Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: XE4JbD7YLz+vz3iSyZChMKus/S+vCGrqdNW1TdmNJhk=
Subject key identifier: 29:DC:E3:FC:1E:57:6A:6D:B5:92:F8:FC:01:41:97:D3:69:2D:53:33
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 019A72262DEB77A64E7C7DA6B14BF02064FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0D71
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: GD7v2VlEnCWxwYZTCeRPB0V0OYTIhKUHRHfxomJ4g90=)
2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2d:eb:77:a6:4e:7c:7d:a6:b1:4b:f0:20:64:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=29dce3fc1e576a6db592f8fc014197d3692d5333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:51:29:f0:1e:99:c7:ee:fd:5b:ea:6f:b0:
fc:20:c5:a8:f5:51:72:79:f8:c0:d3:c4:7d:f2:d4:
75:44:5c:a4:a7:9f:7c:8b:5f:79:44:41:26:8b:af:
87:fa:35:8e:31:59:de:97:5b:e5:33:5f:3f:27:fb:
ec:9b:03:26:1d:f4:b6:b2:4b:11:94:3f:55:ff:75:
dd:98:67:19:5d:78:36:45:c8:29:f5:78:cd:47:9c:
a1:94:ca:ef:74:1b:34:1e:aa:95:0f:71:eb:03:53:
47:78:e7:29:f3:4c:ee:0a:20:f2:fd:fc:3e:b6:ac:
bd:ca:aa:d7:9e:55:97:88:e9:58:f5:e0:be:ed:c6:
b7:56:0b:0a:cc:eb:70:9b:5a:e1:89:90:71:b3:fc:
53:21:4a:8f:c1:e4:8d:86:f4:a6:1a:98:44:ac:4c:
14:5c:dd:fa:f6:42:75:bb:02:66:d0:97:cc:2c:f2:
f5:27:61:ab:1c:1b:2f:40:4f:4b:41:ee:dd:6a:5b:
25:8a:99:c5:3c:ed:75:17:17:f8:81:a5:25:f7:8a:
a9:f3:4f:5c:1f:45:64:72:22:0a:8d:64:aa:6a:41:
8a:2e:37:48:b4:2c:0e:73:df:02:de:0b:56:55:b5:
43:57:e9:a9:e5:34:6f:f0:61:c7:33:d7:bb:eb:31:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:E3:FC:1E:57:6A:6D:B5:92:F8:FC:01:41:97:D3:69:2D:53:33
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dc:83:cc:66:e1:01:ab:fc:02:96:b6:23:14:60:19:8d:70:
19:59:1a:98:19:d5:fb:9c:f6:d9:db:5d:de:b2:63:0d:59:3f:
9c:51:0a:f8:85:e9:85:11:a5:ce:c7:4d:9c:e0:d9:b3:96:45:
4c:59:13:d6:be:a0:c5:ed:fb:fa:a7:9e:05:ef:96:1d:95:60:
0d:a3:ac:6e:2a:7d:96:75:69:91:ee:e1:7c:21:c4:2d:a0:3c:
c2:d6:b6:35:87:88:01:1d:43:0f:13:29:52:e6:bd:bb:55:57:
62:e0:11:70:59:6b:10:67:28:bc:66:a4:ba:a0:eb:6b:2a:7e:
9b:f5:d9:ec:07:db:57:ba:1f:48:d2:4d:17:7f:c1:6c:aa:04:
0b:5a:96:30:71:0a:e7:59:a9:51:b2:c5:e7:43:b9:c9:e3:7e:
ec:5e:c6:99:98:cf:c7:5f:d0:c3:5a:6d:98:1d:b8:29:02:fe:
cd:a7:dc:f1:13:b1:6f:58:dd:96:e1:37:75:bb:48:1b:79:9d:
20:49:6f:2b:3d:0d:7d:5b:64:17:95:2a:b8:58:10:5f:9f:69:
07:67:08:02:27:25:c3:6b:59:07:d6:a3:df:0f:1e:d7:06:c2:
75:57:e6:48:e9:29:c0:c7:c9:12:ff:25:41:40:b9:17:45:fb:
e3:48:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:46 2025 by rpki-client