Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: G8YX5ZsokAPtVosRhTUF0UIhzwpWUP40HPngTGqUiZA=
Subject key identifier: 10:D7:DF:C0:03:3D:10:DB:02:A7:FB:95:B7:23:07:E6:41:16:E7:AE
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019A7225B54F8CE0FD692FC31483E74B22DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: hWNJabFj9qi2HVDvrswaV7uSrhTkHnXFQqRdaGb8J6M=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b5:4f:8c:e0:fd:69:2f:c3:14:83:e7:4b:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=10d7dfc0033d10db02a7fb95b72307e64116e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:6a:14:15:b6:69:f6:10:0a:9c:77:04:e6:
7e:43:f3:60:e6:24:b4:c4:44:b7:74:fe:69:e9:cc:
25:a4:74:70:73:05:b6:b1:60:39:2b:77:ed:5d:e9:
3a:a4:22:21:2e:ad:39:19:ea:86:6c:8d:fe:4e:45:
32:a1:2d:9b:26:83:9f:c1:89:87:09:e6:46:0e:11:
ae:c8:ed:88:1b:22:58:94:f1:6b:96:4c:a4:58:ab:
68:44:0a:85:ac:d4:bd:9d:6e:2a:e4:07:b8:cd:7f:
a6:d1:6b:31:66:f6:07:02:59:d1:b2:61:7b:a7:51:
9a:14:9b:47:e9:cf:ef:f6:8f:a8:3b:01:57:e4:f6:
f4:46:1e:cd:75:36:b4:98:db:f2:5a:85:e0:27:16:
ff:5f:13:88:64:eb:2e:66:11:43:c5:30:58:4a:f6:
b4:4c:1c:65:a1:96:db:0d:6e:a1:71:7e:2f:ce:48:
10:10:46:8f:0f:d8:0a:e8:b3:07:e0:2b:49:8d:4a:
a6:b4:7b:72:22:b6:06:a1:c4:b2:34:df:e0:a4:ce:
17:fa:fd:d8:04:1a:c5:5b:b0:e3:61:1e:24:94:6b:
20:d7:4e:f0:dd:43:b6:50:87:64:f1:84:58:60:ae:
23:1c:2f:10:72:c6:26:ec:da:a5:ce:0c:d2:dc:c9:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:DF:C0:03:3D:10:DB:02:A7:FB:95:B7:23:07:E6:41:16:E7:AE
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9b:52:51:21:8f:39:79:d6:ed:47:bd:a7:52:9b:97:d7:01:
d1:d7:60:e4:d4:9b:1b:a7:dc:6e:ef:24:ba:e2:e0:3e:3a:ac:
42:65:8e:12:a0:5d:f3:1e:47:22:12:95:3b:34:4f:e5:56:5c:
d9:57:da:cc:75:d1:3f:3f:68:e6:2c:b0:dc:81:70:0b:14:6a:
fc:79:9d:0c:eb:2e:39:e4:31:0d:2d:05:a9:af:33:b8:4c:ac:
0b:96:4d:b6:c2:df:48:a4:d7:22:0b:c6:80:bb:70:74:07:c1:
0a:8a:11:d6:1d:cf:d4:0e:d3:ac:66:81:7f:a0:8e:3d:99:3b:
28:15:92:4f:93:4e:67:0b:b1:fa:3b:01:c6:fb:5e:6e:bd:7b:
8b:3a:6a:a3:97:cb:d6:2a:54:47:7d:3b:ba:87:7f:fd:47:db:
3f:ed:49:9b:36:89:2f:5c:f5:57:92:4b:fd:9d:a4:0c:85:0f:
71:28:a4:2e:41:da:67:77:df:ab:85:fa:19:b7:79:33:5d:1b:
ba:be:42:d2:bd:fd:d2:5e:96:89:bd:df:06:9e:68:bb:ae:98:
d2:ce:00:1c:d2:84:bc:34:d4:ce:d6:8a:30:f4:35:98:49:94:
87:aa:e6:bf:67:1a:b0:e9:18:b5:a5:e5:86:f9:2f:39:4d:4a:
27:3b:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:45 2025 by rpki-client