Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: eJEkdthmgdHfWiPgXgBLZbMpg8h4PtSviQo95xy58lM=
Subject key identifier: 76:6A:77:BA:9B:FE:EF:32:99:1F:74:7B:D0:FE:8B:F5:BA:76:1E:5E
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 019A71EE5F40913B0B63B76ECDD22AB795E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0CF1
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: rIyEaCd+ltiL+MqoQ0iBiHZHoZVtXu1pOKbwbGj/bTo=)
2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5f:40:91:3b:0b:63:b7:6e:cd:d2:2a:b7:95:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=766a77ba9bfeef32991f747bd0fe8bf5ba761e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:f1:d3:b9:33:65:9a:de:40:5a:a0:3b:21:
6c:07:a6:95:6b:f0:8f:d5:a8:c1:5d:b1:f9:0b:32:
d6:50:d4:8f:e2:2b:da:67:55:a4:7f:3d:ad:62:9c:
54:30:88:56:87:55:fa:c8:9a:3a:fe:45:69:a6:ed:
5c:41:d2:ec:08:67:76:19:f6:65:f9:b3:b5:32:9b:
9e:ed:64:15:24:f8:53:24:99:c0:a3:19:13:c6:46:
91:8c:b6:a0:1c:3d:bd:51:54:4a:bd:b2:ff:3f:ab:
18:5b:17:c0:ce:71:bc:48:29:d6:98:2c:25:46:9a:
31:f3:6e:c9:d7:fb:dc:80:e3:f8:46:e0:c2:31:6a:
83:c1:78:a0:8f:e6:39:71:92:ea:51:fa:ba:e8:7d:
fa:90:50:4a:b6:89:d3:50:f8:d3:b7:a1:71:8d:c9:
46:b6:fe:cb:5a:39:6c:74:bb:a5:d0:86:b9:5d:a0:
79:6d:d8:96:3b:ca:40:1d:45:ee:43:67:f2:73:ea:
69:4f:fb:17:76:3f:82:33:e9:e8:54:5f:99:79:93:
ff:36:55:b3:7c:dd:3f:fc:57:d8:20:30:67:2b:33:
92:6a:2a:ca:5b:d6:a7:1a:97:30:59:20:59:8d:5e:
a0:6f:b1:a4:52:f9:85:21:e9:bc:70:03:52:17:e9:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6A:77:BA:9B:FE:EF:32:99:1F:74:7B:D0:FE:8B:F5:BA:76:1E:5E
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:16:f8:94:42:c8:6b:f4:32:f4:69:73:74:b2:a7:f2:2b:e3:
4b:33:f9:66:39:02:48:b4:03:d7:bb:dc:f9:e4:ad:3e:8e:d7:
55:6b:94:94:5d:44:76:18:02:3a:61:d1:72:79:78:e0:38:e5:
b4:5c:7f:5d:72:89:a7:9f:47:c8:f4:7b:e8:af:74:f5:24:f4:
71:fa:5d:af:e7:28:00:20:d2:af:54:33:63:60:33:a5:38:69:
4e:3e:d0:93:11:3a:f8:f6:1f:f4:77:98:10:58:9b:aa:37:32:
ca:8e:7f:4c:c2:61:b4:41:f7:21:6b:c7:70:65:4a:27:69:d1:
9d:df:a6:bb:ab:9e:b4:11:f8:3f:95:ae:86:ae:3d:07:f6:09:
2e:76:a8:6d:75:60:0c:92:84:f9:4d:5a:ca:2e:8a:5a:3f:7d:
9d:6d:5b:dc:18:8e:31:0a:41:ea:02:2b:5c:19:c2:53:5a:58:
43:cd:3b:4c:96:53:cc:91:4c:85:5a:f6:19:89:36:40:cf:da:
1d:ba:31:c0:d8:6c:e1:71:b4:a3:6f:b3:b6:e4:78:c9:35:f2:
8f:1d:a8:29:70:9c:2c:82:02:78:e2:b1:c5:06:23:6f:ac:a4:
c0:83:f7:43:12:84:f3:eb:84:d3:c9:41:9e:76:8a:4a:7e:c8:
79:94:c9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:32 2025 by rpki-client