Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
File: bQih9MOF86e2KYTVPoFmWplUEPM.mft (raw, json)
Hash identifier: PeT3X8B08kucMvaHIl0KTP1SHh+NPx5hEU2UaqVu4xg=
Subject key identifier: DD:86:AE:74:E4:2A:96:62:34:45:B3:CE:16:8E:55:D7:B5:28:90:31
Authority key identifier: 6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
Certificate issuer: /CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Certificate serial: 019A714A18418AF9CFC9A89EE4B43EC33DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
Manifest number: 0B1E
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: J7EMvjCrDCSEaNvEXQjzbwryII4.roa (hash: Ak6AJOV8w0m5lQCAa41zEyYCpJIBSURSyT+w9pihP/8=)
2: bQih9MOF86e2KYTVPoFmWplUEPM.crl (hash: 56fnD2Eg3e1WeKnQTZB/RuJk2RbZlaRPNz0O7rToHko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:18:41:8a:f9:cf:c9:a8:9e:e4:b4:3e:c3:3d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d08a1f4c385f3a7b62984d53e81665a995410f3
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=dd86ae74e42a96623445b3ce168e55d7b5289031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:b0:d7:05:b8:ef:ee:ee:69:09:09:ad:22:
97:10:bf:d0:2d:aa:e6:97:57:eb:41:2f:ff:a7:3f:
65:11:4e:32:52:ee:86:82:7d:c3:a2:28:e3:35:32:
5d:32:f2:36:4d:56:be:9a:1d:e8:2d:c7:b7:7e:f5:
6e:f1:de:84:65:88:26:25:fb:44:10:8e:61:47:78:
d8:d5:bc:a5:b2:00:d6:1c:97:46:26:54:e1:f9:19:
ac:37:08:73:e8:0e:aa:74:e2:32:55:c4:6b:16:0b:
e5:0a:56:df:40:9a:1c:05:52:c0:1a:f8:80:c5:7a:
eb:c6:f4:92:90:80:7b:89:86:89:bc:62:6b:5d:0d:
ba:56:da:eb:f0:59:68:81:20:6e:6e:f3:5c:67:c8:
af:ce:bb:df:22:f4:b2:de:1b:b3:80:d4:89:71:c5:
fa:b4:93:24:43:fa:5c:6e:e3:08:5e:10:27:f5:66:
35:3c:a3:52:30:3d:34:ec:bd:0a:4c:17:54:56:28:
1a:b2:d1:b9:61:07:4c:eb:40:b5:ee:01:ac:2a:f2:
f8:c8:88:4a:42:66:24:c9:f3:72:4f:0d:21:44:f8:
3e:7a:29:d1:2c:c8:65:11:2b:f4:d5:2d:60:8f:ae:
98:08:46:96:b9:7b:30:47:98:29:e1:1f:04:df:33:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:AE:74:E4:2A:96:62:34:45:B3:CE:16:8E:55:D7:B5:28:90:31
X509v3 Authority Key Identifier:
keyid:6D:08:A1:F4:C3:85:F3:A7:B6:29:84:D5:3E:81:66:5A:99:54:10:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQih9MOF86e2KYTVPoFmWplUEPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/107467-56a1-48c5-add1-43a8526d82bb/1/bQih9MOF86e2KYTVPoFmWplUEPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d4:8b:21:a4:ef:26:23:ea:19:9e:5a:3f:2a:2d:5f:b9:9c:
dd:cd:2e:32:b4:31:6e:60:5f:92:1e:44:f6:43:e1:6d:31:72:
97:68:f6:8c:ef:f2:64:e2:67:32:79:f6:4e:7f:9a:c8:8b:54:
e0:25:56:66:a4:5e:86:ed:98:09:86:13:f6:a1:25:bf:eb:bf:
e2:1d:20:84:e2:67:b2:e8:4e:b7:c0:b3:0f:e7:4e:e6:79:c8:
0e:f3:5f:52:da:1b:b1:44:59:da:a9:f1:a0:4e:0c:df:dc:c7:
89:85:96:64:f4:7c:4d:05:46:7a:09:bd:74:da:2e:c2:d6:92:
da:87:02:35:c8:49:37:d8:82:45:29:c2:c8:bc:e2:83:ae:3d:
39:24:5d:cd:9b:5c:01:18:2d:df:8a:b4:d5:59:28:72:ff:38:
8b:cc:8d:b5:c8:dc:f5:01:85:c5:5c:18:81:5d:ef:2e:28:15:
86:05:a3:a1:50:38:a8:54:76:aa:db:45:de:ab:f7:43:a2:25:
e5:a3:99:46:26:00:94:55:b1:17:ea:43:8b:97:76:1a:3a:01:
3a:18:ac:12:3a:9f:e7:4e:f4:39:7e:92:72:1e:94:b0:ed:16:
cd:88:5b:d2:22:cc:50:0c:9e:29:ba:7d:bb:f4:34:0f:b8:1a:
b9:3d:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:32 2025 by rpki-client