Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: JynSTxE5ow+NhlOioo2m25JTbL5MT8ZmOce/mH9Xw4c=
Subject key identifier: 79:E7:E3:44:6A:8B:0C:48:EC:BB:9B:D7:D9:00:7F:F0:5B:F2:6C:A8
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 019A71B8E09C041563BCD680AFFD26756B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 031C
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: 4ly71+TlNuetSLXxALug5JeD95eYzk2E25/0o8m2VEA=)
2: ldaG2ZtwFXa0D8MT2zJfF9j3gsg.roa (hash: Iho31engw2p2ICkoCri0OTvpMAFdFfQ9ZJ+brUIBG2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e0:9c:04:15:63:bc:d6:80:af:fd:26:75:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=79e7e3446a8b0c48ecbb9bd7d9007ff05bf26ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:d9:32:f9:20:22:fc:64:85:81:9f:0d:26:
9d:36:d7:ae:39:98:41:6d:f5:bc:49:3d:2f:21:29:
d2:1f:e3:94:e2:24:fd:9d:ec:0b:0f:37:78:76:f1:
5f:c1:51:b9:04:76:b2:31:04:df:f4:a8:74:d1:06:
93:b1:cb:71:7d:46:e0:d1:3c:aa:3f:2e:ab:79:2e:
19:c8:92:9f:5b:e4:5f:d5:5e:8b:41:ad:58:2a:a4:
df:09:3b:c7:10:02:b2:25:8c:28:00:9a:df:9a:cc:
61:35:c7:8c:7f:2d:ea:7d:1f:7e:fd:d9:d8:31:34:
af:f6:9b:08:63:d6:b7:e3:f4:6d:75:d8:87:dc:2a:
a3:3a:ab:e2:82:df:75:6c:d2:40:9c:4c:c1:fa:6e:
1c:18:05:13:66:96:1a:3f:6b:fd:52:9f:2b:cf:6e:
73:0c:e4:b8:00:2b:0f:9a:63:b4:9f:07:d6:9d:df:
31:8d:fd:91:1a:5c:76:6d:79:62:c0:ad:ca:ee:02:
7a:53:7e:44:10:9e:b1:8f:63:cc:79:5b:5d:b4:19:
d2:a5:e0:47:b1:a7:80:14:d1:3f:59:50:f1:82:13:
72:14:07:8a:22:25:0d:2a:02:a8:1b:d1:6b:06:b4:
7d:89:35:40:09:de:64:8a:70:d4:58:4d:79:7f:f9:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:E3:44:6A:8B:0C:48:EC:BB:9B:D7:D9:00:7F:F0:5B:F2:6C:A8
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fb:bb:a6:7b:51:53:6f:ba:0c:46:d1:62:43:2d:4a:29:25:
2c:e6:b1:c1:18:3d:f5:15:c1:31:04:da:41:84:4c:e3:2b:6b:
29:ce:a7:b0:68:e1:4b:e2:e6:43:79:c9:f9:a2:9d:b0:49:a4:
39:d4:3d:b2:27:fd:e0:ba:f4:03:ab:ac:be:5b:19:5e:40:cf:
a1:54:89:55:eb:0f:09:07:5f:5e:82:b2:fd:44:c8:7d:fd:03:
96:81:31:24:6f:94:45:23:7e:29:cb:ca:54:db:27:ab:a1:ca:
71:bf:d2:40:74:ed:c5:fe:1e:75:00:56:57:ac:bf:b2:96:df:
87:52:65:be:e5:6c:bc:a1:88:6a:aa:f1:91:27:57:2a:b0:ca:
5c:25:79:e4:67:55:cf:dc:bd:39:9e:88:cd:01:70:2c:1d:35:
b2:71:e7:2d:ae:fb:d6:c7:c0:03:4f:88:83:e5:af:09:5b:49:
5b:3f:a8:4a:5c:ac:c6:bb:9a:3f:64:7e:db:d3:ab:e5:66:31:
25:4d:ef:99:b1:2e:8c:e4:a8:61:a2:7a:c0:60:c7:71:d5:04:
0c:1a:dd:94:d6:89:a4:89:3b:8b:c7:a3:92:7c:a2:be:03:77:
ce:88:4e:49:bd:0a:2d:cd:84:52:43:e2:0a:30:8a:f9:ec:50:
9c:96:8b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:00 2025 by rpki-client