Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: 1z8V1PAVWWYEMVnqG1KELalM9VFbv5W2Rx2toJUzTpI=
Subject key identifier: 55:74:A7:94:05:A5:7D:E2:F7:CB:79:62:5A:D5:70:A7:53:11:9E:3B
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019A71B81405A0F5E3505EDF91478E52AB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 145E
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: Q04zkgle/OAON6SIV98WvHrUFXAdvtYhr2O6x4dZBF4=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:14:05:a0:f5:e3:50:5e:df:91:47:8e:52:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=5574a79405a57de2f7cb79625ad570a753119e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:87:5b:a0:e7:e8:df:e0:f4:fc:61:b9:fb:
8c:9f:83:96:21:10:59:65:5e:ab:7d:d7:de:fa:23:
5c:c6:ad:ba:5a:1a:a1:bc:62:95:73:5f:2d:5e:1c:
5a:8c:a7:e0:31:53:fe:56:96:e3:6b:59:cc:d4:4d:
6d:71:d6:90:39:4f:e5:55:c9:e6:4c:63:52:60:ff:
55:1b:74:1e:b6:24:01:cb:98:5d:42:d4:a9:bb:b9:
c0:69:ca:63:d7:7c:ee:cd:01:c3:62:60:f6:92:c9:
07:f1:39:ea:59:36:f1:4d:65:79:75:1a:a8:6a:55:
c7:e2:85:1b:9a:ca:2f:44:aa:09:59:72:62:8b:39:
da:5b:74:18:08:9f:18:5c:45:ee:21:ac:60:aa:50:
4b:e2:0c:c5:4f:be:32:d4:bf:de:0a:13:50:de:ca:
9b:fd:c3:5f:e0:85:c4:64:d2:36:b2:ca:f9:41:9a:
48:17:d2:56:c7:8b:aa:09:22:0c:c9:45:d1:cf:be:
6c:df:40:73:28:69:b2:1f:b4:9c:ea:6b:2d:6d:c5:
f9:a7:77:c7:09:cb:5f:7a:11:47:2b:f1:ac:7d:76:
74:2e:c0:93:95:9c:f9:c6:ef:57:ec:14:4f:e0:f1:
a6:85:d6:2c:26:74:f2:cf:5c:36:3b:0b:1e:b8:ea:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:74:A7:94:05:A5:7D:E2:F7:CB:79:62:5A:D5:70:A7:53:11:9E:3B
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b1:50:c6:cd:2a:ee:e2:9f:77:f8:3c:aa:2a:7a:45:7b:c4:
10:23:6b:36:a9:33:2e:83:f9:f3:ef:0d:2b:c0:1f:b1:01:c9:
3b:d8:27:de:69:eb:ec:12:ed:1b:85:89:2a:69:a6:72:6f:7b:
4a:d7:5a:1f:91:73:21:92:6d:9e:63:2d:9e:12:52:fc:01:88:
52:3d:cf:36:73:7c:96:7a:72:2d:f3:28:16:b4:9f:16:e1:b8:
67:63:a4:1b:76:ee:b9:98:16:eb:3b:94:7a:dc:7e:c4:08:0e:
ee:0e:a0:97:76:87:a8:36:4d:ca:b1:0d:6f:1e:85:bd:0e:b7:
25:82:db:8e:2f:0c:40:a6:c5:6d:01:05:3f:14:31:d6:b2:d1:
ec:ef:cf:05:30:40:cc:d4:05:d6:d3:0f:44:5d:d2:99:f6:d6:
2b:72:5c:f7:a8:10:5a:96:23:47:43:43:a1:94:6e:30:26:a4:
9e:29:fa:8b:ef:78:92:97:87:06:1e:09:c0:29:72:7e:c2:27:
4c:4c:0e:1c:40:7a:52:dd:57:d6:4a:98:bb:da:f8:57:ed:13:
9c:7d:e2:01:67:20:a8:84:99:e5:6e:a4:62:fe:dd:a4:a0:e8:
83:e2:6a:df:97:09:bd:ee:a6:55:6f:e8:94:ea:48:3d:27:30:
4c:7e:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:48 2025 by rpki-client