Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: F4K03A9qD6sDGedOPShX9i6i282RM95FYs9zz/W1omY=
Subject key identifier: 93:71:38:0E:EC:74:D8:D1:F7:64:5F:5E:B8:4D:7C:05:07:3A:3A:5A
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019A209AE9BAEECC044B3C17593D274A9BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 1061
Signing time: Sun 26 Oct 2025 13:00:14 +0000
Manifest this update: Sun 26 Oct 2025 13:00:14 +0000
Manifest next update: Mon 27 Oct 2025 13:00:14 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: NZuRDTHbuIuxOMFVBx8X2drzSjBhZLGPOjJS/PtuGAs=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9a:e9:ba:ee:cc:04:4b:3c:17:59:3d:27:4a:9b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Oct 26 13:00:14 2025 GMT
Not After : Oct 27 13:00:14 2025 GMT
Subject: CN=9371380eec74d8d1f7645f5eb84d7c05073a3a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:a2:c7:65:a7:30:23:12:73:1c:2f:79:80:
9f:6d:01:d1:c5:d3:40:c0:0c:5d:c9:24:1f:87:21:
e0:a3:27:cc:31:34:19:f4:1d:43:32:1d:53:58:23:
08:da:9a:09:c6:3f:37:97:b0:35:d0:cc:e7:f3:d4:
0f:21:e2:f5:f1:84:2f:09:ee:8a:ac:15:7e:83:19:
92:a1:29:0e:77:9b:e7:3e:55:92:dd:a5:fc:5c:fa:
57:75:30:1c:ee:66:6f:ec:05:6a:a2:df:54:ed:82:
cc:1d:a8:69:0b:e9:0e:29:ac:03:4f:cf:04:07:83:
d9:1d:bd:14:bf:4a:bb:8f:be:5d:32:c4:a3:5d:6f:
eb:3e:09:bb:c5:9e:22:47:80:48:51:6a:c7:ec:07:
b7:d7:da:93:94:31:75:f3:12:ca:28:49:81:d3:ca:
b7:db:e7:c4:56:1f:7e:16:87:08:eb:50:45:aa:dd:
6a:ea:f0:40:23:9b:69:a9:28:12:d3:d9:4f:53:b9:
c8:d5:72:1d:e5:c7:4a:c8:7b:7c:73:c5:da:0f:2c:
36:24:77:e3:d0:85:07:48:32:23:da:cb:da:ea:99:
ff:c7:44:e0:d9:12:17:e1:21:a3:9e:84:e0:4a:54:
df:c8:a7:88:98:ef:6f:fa:0f:19:c8:00:c2:d9:3d:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:38:0E:EC:74:D8:D1:F7:64:5F:5E:B8:4D:7C:05:07:3A:3A:5A
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:0a:3f:6e:72:de:11:dc:65:40:8c:3b:1b:be:8a:e4:be:
b8:d8:f3:da:c4:31:b2:ee:d7:6d:1b:0d:4f:53:f0:26:a7:b0:
67:f4:53:14:04:f9:f5:27:8e:bd:22:cb:00:52:d9:a9:27:43:
41:2c:fc:49:9d:8a:a9:41:c0:97:51:e1:02:3c:81:bc:c2:ce:
ed:cf:a7:b0:60:5b:23:3c:64:e9:34:5b:15:cb:02:1e:b1:fc:
9b:08:29:22:b5:04:27:3f:4f:3e:76:43:8f:d6:9f:b3:43:58:
d9:d7:f7:ef:cf:ea:f2:7b:05:5e:b3:19:5a:c0:5a:f0:21:a4:
eb:a5:2c:b9:13:d5:cc:8b:a6:c5:6e:8b:b1:50:6c:0b:8c:b3:
71:fa:7e:77:2b:68:b3:5e:03:02:81:41:95:fe:df:e6:f6:2f:
29:76:bd:f0:0f:92:20:90:8e:41:e9:f4:b7:47:f8:e9:2e:b7:
d6:81:19:ae:31:b0:b3:6c:2e:da:6c:70:f6:25:19:e4:ae:8d:
0e:ad:8f:84:70:12:79:01:96:e0:da:8b:4c:b3:6b:1e:5a:2b:
aa:3f:d4:53:0c:f8:0d:5b:9b:a7:2b:8c:a3:f4:8e:14:e3:bf:
6f:c4:76:40:c2:9a:3b:a6:92:a3:97:7a:7b:f5:16:6a:11:09:
67:85:ea:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:28:54 2025 by rpki-client