Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
File: bxum4U2DqLFLBQJucQyGxGtzw6Y.mft (raw, json)
Hash identifier: XurkGD/qmVRmqHVJgp0xbzUwhUxbtlLPBrGo6t0B3eI=
Subject key identifier: F1:DD:31:C0:B2:08:9A:66:90:81:8D:04:1E:A5:AF:42:CD:BE:05:A9
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 019A71B7D2ACD61C8DF25D47388FFACA4C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
Manifest number: 0810
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: RU6VdlTWZNL-q9N5BjAojikcZLQ.roa (hash: KwrezzPn25+GlY3jG8i3xB8idIITxCdZcP3DJvhGhXc=)
2: _6tIu-5BhkTfQSIU-ovT-VQgmJM.roa (hash: brb+X8on990RM1qxLKFjMml5fBdiyywQAKjPoQC7+R8=)
3: bxum4U2DqLFLBQJucQyGxGtzw6Y.crl (hash: pVpFT2wVSNwJmn7XvLGkiRiEYNmJaVTBqrLDUzXj3ys=)
4: uCt91sHM1dE5cj9fzwI6U2H47bk.roa (hash: EaM9kfekbh46OZ7F5rxMV4FMRQkJJyJzsgvjGi6Og6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d2:ac:d6:1c:8d:f2:5d:47:38:8f:fa:ca:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=f1dd31c0b2089a6690818d041ea5af42cdbe05a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:08:54:b8:94:79:ea:4a:a9:80:49:82:19:
03:32:b5:73:70:f4:9a:d4:fb:db:35:54:0e:d5:53:
f1:07:94:af:a7:ba:0f:22:bb:28:7f:0a:07:3b:43:
66:07:16:30:77:e7:99:99:bf:17:20:b6:97:11:ca:
bd:2b:d0:1a:39:7c:d9:2b:1c:fa:43:a9:ae:13:c0:
fe:d8:f0:b0:4f:66:71:ce:a0:32:a4:62:87:23:44:
fd:dc:6b:96:0e:37:19:f5:c1:43:5c:64:94:d7:fe:
9b:9f:66:c4:9b:50:81:df:35:fb:ac:27:be:49:27:
f0:23:d9:72:18:5d:6f:9b:fa:7b:a3:3b:2c:ab:38:
34:c0:e5:d0:66:1f:eb:0c:1c:bd:9e:04:ff:f6:79:
c3:ea:ea:bf:3f:96:e7:47:4c:94:27:5b:88:06:b4:
3d:23:ae:81:2c:07:a0:b2:ae:13:46:78:3c:cd:72:
84:23:81:03:a8:81:b5:ed:67:16:13:e1:26:f3:71:
7a:6a:67:6c:19:19:39:78:0d:e5:5b:69:63:21:0f:
69:28:d9:25:28:35:1b:25:d9:a4:35:4d:b3:f0:c2:
8c:3b:9d:ff:61:e6:c4:43:4f:cc:d2:9d:7f:42:7f:
a6:41:66:ed:9c:f4:b4:40:98:76:bf:5e:20:35:7e:
ad:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DD:31:C0:B2:08:9A:66:90:81:8D:04:1E:A5:AF:42:CD:BE:05:A9
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:dc:3e:66:4f:63:1e:db:15:4e:ce:b7:b7:1e:bd:05:c7:e7:
ed:3a:6c:a2:53:78:fb:d9:97:e1:a3:df:7c:af:49:80:87:15:
7a:7f:75:54:e3:df:e9:63:fa:2e:9c:4d:8e:dc:a2:3b:c0:60:
ee:6d:43:9b:42:ca:c0:7d:0d:93:85:e8:72:fe:64:04:e5:03:
31:64:53:1e:88:9f:dc:ca:42:2d:d1:89:08:4b:17:8a:2c:15:
84:eb:36:d1:79:52:de:70:9d:d6:31:c7:b2:96:ec:84:81:72:
1e:8e:8a:33:95:65:20:e9:1f:e8:ce:a8:00:73:f5:bc:a9:04:
7f:cd:98:75:b4:38:7d:59:3b:4c:4a:a4:86:b9:16:15:15:61:
7c:b8:0c:4b:45:32:70:78:03:50:95:fa:4e:98:65:e0:a4:ab:
a8:7d:f1:1f:f6:65:20:4a:db:ff:07:7c:10:55:c4:11:1f:05:
ec:dc:38:79:53:61:2b:f8:d0:20:13:fd:ef:e8:a1:ac:52:d8:
a4:c5:af:d8:df:21:61:aa:a6:aa:53:c3:5e:c4:53:5e:07:04:
9c:ec:90:ed:59:e1:bc:17:8e:4e:0d:76:d6:dd:4f:48:ad:8c:
21:9d:57:21:3b:5e:60:09:78:c3:5c:3f:ac:f6:59:87:b6:cb:
fb:06:61:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:51 2025 by rpki-client