Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
File: BuS72riW5mET81G02cgt9Q5mpxI.mft (raw, json)
Hash identifier: G28Eul0bad6e1R0WfqM9FyS/dGE+WdAEVKkSJVUlSjY=
Subject key identifier: 32:0A:A5:4E:4A:53:7D:74:29:B1:D4:FE:96:36:56:90:46:21:72:E1
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 019A71EEED636570A349DF21B8DBE30E98DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
Manifest number: 06BD
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: BuS72riW5mET81G02cgt9Q5mpxI.crl (hash: MaHCpKz9YkG2Q1FPShgLoMB8WWttkJayszTPkUvBUGs=)
2: KnO7E8tJ1abhGCx2wXuCqs1IO3U.roa (hash: BCSVnZM2aJUhjEMy986ORQcWilXP95wH0oKfNXEAgBs=)
3: Q3h6qAQg8Z7eTE0PbTbXQ8Re-9A.roa (hash: S28QHIVwCTs2cZmHNwDOnovD8sAEfmTgDloHmODDCO4=)
4: Tg5Eip16OiivA4_zKye1REwFA00.roa (hash: Gd1niBs91vG5rW4xFPormFpiCgQUUugy0jDW22UcbYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:63:65:70:a3:49:df:21:b8:db:e3:0e:98:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=320aa54e4a537d7429b1d4fe96365690462172e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:a4:c3:e9:97:13:68:68:36:db:c6:61:6e:
d3:bc:33:42:49:de:60:d8:5e:a0:ce:70:d4:a7:09:
21:6f:34:80:f7:ee:58:1e:08:31:b7:93:84:c1:70:
f1:e9:c4:55:7f:9a:d6:b4:91:0d:58:7e:3d:f5:1a:
dd:67:7b:93:e9:ad:7c:5a:d4:12:37:2a:62:f5:ce:
6f:5f:35:7a:db:6b:73:b4:94:15:c2:74:0f:80:99:
8a:08:35:1a:5e:99:0c:7b:01:7b:d4:ee:88:0d:dc:
19:a3:39:66:3e:97:31:10:35:6a:02:7a:8e:6d:64:
a3:33:84:39:a4:4c:e9:f8:fa:4e:e9:36:f4:02:41:
87:25:82:79:2e:c0:b9:22:14:7f:48:12:91:cf:9b:
49:2c:57:52:74:db:72:dc:99:3a:8d:71:f2:59:c9:
5c:b7:32:2d:39:4d:8a:7f:1d:48:06:63:df:2d:f3:
7a:49:a4:5b:9d:0d:36:87:3e:ed:ef:66:73:5d:c1:
6b:ed:35:a2:cf:ca:77:ba:fe:fe:2a:59:6f:d4:53:
ff:43:df:76:98:fb:7b:c1:8c:15:ab:5d:3f:8e:ea:
46:4c:48:54:ea:68:c5:02:d1:ab:a2:6c:5b:13:16:
09:53:48:7e:63:c1:e7:ab:12:df:6b:02:2d:84:25:
46:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:A5:4E:4A:53:7D:74:29:B1:D4:FE:96:36:56:90:46:21:72:E1
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2a:6f:00:7b:97:76:f3:16:7f:da:a0:56:e8:39:2e:dd:7a:
5b:9d:05:1d:cb:85:a5:89:d1:07:95:b4:fe:91:7b:10:6e:60:
ae:b8:91:03:40:04:2b:38:e4:f2:32:32:33:79:ee:f7:43:f9:
65:87:d5:68:13:49:c5:98:cc:8a:0e:c3:c0:06:73:4c:0f:40:
c0:42:72:a2:6c:70:56:5b:0e:4a:64:be:80:8f:2a:6f:ef:2e:
00:44:05:27:43:4a:bd:61:37:a5:e7:06:2f:3c:b4:16:b5:a3:
5d:bb:e7:30:68:b0:67:83:a6:92:f8:03:00:da:e7:57:7c:02:
1e:4e:fc:35:46:69:22:0d:2e:f2:74:53:71:bb:6d:64:df:1b:
14:91:c1:7f:7b:f0:e4:a3:a7:11:bf:d0:59:2a:72:f5:68:53:
5f:85:2b:c8:8f:5b:73:5f:af:6c:4d:04:a4:60:93:6d:40:fd:
4d:2d:ef:1f:75:a1:29:b0:7b:cd:52:28:2b:98:b5:5b:ab:28:
fb:c3:3d:dc:05:bf:6f:16:76:9f:61:16:05:c5:7f:6b:a5:c1:
bb:06:7a:bb:73:17:49:d8:26:71:5d:3d:69:ce:0c:3e:bb:14:
0f:f3:cf:c4:1b:36:e2:93:03:30:b2:c3:bc:68:76:6d:5a:58:
7a:95:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:50 2025 by rpki-client