7:75:d9:
e0:88:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:27 2025 by rpki-client