Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: htbn54xPEGo8KMelbVE90yOBEFnEZK8V+uD1bJ8C3pQ=
Subject key identifier: 21:E0:C2:28:44:20:1E:5B:50:F9:86:78:42:26:37:4A:97:B8:BF:C8
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 019A7149A6A309B3B926C8563700F4949DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0E5B
Signing time: Tue 11 Nov 2025 05:00:43 +0000
Manifest this update: Tue 11 Nov 2025 05:00:43 +0000
Manifest next update: Wed 12 Nov 2025 05:00:43 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: 1Hz4qqG9XoiidATYA/qN+fEuWaQuxr1FDrbVtXhfXhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:a6:a3:09:b3:b9:26:c8:56:37:00:f4:94:9d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Nov 11 05:00:43 2025 GMT
Not After : Nov 12 05:00:43 2025 GMT
Subject: CN=21e0c22844201e5b50f986784226374a97b8bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:fa:2d:f7:c2:b5:64:58:bd:d2:09:90:9e:
45:58:8a:2c:b5:4d:ae:46:b1:54:ba:ac:7a:bf:21:
56:72:30:cd:9f:af:dc:eb:02:b3:0b:32:8f:cd:41:
30:d4:9e:59:57:ab:2b:67:90:a3:fd:ed:bd:72:c4:
9c:47:2c:03:e3:9d:03:50:6b:ec:d6:e1:71:bf:b4:
1b:10:dc:00:c1:c1:01:62:f3:4b:5d:8d:29:74:fc:
73:fd:de:c8:33:ef:38:96:d8:c5:8c:1b:49:24:e0:
ad:be:2a:9a:4c:52:67:b6:0f:29:1d:f6:71:70:0a:
b1:0e:36:4b:a4:15:a1:71:93:15:77:f4:43:d4:97:
83:97:3b:6f:27:a2:ea:aa:f4:d2:be:e2:37:94:db:
bd:b5:0d:10:02:bc:d8:48:86:3d:42:08:09:7e:ab:
67:cb:e3:6d:0e:77:b9:aa:2d:43:31:fa:a9:b9:b4:
06:4a:56:b1:25:49:c9:47:81:f8:5c:69:31:ea:f1:
93:41:a1:36:5e:a5:c2:a4:f3:08:43:74:cd:a1:86:
ad:e6:35:4b:f7:37:3a:57:ff:fd:e6:94:55:99:8f:
13:5d:d6:98:05:7a:95:1a:0d:b8:16:9e:bb:ae:bc:
a5:42:70:48:62:7e:d5:75:9d:5e:32:7f:0e:da:1c:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:C2:28:44:20:1E:5B:50:F9:86:78:42:26:37:4A:97:B8:BF:C8
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d8:3b:61:12:9f:cc:b5:55:9d:61:56:8f:5d:50:e7:fc:7f:
5a:8d:d8:90:0a:cb:42:63:7b:d9:0d:a7:32:8a:76:e7:8f:9f:
13:19:e3:a2:63:98:3f:8d:b7:34:b4:6c:55:24:45:86:20:8d:
cb:c3:2c:fc:a4:03:93:c7:50:dc:98:d0:0b:77:dd:05:8f:75:
42:71:6e:07:45:b1:9f:0b:9a:18:e0:fa:19:c0:9b:1b:cb:1f:
3f:9c:a7:86:eb:53:02:c9:a4:66:ff:54:72:1b:26:e6:73:2f:
54:36:26:71:ea:4e:71:cf:d6:be:20:cc:7d:c1:2d:1f:9d:72:
78:7c:fc:80:4c:4c:33:b7:70:f4:dd:7f:04:b7:6a:a7:e9:5a:
d9:62:d0:f7:98:dc:2a:10:93:76:9c:45:b1:83:11:97:05:02:
90:97:7a:9b:6e:24:7f:d8:bd:62:11:e0:7d:c8:a8:25:20:8c:
65:8f:7a:01:3a:0c:9c:44:68:46:6b:03:45:c6:27:a0:cc:d7:
a2:d9:db:a3:6b:89:90:b3:bc:82:81:9a:56:e6:d2:ed:97:c1:
e6:56:ed:28:20:4f:7c:d0:53:d2:aa:f8:4c:dc:70:43:dc:3a:
68:46:5a:3b:50:9b:e9:af:53:bc:8a:97:25:76:8d:29:e0:67:
2c:8d:8e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client