Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier: JBtPktx0ITo4iqp2jmUCuerPjNy2hh0x8cGsfa4I5ek=
Subject key identifier: 08:B6:94:18:D3:56:7A:42:F6:85:3F:4F:F6:0B:03:87:68:6F:CB:33
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial: 019A729358E94D1A9D28FAD183E0E5CBF324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number: 0796
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: 7TaTmNSvMvm1Y9qzhNSPL+7EHTa8zqxB+yKyIVqV2/o=)
2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:58:e9:4d:1a:9d:28:fa:d1:83:e0:e5:cb:f3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=08b69418d3567a42f6853f4ff60b0387686fcb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:44:8b:b1:45:d9:28:fa:56:03:c8:90:f2:
f2:ee:15:17:41:fe:a1:87:42:98:b9:f6:e6:33:34:
de:d7:03:65:b3:b3:98:5a:c1:74:c9:63:d6:c5:8e:
89:21:57:16:4f:a1:77:b6:cf:b4:a6:4d:14:14:18:
c6:42:21:cf:3c:b8:3e:51:f2:77:ee:1b:53:0a:48:
52:3e:3a:9c:a5:fa:ba:c1:cd:c4:3b:d9:08:19:54:
f6:02:69:0b:c8:f5:06:0f:f8:21:a0:34:c2:02:3a:
a5:e7:fe:97:b8:d0:f7:09:30:e8:dd:b1:ca:52:54:
ea:e4:5a:40:00:01:1b:c7:e3:1c:e4:2b:27:de:ce:
7b:42:9c:86:8e:ff:7e:1d:17:4b:39:2b:47:6e:ec:
6e:fb:30:03:70:52:11:f2:40:28:97:6e:0b:55:25:
93:b4:a2:2e:c1:81:53:fc:b9:29:b7:5c:f3:68:24:
9b:1e:a6:dc:ad:f2:2d:41:fe:b3:d1:66:4f:1e:f1:
2b:ae:c5:61:7d:89:ef:12:14:ce:62:83:85:3a:ec:
a5:26:23:ca:e3:76:c0:6a:97:7c:78:5b:ad:ac:0c:
a9:4d:17:69:14:a9:66:61:62:e9:6b:e5:d4:95:d4:
85:66:10:54:62:3a:06:a3:93:14:35:4f:a2:22:75:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:94:18:D3:56:7A:42:F6:85:3F:4F:F6:0B:03:87:68:6F:CB:33
X509v3 Authority Key Identifier:
keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6f:24:91:b4:3d:dc:ee:19:9f:f0:b4:b9:18:ee:c1:2c:b0:
64:f7:07:5a:9e:b2:2d:2a:7a:0f:97:0b:3f:0c:36:f1:b5:42:
46:e4:c4:5c:7d:69:92:8f:94:20:fa:45:9d:5b:f1:fa:49:72:
85:97:ea:81:2e:75:26:65:e3:aa:21:55:71:a3:b7:c2:33:68:
5b:16:2d:cf:35:a5:bf:45:a9:72:98:09:f5:13:eb:6d:5d:b2:
54:07:c4:7c:d1:8e:0b:c4:94:d3:3b:64:9d:06:d2:d3:11:32:
b5:f0:3d:00:0a:47:a8:69:0d:05:87:c6:c7:af:8d:7b:64:0c:
e4:96:ed:a8:8a:b8:36:4c:c9:66:ad:d5:90:c4:8e:46:62:00:
b0:69:64:3a:5a:5d:8e:37:0d:33:9b:78:20:29:a3:ac:53:b6:
a6:c7:88:77:aa:f4:63:ba:51:f0:30:c7:fe:c8:b6:d0:67:59:
65:de:42:68:70:09:b8:df:c7:db:90:5e:d0:df:67:48:5c:31:
62:ae:85:4f:54:85:c7:de:9e:29:49:01:34:03:a2:f2:2e:f1:
e2:03:f9:22:dc:58:69:76:9e:f8:aa:b3:b1:c2:e2:c4:3b:64:
43:bd:8c:c3:d5:21:bc:8d:9f:ca:5b:23:f6:80:d6:4c:f2:a9:
e1:bc:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:50 2025 by rpki-client