Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: AU2TzkSP/pn/nzZDW1xDu+WQI336V8Ye3w7wwmT08mg=
Subject key identifier: B9:D2:4F:02:58:0E:E3:15:96:59:FD:EE:18:D4:4F:5F:74:88:F6:CE
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 019A706DE7D48A7C3257437CEA8C5C507875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 01:00:42 +0000
Manifest this update: Tue 11 Nov 2025 01:00:42 +0000
Manifest next update: Wed 12 Nov 2025 01:00:42 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: BrDOpFZa6RpJd0ljCWvZti3t+qbKqkF6+3O6JIkrHvw=)
2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=)
3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:e7:d4:8a:7c:32:57:43:7c:ea:8c:5c:50:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Nov 11 01:00:42 2025 GMT
Not After : Nov 12 01:00:42 2025 GMT
Subject: CN=b9d24f02580ee3159659fdee18d44f5f7488f6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:8c:62:ae:8b:49:47:ff:2b:dd:2f:94:a0:
0b:b6:c2:1d:9e:1c:90:1a:eb:92:70:fb:49:50:3f:
a4:65:4e:63:7c:54:91:af:10:ee:84:34:e5:62:f3:
00:d0:57:26:1f:53:9c:1c:97:78:92:32:07:7e:f6:
db:74:14:de:a4:23:80:22:52:66:69:a6:eb:2d:57:
d0:cb:30:e7:74:08:07:7e:96:8e:af:c0:01:b2:02:
b2:a3:e7:f2:86:9c:14:a3:84:32:92:c2:bb:94:a8:
e7:86:2d:04:9f:2c:d9:7c:7b:bc:54:8c:c3:8c:6e:
44:c9:df:ed:5b:f6:96:1e:a5:99:c9:a1:41:14:12:
36:9f:4d:3e:d1:1c:56:98:1b:77:b7:f3:ac:45:41:
a0:00:07:b0:2a:8d:05:2f:16:3b:37:2b:3f:82:a8:
eb:f9:36:5c:ae:51:00:06:35:77:bc:25:5f:86:c2:
0f:e4:99:f6:09:a2:43:b2:8a:5d:e0:15:64:81:f6:
e4:51:0e:23:f0:16:74:b9:b3:d0:ef:6a:65:42:f7:
8e:8b:1e:de:28:74:4b:a1:c7:49:6d:e5:98:2a:fc:
5a:cd:8a:6a:36:30:7e:37:a7:60:4c:27:8b:f0:49:
dd:a7:b7:f7:73:c9:73:d3:df:4a:ed:e1:88:e3:96:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D2:4F:02:58:0E:E3:15:96:59:FD:EE:18:D4:4F:5F:74:88:F6:CE
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:d7:3a:dd:bd:14:76:e4:eb:52:b5:f0:e2:06:72:db:b3:90:
24:20:c9:10:b1:9a:88:e1:d8:05:4c:d6:c8:c0:3c:e0:cd:3f:
55:89:b3:78:6a:98:3b:d8:3c:c7:cc:bb:78:d1:55:55:4f:a1:
35:2d:3f:3a:c8:64:c4:ef:d1:7b:36:60:8a:b6:69:6e:94:bd:
42:cc:52:c7:55:9e:c0:9f:52:f1:69:ac:75:20:02:a5:61:da:
93:e6:37:74:98:4b:50:04:69:35:6e:73:26:ff:ab:86:1a:ec:
db:af:05:a2:37:85:61:7a:f7:ea:cd:a1:9e:d4:24:f9:92:4c:
a2:ea:cc:f4:4a:52:c8:64:3e:cc:37:56:d1:25:6b:39:3b:10:
08:a8:b6:70:eb:2f:2b:8d:cd:6d:6c:9f:45:86:47:4a:b9:43:
14:aa:87:4f:e5:eb:8c:f6:38:a8:58:c2:2a:ad:20:70:8d:39:
1e:a3:4c:6e:df:e5:7a:c3:71:8c:3d:af:5d:b4:a3:c9:5e:d0:
d3:06:45:52:e3:0c:fc:16:aa:cd:6d:01:25:e4:6c:fa:af:2e:
b3:91:ef:06:28:4f:f1:d2:d8:1d:00:8c:08:db:54:d9:1f:78:
3f:43:f7:7f:37:21:b2:c1:01:91:9f:6b:a2:66:89:72:c8:1e:
7c:c5:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:13 2025 by rpki-client