Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File: BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier: vNOf+YMhhW1cvmfWtk7R0Oy2GJ+7R6zqnTKZC2Vr30k=
Subject key identifier: F1:5A:97:B5:9A:C5:1F:D7:8C:90:8E:64:47:A3:3F:79:1E:B9:F2:5A
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer: /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial: 019A71EE5BC6DE41A6D97EF88EDC9D8214ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number: 0E00
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: 4FiNbKjJOpjeB72sOhxP/swpTTI27NmJonqrwlVUzEg=)
2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5b:c6:de:41:a6:d9:7e:f8:8e:dc:9d:82:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=f15a97b59ac51fd78c908e6447a33f791eb9f25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:d6:51:00:8c:8b:cd:b7:54:53:06:ef:90:
34:fd:40:ff:b8:d3:24:9c:f3:f2:d2:1a:d5:89:6c:
62:74:17:03:35:75:51:6c:5f:87:4d:fd:81:29:24:
5a:cd:27:c7:30:07:33:70:0a:73:98:7c:43:df:78:
97:e6:e1:be:1c:88:c3:5a:84:b2:a2:ff:f1:83:53:
85:3c:92:fb:e1:48:a9:ba:f6:4c:1b:ac:99:59:03:
a6:91:ac:ea:68:39:eb:e3:65:a6:9d:11:cd:09:b5:
4f:b6:05:87:1c:7b:a4:5b:76:31:47:bd:66:2e:93:
5e:b5:83:75:95:fe:dc:6f:59:ae:69:17:04:15:66:
44:39:5e:40:33:6d:97:9d:ed:93:c8:35:31:a0:d2:
71:8e:f6:ec:6d:af:da:5a:89:24:7b:29:0a:b2:d6:
41:1a:ae:58:4d:92:37:02:fa:64:b1:93:ec:fd:7c:
56:92:6c:a1:6b:10:cb:01:f8:31:05:b2:8a:b8:1a:
aa:be:84:12:d7:f1:61:00:17:47:c5:3f:7a:f4:b0:
68:ba:8d:4f:7f:81:b8:b4:ad:ef:a3:5e:ac:3b:dc:
a3:82:78:35:47:88:9e:cc:85:b4:37:09:b7:13:f4:
25:a1:3d:e6:c3:f4:5a:18:18:f4:bb:2d:8c:b0:5e:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:97:B5:9A:C5:1F:D7:8C:90:8E:64:47:A3:3F:79:1E:B9:F2:5A
X509v3 Authority Key Identifier:
keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:95:78:17:49:41:60:46:54:34:9d:f4:d1:a6:f6:ae:00:94:
5b:ad:ca:07:2a:fe:44:ff:c3:d4:fd:48:e8:60:ac:01:2c:ac:
71:e0:71:f8:a7:af:20:64:8c:dc:4d:9f:63:af:2a:49:70:dc:
c0:79:74:22:1b:8b:c3:e3:eb:1d:c5:47:a2:cc:bc:79:13:2d:
08:ea:35:ad:08:b1:49:a5:0c:b7:54:c2:97:1a:81:4e:aa:27:
36:01:de:b4:33:ec:0a:38:70:ae:63:6b:32:de:7d:80:ed:68:
03:21:10:aa:0f:0e:81:fc:1b:99:f4:51:bc:1e:bb:32:f0:bb:
2e:82:d4:6e:5f:08:c4:e0:2a:e7:d1:59:a4:f7:51:25:ea:fe:
2c:11:2b:4d:22:3e:c7:47:df:38:7d:12:95:03:b0:a4:46:71:
2c:ba:6c:58:ff:f4:38:d5:13:54:d3:f5:c2:a5:e8:af:69:92:
a5:c3:d6:8a:ad:2f:43:f4:1d:ba:2f:28:ea:8f:d0:3b:2b:36:
b6:9f:27:b0:a7:19:c0:fa:95:54:99:02:c0:4f:9d:8f:9c:4d:
4f:26:ec:c2:d1:2a:15:9a:3e:aa:cf:f3:1c:92:12:43:05:18:
88:9e:22:40:2f:d2:94:5e:05:05:09:4d:9e:f1:87:71:be:e7:
85:c1:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:18 2025 by rpki-client