Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: esBnYlOzI5xfLRva9Xzj04vavWHqFrjIeyysoodMPeg=
Subject key identifier: 1B:60:D2:40:04:C9:05:F9:6C:6E:86:16:A7:4D:A7:65:34:0E:13:FD
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019A725CACFFC0BF8812AB9F44C5ED78A7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 09F7
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=)
2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: mJDfmLBJqDntYCPNF0gwZj+Vmo7eS60jdvWZEml0nJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ac:ff:c0:bf:88:12:ab:9f:44:c5:ed:78:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=1b60d24004c905f96c6e8616a74da765340e13fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:5e:70:50:a3:60:12:76:81:46:a5:31:c4:
67:92:d2:13:b5:49:75:ff:7d:a3:98:76:47:ea:24:
fd:7a:10:6b:a1:5a:fc:a3:df:95:63:48:a0:1c:f6:
e9:38:91:72:62:20:a0:93:a7:40:3a:06:3a:87:66:
f8:b3:0b:43:b4:30:7c:14:e0:d1:80:c6:58:80:1e:
ce:6b:84:9a:d4:7f:f8:a8:4c:9a:29:ad:c3:9a:ac:
f9:e6:46:67:9c:26:0d:e0:22:4a:39:1a:8a:9a:4b:
99:b9:69:f6:4f:07:ce:63:85:fa:a7:d1:9a:c9:d8:
e7:1f:61:1f:33:4b:fb:82:1e:0f:d9:c2:1b:2d:b8:
80:fb:90:0e:16:04:6e:ff:ee:72:f7:d4:a7:aa:f9:
1b:99:cd:62:be:be:53:d0:2a:bb:2a:20:68:d5:e3:
06:a0:2e:47:7d:6a:6f:68:d7:c2:9b:6b:a3:5d:2d:
a1:99:01:88:b6:59:54:e6:9b:3e:e3:47:ae:d8:ea:
7f:ba:23:ca:f0:3e:be:25:04:b2:c2:47:37:ad:d8:
13:2e:8e:92:91:0d:2e:1e:fd:30:8d:8e:9f:21:eb:
0d:5c:53:61:d5:5f:5c:f8:17:8d:c4:0e:04:4f:f7:
43:e7:86:75:d0:d1:98:00:d7:df:75:dd:aa:79:aa:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:D2:40:04:C9:05:F9:6C:6E:86:16:A7:4D:A7:65:34:0E:13:FD
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:27:88:a7:7a:b6:46:d8:e0:95:de:6e:cf:b0:b2:6f:5c:
fe:d1:45:fe:5c:a6:54:a8:db:00:ea:1b:e6:f1:98:bc:53:5b:
48:0f:f8:b5:89:50:e1:94:87:12:59:52:24:f7:b1:82:82:7a:
67:eb:d8:3b:9c:29:a2:42:f5:84:44:55:b8:e6:94:97:80:5e:
eb:38:00:7f:24:96:40:d7:83:c3:ef:91:dc:14:22:a1:04:2b:
92:e4:b6:92:35:5a:37:91:12:cb:e0:a2:65:e0:7a:fc:85:3f:
f7:bb:20:12:53:64:9c:70:24:69:c2:0a:6a:ad:5b:c5:1c:8f:
08:8a:4d:7d:48:6b:f6:6f:45:66:2c:61:df:80:e6:3f:ad:f5:
b2:f5:8d:f0:7e:33:71:28:ca:c0:4e:13:52:79:e8:2d:b4:72:
18:f1:a3:f4:b9:76:ce:87:3d:b3:19:61:c9:11:f9:b2:01:d9:
72:38:03:83:c3:55:8d:75:e3:03:f6:95:b0:89:20:5c:4d:aa:
ae:91:ba:6e:25:97:10:80:4b:27:d1:48:df:12:82:e9:f9:30:
8b:ab:dd:44:b7:18:49:63:d3:20:64:06:e3:b7:1a:38:8e:c5:
ce:16:2f:c2:14:a9:81:c3:5c:5f:bc:9d:7f:d4:a4:78:ef:22:
dc:2c:e4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:50 2025 by rpki-client