Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: ykj7J3Ag/xv7MV7NwEwI/TY969M8vdsKJ4DQQcKTw3A=
Subject key identifier: 39:09:EB:A5:7D:DE:54:7D:88:F0:B7:6B:57:DD:3D:B7:79:4F:B0:9A
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019A7226471E73D73107038E831140627EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0CFA
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 6BK2oBpae59l3gZIp28X5UZJgiowG2yjFp/DrdeCg74=)
2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:1e:73:d7:31:07:03:8e:83:11:40:62:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=3909eba57dde547d88f0b76b57dd3db7794fb09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:da:cd:9b:3a:a6:bd:ad:34:8b:51:ca:3d:
c7:d0:8d:3f:4a:65:6d:67:ac:a9:70:26:cd:e1:f7:
58:ec:6f:b2:68:e2:1d:cf:10:f7:94:4d:ed:fa:b1:
60:e8:b6:34:cb:9d:41:a0:89:d7:3a:c5:b0:ed:c4:
35:78:db:ff:58:cc:1e:52:05:c7:92:c0:29:7a:62:
44:a2:08:6b:7e:c6:39:a9:94:9a:e1:42:7c:e2:ae:
f5:1e:52:6f:a3:47:3f:32:65:45:17:6f:23:7e:3f:
54:8c:4e:7b:53:d5:45:d1:5d:e8:fd:32:ac:a2:b6:
be:86:88:85:17:58:14:db:fd:4c:65:55:9c:d0:19:
94:2f:b7:40:cd:15:9b:71:83:9b:21:b3:a5:6d:82:
0d:c3:70:b6:36:62:f7:f5:dc:1f:c3:84:9f:63:ab:
44:66:76:e8:83:76:fb:c1:ec:eb:54:e5:4e:84:ca:
21:6d:b3:d5:56:9e:3a:98:d5:e2:42:0d:1e:7c:55:
2d:18:74:d5:89:e9:70:d9:91:c5:1c:e6:a5:d4:ac:
ee:7b:66:e7:14:a5:37:db:04:ff:45:63:bf:5e:19:
2b:56:aa:20:86:49:5b:37:09:f9:ac:94:f5:80:49:
36:aa:a2:f4:56:61:5f:3c:2c:32:b8:d4:94:d6:15:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:09:EB:A5:7D:DE:54:7D:88:F0:B7:6B:57:DD:3D:B7:79:4F:B0:9A
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:34:3e:78:c3:fb:41:0f:4d:10:cd:63:86:6b:4e:00:b3:3a:
e4:7a:e3:a5:5d:c8:07:dd:bb:ad:ff:5f:10:4a:36:02:22:11:
a3:1c:0a:1f:36:87:41:e8:b2:9c:6d:bd:a5:2e:8a:f3:ab:93:
c1:98:4e:64:38:4e:30:33:2b:35:1e:60:ad:6f:43:59:d7:f1:
73:13:4f:6d:95:05:55:9c:eb:32:83:01:1d:ff:95:7c:d2:b2:
6a:d8:b1:73:2e:96:ad:87:ed:c6:56:db:b4:ee:3a:20:7e:0b:
62:a6:e6:f0:c7:d3:3c:5b:43:51:69:81:5b:00:f8:8a:b4:86:
f4:c0:10:c7:7f:d7:fd:cf:85:70:ff:ae:f0:bb:2f:65:95:e2:
3f:b8:f5:d2:4f:07:9b:97:34:81:a5:7b:3e:5a:d5:d7:4d:bd:
9f:a0:69:fc:7f:b8:a7:86:11:0d:de:a3:6f:b3:90:f0:3f:d9:
9a:20:50:c8:09:55:13:e3:18:4f:61:ef:2f:4c:d8:f9:0e:0e:
9f:1f:e8:bc:11:e1:bd:0a:9b:e3:1a:7a:a1:df:02:16:8e:cd:
38:d5:67:4c:5e:4c:5c:2b:98:1d:2f:b9:50:bd:98:3d:83:e4:
44:0c:2a:31:13:e8:09:14:69:2b:e1:d5:8b:4b:25:17:77:fd:
b7:77:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client