Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: X1nk8zW5sYRn496Mnw/+A/yWlAQOzJlwQht+wXLeSo8=
Subject key identifier: 21:4B:16:10:10:8D:F5:A1:9E:DE:EE:D8:10:06:73:76:95:09:51:2F
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 019A1C5032E528CEB95194D563F3231DF68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 07F3
Signing time: Sat 25 Oct 2025 17:00:09 +0000
Manifest this update: Sat 25 Oct 2025 17:00:09 +0000
Manifest next update: Sun 26 Oct 2025 17:00:09 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: pKNGZKCsTDC/PH5kXHtCs1OUtOg+CU4Y5guXBD5pEY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:32:e5:28:ce:b9:51:94:d5:63:f3:23:1d:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Oct 25 17:00:09 2025 GMT
Not After : Oct 26 17:00:09 2025 GMT
Subject: CN=214b1610108df5a19edeeed8100673769509512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:67:7d:fd:5a:06:09:d0:e5:cd:27:5a:da:
30:aa:19:ff:85:b4:65:ae:01:68:a6:f7:48:f1:85:
5b:6f:34:f9:0e:c1:26:2a:f0:c8:84:d3:e5:34:8a:
89:2c:74:4b:fa:ee:fb:ae:39:49:00:19:a6:8d:58:
25:4e:21:1e:67:09:20:e4:91:1e:e7:83:3f:fa:6a:
73:37:a1:a6:ca:f6:89:e7:0f:b7:1c:8e:a4:f6:03:
13:2f:20:d2:54:c6:3c:03:51:a8:dd:59:c6:77:bc:
e2:28:c5:f6:6f:37:ed:25:b1:b9:d3:13:bc:16:5f:
f9:54:46:9a:5f:d8:1a:62:a9:fd:fd:b9:54:55:ed:
c7:b1:2e:16:ef:fd:d3:4f:2c:eb:ad:60:0d:05:60:
e3:90:5e:93:19:b4:cf:72:3b:de:8e:6a:eb:96:16:
86:f8:6c:d4:5b:a5:0c:f5:53:e9:b4:07:e6:98:d8:
ca:53:1a:a7:b4:07:49:a2:3a:eb:f3:52:d7:63:41:
4b:5f:ce:db:22:e1:37:e8:2c:b4:ff:d6:fd:82:40:
c1:83:8f:98:61:a9:50:0d:a9:53:26:1b:31:de:56:
b9:b2:3c:8b:2f:d3:b0:f7:7f:1e:2e:99:ef:d7:bf:
29:cc:82:59:af:9f:ca:bd:fb:b0:de:04:04:92:77:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:16:10:10:8D:F5:A1:9E:DE:EE:D8:10:06:73:76:95:09:51:2F
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:bb:48:ea:fd:8a:9d:29:b3:64:27:82:8a:5f:4c:f1:c1:
7c:14:55:91:31:2e:61:0c:96:32:50:4d:dc:1b:e1:de:54:3f:
3d:83:1d:d1:f7:a9:b4:75:5b:b9:c6:42:63:1e:1e:11:5d:c6:
46:b9:70:65:f5:cf:a2:3d:7d:9c:7a:01:48:2a:8b:9c:c4:40:
20:a6:dd:cf:16:bc:4a:e7:7e:0c:53:19:fd:b5:98:1d:fe:28:
69:e6:05:e9:8e:32:d5:d6:50:8c:23:26:1d:58:63:02:94:49:
7a:73:43:82:10:9c:fa:72:ae:45:4a:d2:cd:21:a9:ea:d3:52:
48:a4:a4:99:f3:d3:73:b6:58:ff:ca:4b:b1:ef:21:3b:20:99:
dc:af:8a:4e:52:8c:3a:8f:a5:38:b5:97:f2:14:85:99:cc:1c:
77:84:5e:88:75:b5:31:60:ea:27:30:61:af:24:22:d5:47:98:
09:0c:5b:34:a2:81:fe:dc:03:42:11:f8:24:7f:9d:ca:33:25:
c3:40:09:39:d6:8e:e6:89:76:6d:2d:f3:40:d0:22:cf:4c:95:
fe:3c:65:34:3d:ba:7d:ee:7b:8f:c5:e7:61:52:d1:a1:4d:13:
63:22:3c:96:87:19:b3:2a:11:c6:ff:82:03:65:ea:a5:cd:fa:
b3:d6:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:56:56 2025 by rpki-client