Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier: wJufdBtnENUqrUMnK4Zq04PtcdK7NBssh/WpBcNizV8=
Subject key identifier: 53:2F:CA:39:5B:D8:45:E5:20:9C:6F:7A:28:49:FD:CD:6A:BD:CC:E3
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial: 019A228A54C9EEB0A2E1FCB922EAE913B95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number: 1263
Signing time: Sun 26 Oct 2025 22:01:22 +0000
Manifest this update: Sun 26 Oct 2025 22:01:22 +0000
Manifest next update: Mon 27 Oct 2025 22:01:22 +0000
Files and hashes: 1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: 5mH1ZVy2I2IdNSwI4DDQuJaETNRwnIYhezpTa+Dh9+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:54:c9:ee:b0:a2:e1:fc:b9:22:ea:e9:13:b9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
Validity
Not Before: Oct 26 22:01:22 2025 GMT
Not After : Oct 27 22:01:22 2025 GMT
Subject: CN=532fca395bd845e5209c6f7a2849fdcd6abdcce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:1c:51:bc:b0:09:4e:d2:de:fb:1b:d3:1e:
22:6b:95:65:8d:79:cf:bd:c0:e9:89:a9:2e:42:b0:
67:45:2b:57:f7:0d:e0:14:d7:0e:61:90:05:9b:16:
14:fb:59:37:af:86:8c:55:d3:27:98:28:7e:6c:1d:
27:9c:46:c1:21:02:f7:3f:e0:c0:0c:65:58:54:7b:
8d:6e:ec:15:da:27:18:ea:e2:db:bb:6c:ba:6f:48:
89:59:d8:9f:53:49:f5:19:71:07:74:25:0a:c3:9e:
ae:3b:61:81:84:6f:a9:db:27:60:ea:59:90:c7:f1:
e8:06:be:20:ee:ec:ab:60:e0:d9:a7:b9:4a:85:ce:
38:34:1a:89:0b:09:17:31:ae:d8:a1:ec:5e:66:59:
a5:ad:6e:d5:e3:32:67:ec:03:17:90:e5:50:ca:2b:
05:70:f9:9a:d5:5d:ca:50:3b:4e:86:a9:ad:0c:2b:
07:d8:90:3b:e7:0c:3a:95:21:45:bd:4e:c5:45:de:
d7:1c:91:77:d4:27:c3:92:32:35:3c:3b:a7:12:ed:
70:a6:6e:b6:55:7e:66:1e:cc:46:14:e9:3b:95:52:
0c:1e:66:39:02:6b:1e:1d:f8:7c:ea:ec:af:8b:44:
b2:e9:52:7e:9e:3d:dd:d6:f2:90:2d:af:29:da:43:
48:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:CA:39:5B:D8:45:E5:20:9C:6F:7A:28:49:FD:CD:6A:BD:CC:E3
X509v3 Authority Key Identifier:
keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:11:f7:0a:45:8b:7a:f1:30:71:92:8c:dc:9c:3c:6f:85:
ce:06:e1:f0:49:16:5e:5f:a8:a5:9d:84:ef:5e:d2:45:b5:be:
eb:9f:7c:50:ee:0e:a8:a4:a1:11:93:b6:22:aa:2e:69:d9:db:
83:69:aa:19:dc:8d:9b:15:f6:e5:1f:7a:5f:eb:6a:75:c8:23:
b0:2c:00:15:f7:8d:fe:a5:83:c0:c3:a0:14:57:0a:d7:ae:20:
ae:27:89:fd:75:c8:67:fc:91:0e:37:30:c0:e4:a8:37:b5:8c:
e2:f5:a3:a4:c2:23:81:d1:61:e0:ec:67:bb:2e:b9:18:33:41:
14:97:3f:b9:57:25:a5:b0:87:de:64:a9:28:20:15:39:81:8d:
3f:55:b8:09:56:62:6d:98:01:66:4d:bc:40:4a:62:17:2b:50:
16:43:5f:ed:3b:8c:4d:47:c7:69:ef:cc:0e:18:71:43:0d:4e:
5e:91:55:ef:d4:64:7c:8f:c8:0e:0c:75:97:5c:65:90:cc:fe:
be:70:66:fd:ae:eb:50:af:21:d2:19:ab:ad:13:a0:44:44:a9:
e0:50:0c:8c:31:e0:c3:33:07:ab:54:64:8a:15:57:ce:c3:8b:
83:ba:a6:38:60:65:52:bf:8c:c8:c6:63:1f:7c:64:11:17:d1:
3f:d5:9c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:46 2025 by rpki-client