Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: ORPi6upwbHhLDXp8jictOKth09+zCsK8MQBDqxqyQXM=
Subject key identifier: BB:64:0D:49:8F:C1:A9:73:88:BA:8D:C0:2F:FD:EF:78:FE:F0:1B:F8
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019A73011C690FE33667A6683A481885D167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 13:00:43 +0000
Manifest this update: Tue 11 Nov 2025 13:00:43 +0000
Manifest next update: Wed 12 Nov 2025 13:00:43 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: iNxdSHZO/OSpwNgjbnaVuBuP25rdtUYI3Y41fHuA1Es=)
2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:1c:69:0f:e3:36:67:a6:68:3a:48:18:85:d1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Nov 11 13:00:43 2025 GMT
Not After : Nov 12 13:00:43 2025 GMT
Subject: CN=bb640d498fc1a97388ba8dc02ffdef78fef01bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:5c:3f:1b:29:b3:a0:7b:df:62:8a:39:cd:
1b:6e:3f:b5:15:34:73:b6:f5:e4:34:c9:fe:9b:82:
0b:89:04:27:c5:d0:b6:1e:b2:c4:d0:07:46:30:30:
21:eb:32:d3:a3:5f:67:ba:d7:bf:b5:2a:80:04:ca:
3f:6e:cd:87:b6:68:e5:a0:28:1a:63:35:2f:f3:24:
04:5b:58:0f:17:e5:ff:9b:7d:18:e1:9b:03:1f:89:
c2:52:c8:ee:2e:25:98:61:c4:63:99:ea:31:fd:6b:
17:e6:8a:02:1f:d6:cc:d0:cb:a2:3e:3b:02:95:93:
a7:40:2c:4d:94:ea:43:36:31:63:47:04:67:43:b9:
14:fc:37:9c:25:48:22:ae:2a:e3:9f:50:b4:7a:43:
25:58:28:6c:9f:10:ae:28:e3:08:35:87:c6:e3:14:
37:ca:b8:57:64:c6:91:65:76:f4:53:8b:55:ef:4c:
61:6a:e4:a5:7f:a2:4b:67:58:fc:c1:25:22:12:b9:
78:34:fa:86:61:73:df:da:8f:bd:5f:39:f6:dc:44:
d0:6f:97:72:58:a2:ae:79:0c:7a:64:79:1a:8f:a1:
b5:2a:ea:75:07:16:ac:f3:92:44:9a:d9:8f:0b:3e:
fa:22:dc:d5:19:e8:3f:df:6a:5d:2d:06:03:3e:51:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:0D:49:8F:C1:A9:73:88:BA:8D:C0:2F:FD:EF:78:FE:F0:1B:F8
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e7:b7:7e:e7:57:8c:d2:f5:6a:54:04:40:06:d2:dd:0a:27:
bd:97:36:75:3e:92:52:50:06:94:66:1f:6b:66:35:de:02:97:
4d:62:e6:ae:9e:97:ae:37:5a:c1:80:db:bb:59:b8:44:84:47:
9c:60:94:d2:c3:b9:e5:61:75:b2:f4:17:09:be:b8:4a:49:65:
37:08:10:76:d1:63:c3:31:11:bc:d0:c6:98:82:8c:52:d9:75:
58:18:37:9a:77:51:6d:a8:c2:19:66:f3:09:34:b1:6d:c8:bb:
7a:8a:da:ca:64:59:f3:13:f0:7e:60:af:41:4c:14:50:9a:01:
ab:f9:3d:a8:0a:47:7b:54:75:60:ad:3f:9a:3d:23:a5:f0:02:
da:f3:55:9e:94:f2:4c:ce:c8:d3:8a:b3:2a:3e:dc:12:13:80:
07:6f:2d:b6:19:05:bb:20:3a:e3:05:00:1e:04:e0:a7:a0:ea:
b6:2e:3e:8b:44:9b:b3:8d:22:f4:d1:21:c1:df:33:af:14:53:
c5:68:75:af:4f:ff:94:b4:46:b2:71:9c:82:b5:a2:fa:6f:81:
a3:88:ab:2d:0d:7b:5e:49:a8:c8:0d:cc:68:de:5b:05:af:a9:
27:42:95:62:83:96:32:9d:d7:a5:5a:8d:7e:4a:74:16:18:db:
0f:47:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:41 2025 by rpki-client