Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: o+Cwj8mk/GQ+n4IsPOLxm1xmk13Vz47lF3kJ6I/5FHo=
Subject key identifier: A1:3E:D7:91:AE:7C:79:3F:D5:0D:82:E8:42:CB:C4:4B:4C:3A:82:05
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 019A725CC44C60C3D760198B74A027F4B352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 10F1
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: Bf2PA7D3nHwFh/9pyi5MVSgY+vCgFd4ETc6RyOhOnMQ=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c4:4c:60:c3:d7:60:19:8b:74:a0:27:f4:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=a13ed791ae7c793fd50d82e842cbc44b4c3a8205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:2e:7c:59:0d:66:fb:6a:f7:d8:7d:71:cf:
32:c4:6a:c3:02:9b:ce:4e:1e:aa:7e:6b:83:5c:1a:
80:8e:0c:e5:f3:1b:12:c4:57:15:19:f1:b2:06:87:
b0:f4:82:cc:40:df:92:c3:c5:fc:2e:31:e1:b8:22:
91:20:16:8b:6b:55:2e:e3:b0:a6:00:b2:62:6f:b9:
cb:fd:25:45:f1:3e:10:db:37:ee:36:7a:00:3c:17:
ba:e6:31:05:3b:43:16:68:33:f3:4c:99:9d:15:9f:
fe:a6:5d:29:c5:cd:59:cc:e9:5c:f5:a7:a7:d7:c4:
82:23:c3:61:83:99:0f:17:73:17:53:fa:d2:b1:ac:
81:71:76:6b:ed:9e:da:87:9b:bb:aa:4a:df:b0:38:
55:a9:60:53:9b:82:85:0f:95:14:62:20:e0:2f:33:
d6:0d:af:58:c7:a9:dc:4a:14:74:11:3a:af:2e:a2:
86:ae:50:bb:48:7c:a7:20:fe:72:32:a4:81:a5:e3:
4e:2a:aa:7c:25:d6:bc:93:83:7b:1a:36:f3:fd:56:
b2:a7:1f:a7:c5:ac:af:76:08:4e:d3:4b:26:74:d4:
85:e4:70:17:12:a6:a1:8c:de:35:9b:7a:e0:ea:3e:
e8:72:a2:70:64:aa:05:be:07:db:d6:5f:a1:09:71:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:D7:91:AE:7C:79:3F:D5:0D:82:E8:42:CB:C4:4B:4C:3A:82:05
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4e:0d:fe:12:9b:2b:c7:15:fe:a9:eb:de:4d:36:e2:f9:d4:
80:a3:25:36:a1:28:6d:a5:c3:c5:f3:57:c5:58:20:06:2b:90:
e7:18:e2:a2:63:c0:dc:85:25:24:80:b2:d3:4b:7c:47:8e:71:
5a:c4:ca:4f:9e:92:45:f3:4c:70:d8:95:01:c6:db:db:60:62:
f4:82:df:2f:70:81:b7:ed:3c:20:3a:05:8a:6d:f5:9a:9e:71:
e2:dd:ce:b0:e5:e2:7c:06:69:c6:e3:d2:96:f9:41:28:92:8a:
47:31:2a:43:ae:47:f0:2d:15:0a:f5:26:77:a3:5d:bc:24:59:
68:15:6d:8a:df:38:15:2a:20:57:74:f9:7c:74:ab:e6:dc:10:
35:43:3e:db:88:6c:91:83:fd:40:6e:63:35:f0:f7:56:77:c4:
15:ca:58:a1:48:cd:03:5c:50:a1:e2:47:02:b7:b5:21:fa:fb:
f1:b1:7d:5c:fc:08:47:3e:f3:6d:61:40:7a:00:c8:53:80:29:
6a:32:41:88:de:bf:ac:37:33:29:a8:7b:fd:aa:a1:f6:fe:6c:
29:d2:26:b0:71:1a:ba:76:52:b3:bc:bc:8a:39:74:22:26:ef:
a8:71:95:67:58:fe:4d:4c:62:f2:e0:5c:fc:23:fa:bd:aa:46:
44:50:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:38 2025 by rpki-client