Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
File: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft (raw, json)
Hash identifier: vwXRZVlWstoSdc2jPmBURd/ljPuso3LiqQ1tUMCIS0I=
Subject key identifier: 25:C6:03:74:89:1F:E0:1E:4E:26:24:58:29:5D:F8:7B:56:3B:4F:BA
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 019A7112F2FCC1D270DF73BC1CC83AF19CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
Manifest number: 0E03
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: Bla5VO18gnOwAGsyi_ag0PlrZc8.roa (hash: bB+354vnCwp35QcIDtKoGUcD5g72kaYCQWv9dkrPEdQ=)
2: QDG31XRppMRHcvvmEDOK8yxyWfY.roa (hash: IAXCVrJq/0jbZsdZm/s/bAXJF0pu+1bXoYQ6KRJa9ZY=)
3: Rb_a0gRCH0c3VYafxMa-alIDM-4.roa (hash: TgalgmNta8ylL7dWW9pXnzuDWeshmBXiGFqNZT4RVpk=)
4: bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl (hash: pilkHc6Ap+N/QcsKyEv7RkLhi/DwgWCZZLRqiNSC0QI=)
5: i3QBzkSBQXqE1KUhbqTlGV1alRM.roa (hash: CIGq0vRpsPzUMdoNxu3MkZkuvrvIk8NixCm6ZvzmcNI=)
6: nfGSbOJalGhqP8byPsCkjMCHfQQ.roa (hash: nuRymi3xQzwNgp3Dfs4cFrnjeAaJNgEImZjk4KoRXq4=)
7: rkb71IFKmOwHN1Jg5Et0bzsKc_I.roa (hash: WK/N2S2Y2IN8I1NQby/H/tCVPb7ORwKAQmcCTQ3LUwU=)
8: uSj7yNwgRLZ_iGkwQFt66JKSZtc.roa (hash: VBEEf07+DQAhobALIA3FtB3+9uIqNGb9hva1nlb9JoU=)
9: wdntFdrB2WVhyiSz8CdnwsgUr1E.roa (hash: aBxp76/Fhwiw6zYPkXQ7hzraqQ9fxtFY10F00BmNMf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f2:fc:c1:d2:70:df:73:bc:1c:c8:3a:f1:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=25c60374891fe01e4e262458295df87b563b4fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:25:8d:7a:5a:11:42:a1:73:f4:22:08:9c:
cd:ab:ac:db:bd:4d:f1:d3:08:42:e0:03:62:e9:2b:
25:18:87:20:6e:45:71:a8:f6:b9:67:70:5f:ef:92:
37:83:5b:4f:0e:b5:16:94:2c:fb:4f:fc:c4:86:8f:
73:22:5b:86:49:6d:61:13:f4:5b:1c:9f:48:04:bb:
d1:cf:e3:b9:7b:c9:d7:10:db:57:f2:96:91:16:ae:
8d:e2:14:42:ad:c5:8a:fc:3e:86:05:66:61:d7:b4:
d1:93:57:19:a4:25:be:37:85:ce:af:ff:5e:79:17:
5e:f3:24:62:dd:20:23:9f:42:b9:41:a3:63:b4:59:
4b:9b:68:66:34:fb:b2:ad:ef:62:5b:af:b8:12:52:
d7:bd:c5:8e:ab:f6:b0:93:17:ec:ee:3c:b2:dc:9a:
7e:30:ad:54:bd:f1:74:1d:55:d6:f2:ab:0f:a7:e3:
5e:f3:ae:53:88:a6:b8:5b:66:23:f0:30:66:dc:99:
4e:76:3b:10:69:89:50:7f:b9:3f:1b:a4:1d:8d:c9:
17:ac:69:67:72:14:b4:08:62:fd:fa:0e:cf:6c:62:
58:71:4a:ca:e2:e8:64:52:b4:25:30:17:92:57:85:
df:9e:27:c5:89:0f:72:41:f1:a6:79:43:57:9d:0c:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:03:74:89:1F:E0:1E:4E:26:24:58:29:5D:F8:7B:56:3B:4F:BA
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:60:13:e8:0d:21:d3:e2:1c:9a:c7:96:d3:e5:12:1a:cf:
0b:5d:89:cd:d3:00:1c:50:04:58:07:22:3d:2e:ff:f9:15:ba:
38:77:b6:61:96:01:0d:77:74:5b:7c:70:f2:18:b6:47:d7:be:
a6:88:db:28:f9:05:da:b0:03:e5:6b:34:8f:c1:15:d1:79:60:
6f:bc:64:7f:b5:62:56:c2:72:67:af:eb:7d:66:fc:d8:7a:a5:
5e:61:99:d4:4d:b2:2a:a3:ad:89:43:3d:be:a1:c8:6c:39:3d:
9a:e9:41:5d:11:34:25:98:15:7d:f2:a4:65:82:3f:c8:d4:02:
c0:13:2b:4b:7a:dd:14:8b:a6:d0:f4:98:6a:72:37:ae:be:9f:
7e:d9:b0:c5:a1:db:4f:62:f4:d6:7d:69:55:75:ee:99:fa:84:
2a:dd:69:59:3f:55:97:f1:b2:17:f4:6e:31:3d:26:73:e2:55:
a7:a4:6d:0f:d2:02:5c:aa:a3:e2:fb:28:92:4e:ff:98:65:2d:
64:b8:9a:54:88:3b:56:d8:49:d1:90:df:cd:90:b0:17:04:e2:
d8:20:3e:9b:6e:7d:7d:e8:8f:64:34:15:51:fe:93:14:ed:ad:
97:a2:53:c3:2a:b6:5e:7b:75:23:b4:52:8e:20:9f:6c:6a:c1:
57:e1:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:46 2025 by rpki-client