Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: 8HvUJMlIgzi6fJCqOr48crhYAieZHVdbcem8T5cSATA=
Subject key identifier: 81:86:4D:E8:4A:42:DD:12:3A:89:4C:AC:8E:63:D6:93:24:E7:75:B0
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019A72CA4DAE1F781BDB6618F902F11B9A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0916
Signing time: Tue 11 Nov 2025 12:00:51 +0000
Manifest this update: Tue 11 Nov 2025 12:00:51 +0000
Manifest next update: Wed 12 Nov 2025 12:00:51 +0000
Files and hashes: 1: 1-fz70-nHPXSfvd6j7EvNqcn6YTI.roa (hash: juZSjJ70K6GnMKFKUOOOA9dMssogTKU5XKqImeihFWA=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: 0/cOSepLO4mQEPpYzogaQUjb9jgaDxnUPJ0gcBjfdU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4d:ae:1f:78:1b:db:66:18:f9:02:f1:1b:9a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Nov 11 12:00:51 2025 GMT
Not After : Nov 12 12:00:51 2025 GMT
Subject: CN=81864de84a42dd123a894cac8e63d69324e775b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:57:7a:81:5c:de:10:c0:0a:58:25:23:22:
c6:a3:79:4c:a9:d6:2e:59:22:1d:fa:e2:f9:7b:d6:
8b:9d:96:50:b7:59:63:58:70:54:d4:af:9c:4d:d8:
a9:35:e2:63:97:34:a0:82:ea:44:1f:24:cf:af:3d:
e0:39:7e:45:74:89:68:1f:33:6b:da:22:d9:5f:bf:
5c:e6:06:d7:73:97:bb:71:a4:4e:75:f1:05:63:2a:
ae:97:2c:1e:82:1f:66:33:07:49:81:7e:d7:48:90:
84:f1:d3:99:b1:e1:cf:15:63:c8:ee:bf:57:7b:de:
71:63:bc:bd:8f:20:f9:02:c2:90:3e:a3:68:a4:3f:
e6:f7:44:2f:c2:d8:6c:ed:42:26:9a:55:61:d9:ec:
37:cf:fd:d9:a9:fc:fa:dd:a1:b6:f0:1e:07:82:28:
05:48:00:dd:cf:21:06:0e:65:dd:d6:3e:e5:67:98:
6a:80:72:ef:6c:26:6c:af:00:12:97:d3:ad:47:19:
4a:e1:f3:0f:55:bd:64:ed:80:23:a4:bc:ea:21:92:
49:4b:bb:20:cd:72:80:f4:19:de:bb:54:45:ff:36:
d6:8e:0b:ea:38:72:77:5d:0f:77:10:4c:0e:4f:ee:
42:21:9f:d8:03:81:2a:cb:c1:07:3d:22:d8:5c:a3:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:4D:E8:4A:42:DD:12:3A:89:4C:AC:8E:63:D6:93:24:E7:75:B0
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:39:3b:88:82:04:0b:05:27:73:5c:c1:f1:51:83:78:5f:4d:
f0:bd:e8:fb:f5:6f:74:62:26:e4:70:ff:44:a9:28:d4:f4:5d:
08:6b:7b:03:17:4b:1c:fe:b4:50:c1:71:aa:bd:7d:d3:fc:10:
62:c1:82:92:07:ca:05:90:f0:6f:11:77:f2:d9:19:04:3a:09:
65:91:ec:fa:e7:b0:4c:54:90:4f:65:b8:f9:2f:ab:5c:b8:78:
c2:7d:65:a7:40:89:8b:f1:19:f5:f2:91:a1:8a:8b:59:e3:1b:
83:cd:96:1e:5a:1c:c9:f9:6b:c1:49:2e:47:4a:52:da:26:07:
bd:42:61:a9:d1:45:c6:21:5f:08:56:63:66:4e:5e:26:d6:a8:
62:ea:7e:d9:2e:80:ca:0f:58:3a:46:98:dc:46:9b:18:c2:a6:
e1:73:51:8b:5e:5b:74:f1:4c:72:17:ab:5b:7d:ed:90:44:fe:
d3:57:50:b1:90:d6:ef:1b:48:c1:7b:ff:8a:69:63:e7:9e:53:
3d:0a:74:06:89:55:7a:ee:d4:f7:89:29:1d:a1:0d:df:b6:98:
f3:16:e0:7c:82:59:dd:f6:99:51:ac:9c:9b:5c:cd:29:78:6c:
d2:3e:8e:c0:ce:ed:af:51:e4:2d:2c:07:2f:53:65:73:1e:d5:
02:0c:1f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:26 2025 by rpki-client