Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
File: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft (raw, json)
Hash identifier: I+cuOwJLc9H2LgsmlVprnYk2p3esKtwgjIcpvVsKc00=
Subject key identifier: 26:02:C9:B5:CA:C0:3C:DF:C9:69:BE:84:BE:3D:AB:6C:01:16:61:DA
Authority key identifier: A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
Certificate issuer: /CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Certificate serial: 019A71B8F77426217D432F31AEFD75F2088B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
Manifest number: 1026
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: H8Jh3PByPsoaxftF1Y0qeL6qk8M.roa (hash: OGYujsfjZeJUcMVXbqDzP8dUuHxSfUAIJn1ll6T06LE=)
2: pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl (hash: 82ziFHDN62dzq8LRYMprEGJBSf3HOAjCR3w+JvDqYl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:74:26:21:7d:43:2f:31:ae:fd:75:f2:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41870fc1854a3b093938c09cf60651ba993ffc6
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=2602c9b5cac03cdfc969be84be3dab6c011661da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:05:52:18:d0:f5:0c:3b:41:13:a4:35:8d:
ad:96:4a:13:0a:4a:1d:16:8b:68:1b:94:7f:0b:b3:
e9:72:ca:e3:b3:90:3f:de:20:f9:dc:5d:cb:ed:cc:
dd:82:88:a1:bb:94:84:69:11:78:45:bf:f0:3a:12:
bb:d2:e7:b8:61:32:31:aa:8f:26:a1:33:74:92:91:
c1:22:21:fc:5e:b9:d8:43:3e:ff:b9:c5:78:ed:b9:
eb:a5:15:8a:63:17:bd:f2:66:20:82:19:e7:23:81:
67:00:a3:2c:8c:27:dd:04:da:40:74:73:57:bc:c1:
74:4a:31:6d:65:70:d9:01:1b:bc:84:9f:73:6b:b5:
b3:11:51:70:3a:b0:85:2c:22:06:68:a9:88:2b:46:
2a:7f:17:4d:1b:4f:ec:f7:dd:88:4d:a0:e5:f4:ff:
70:cf:b1:8c:d7:35:70:7b:8d:90:fc:d1:7e:c0:70:
f2:e2:50:91:46:da:b1:fb:24:8f:97:97:c8:51:67:
ba:36:e0:6a:03:1b:7d:0f:00:a9:ab:b6:56:10:cb:
b2:c8:d5:a8:c5:a0:56:cd:8a:18:c9:c5:4b:e6:a2:
ed:01:d4:ce:64:b9:8b:c8:dd:f5:61:cb:79:7e:36:
e0:62:63:95:e8:19:e4:2f:ad:c7:5c:b5:34:20:26:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:02:C9:B5:CA:C0:3C:DF:C9:69:BE:84:BE:3D:AB:6C:01:16:61:DA
X509v3 Authority Key Identifier:
keyid:A4:18:70:FC:18:54:A3:B0:93:93:8C:09:CF:60:65:1B:A9:93:FF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/778c47-4609-43d3-aeef-79c8a2472a0c/1/pBhw_BhUo7CTk4wJz2BlG6mT_8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:ac:85:3e:ca:8a:e4:07:07:56:5a:46:fd:b1:70:21:a3:
cb:0d:6a:b3:d9:c5:12:b6:72:dc:a2:76:f0:a4:69:06:98:c1:
ad:b6:8d:ff:01:3c:c5:6c:8c:29:ac:23:f9:2e:a2:49:45:45:
85:ef:5c:dc:45:da:98:ae:c9:a7:a5:a1:20:10:10:ff:09:d0:
5c:8b:4e:07:33:34:07:78:7d:52:ff:eb:fa:09:44:ba:ca:ab:
c8:ea:c6:01:0d:75:f0:fb:37:f9:bf:f1:5f:2b:5d:9b:4c:ee:
af:e2:c5:83:92:3f:50:f7:a0:e8:2c:ba:4c:e4:fe:8c:4f:5a:
85:40:32:5d:29:47:00:ad:01:ca:42:1d:7f:11:1b:f6:36:7c:
f4:13:27:51:e4:f3:fd:1b:3a:b8:b5:b3:34:a5:a6:1b:eb:3b:
fa:2e:f7:ed:ee:2b:a3:48:63:0b:04:7e:5b:29:3f:f5:76:12:
1d:60:d6:a6:ea:1f:26:65:48:73:1f:d1:8a:7b:bb:59:31:ff:
7b:42:87:40:c3:e0:78:c5:ac:92:f4:32:2b:19:43:46:8e:2a:
a2:ee:8b:e1:3b:39:3c:34:45:ba:dd:d5:47:bf:95:3b:57:79:
03:37:f2:31:76:cc:4f:43:5b:2a:49:22:91:af:b3:c6:2d:7e:
37:a4:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:44 2025 by rpki-client