Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: tHM6mgTYS3A91kbhhWgr9Yje4AV4SuO2cDsbZ8+zBss=
Subject key identifier: D1:3B:ED:03:01:A1:FD:C1:DC:BA:DB:5A:E2:7D:39:44:E6:20:BA:27
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019A71B77F1C96B85CBDB4094FC3E337432B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:42 +0000
Manifest this update: Tue 11 Nov 2025 07:00:42 +0000
Manifest next update: Wed 12 Nov 2025 07:00:42 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: ldWNVRhEPbEG2rE6pMZ2nnyWLLjGLU8e/67K+AbLYvY=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:7f:1c:96:b8:5c:bd:b4:09:4f:c3:e3:37:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Nov 11 07:00:42 2025 GMT
Not After : Nov 12 07:00:42 2025 GMT
Subject: CN=d13bed0301a1fdc1dcbadb5ae27d3944e620ba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:c7:53:c0:6e:80:7e:ae:83:15:84:c2:d8:
0e:20:a4:a0:76:46:54:8c:7a:d3:da:af:20:d2:0a:
05:92:3c:8b:6b:3a:ca:6c:de:b1:aa:ad:54:05:21:
4a:33:c3:82:1f:80:3c:81:4a:3e:c4:48:df:61:fa:
40:09:eb:90:92:00:4b:da:02:77:09:44:5d:e0:bf:
1e:c4:aa:c7:e4:1a:f5:6a:8e:02:4e:fc:20:20:41:
1c:6b:9a:43:29:1b:21:cd:c9:08:13:4b:6a:98:0b:
c4:3e:2c:55:1a:8c:be:69:3f:0e:9c:ec:8f:6f:85:
ea:98:b4:50:f1:4d:64:31:a4:3a:d1:10:c3:ae:c5:
ec:ac:e9:08:5b:f7:c4:aa:b6:50:75:fc:c9:9b:f9:
07:f9:ce:1c:fc:9d:76:db:52:50:8d:71:50:9d:f6:
d4:20:15:4e:06:5b:21:37:75:8f:c5:38:4d:0d:46:
8a:80:cb:94:4d:23:49:f1:74:9c:23:31:8c:c2:d1:
66:21:78:63:95:81:7b:48:52:0a:be:58:0c:d7:fc:
7b:f7:85:da:da:2a:1d:3b:8c:9f:64:93:a5:6b:a9:
03:0e:b2:19:0a:42:90:67:9d:7e:c9:3b:b9:51:e9:
96:75:15:97:51:6e:8e:e0:20:6d:64:6c:ce:1b:15:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:3B:ED:03:01:A1:FD:C1:DC:BA:DB:5A:E2:7D:39:44:E6:20:BA:27
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ad:c9:ca:38:e5:56:f5:46:f3:54:d3:36:03:71:a4:34:a8:
53:db:33:80:12:7e:da:9b:c5:7d:b5:5e:d4:e1:a1:e8:ab:92:
17:73:f3:c0:d6:fd:02:d3:a0:00:3e:35:61:61:7f:6c:fd:80:
cd:ae:ca:fc:3d:ac:06:0c:91:9a:e5:72:7e:a9:28:1c:10:fe:
79:d8:df:bf:52:88:05:2d:94:c1:03:45:88:5a:6b:25:c8:60:
ad:94:ec:97:fc:ac:39:99:65:40:41:59:9d:f9:ae:ab:c3:40:
8c:9c:9b:d1:aa:13:2d:04:f4:45:11:2a:4c:a8:9c:06:aa:e3:
78:38:2e:ea:37:87:57:e1:e1:28:9c:9b:e3:65:10:41:11:23:
98:1c:57:ba:6d:c4:85:15:34:9a:5c:0c:bc:13:62:82:58:1e:
53:5c:71:2f:eb:44:31:6e:20:aa:54:92:02:50:80:67:aa:05:
27:10:7c:6b:27:fd:8e:08:5f:71:2d:df:5c:5c:3a:a3:3c:ad:
6d:c9:14:c8:df:50:73:af:fb:e1:1a:34:3c:1c:5a:d6:58:0b:
37:f8:d9:8f:32:c7:d2:db:8e:3c:66:38:16:fe:e6:ed:69:fa:
4a:90:12:97:7e:17:3b:62:ab:6f:a3:f3:9d:d2:13:05:50:d2:
4c:45:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:26 2025 by rpki-client