Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File: bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier: FGBUH86RFPq5x1Kt549zcRCLtOgyx2J2HtEk6XgCIeA=
Subject key identifier: 38:C1:F0:82:E8:21:28:56:BE:FB:08:90:49:7E:C8:ED:F3:17:3A:4B
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer: /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial: 019A5375C0ED5C34A417BDE296F6506C7084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number: 06D1
Signing time: Wed 05 Nov 2025 10:00:17 +0000
Manifest this update: Wed 05 Nov 2025 10:00:17 +0000
Manifest next update: Thu 06 Nov 2025 10:00:17 +0000
Files and hashes: 1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: +5WTQCDKx8iMVddJN3PINvYwJ06LdoD9GUBY5i2PLxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:c0:ed:5c:34:a4:17:bd:e2:96:f6:50:6c:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Validity
Not Before: Nov 5 10:00:17 2025 GMT
Not After : Nov 6 10:00:17 2025 GMT
Subject: CN=38c1f082e8212856befb0890497ec8edf3173a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:0a:66:3e:24:c5:6e:81:e2:43:6a:1d:27:
3b:6f:05:65:53:6d:da:3f:68:e0:bc:82:85:52:cc:
5b:72:7e:b2:51:7e:af:87:5f:1b:44:1f:85:8b:2b:
60:2c:f7:70:de:f5:9c:15:0f:bc:ba:73:0d:23:c8:
1e:5f:1a:7b:46:bd:76:8c:d6:b2:58:d8:88:f4:77:
15:d3:5a:37:82:d7:ea:58:19:a8:cb:83:cb:92:bc:
bc:f6:5d:04:f6:71:c0:74:3a:6f:85:64:ed:ce:13:
e2:f4:57:cf:04:df:bd:8c:6a:0b:74:e2:cc:0c:93:
6d:99:9c:69:9f:92:e6:82:48:64:50:16:61:ca:96:
bc:75:b2:bc:7e:b4:eb:be:e1:34:48:1c:b8:65:a4:
c2:fa:2c:08:8a:86:88:01:29:ba:22:6b:92:58:bb:
b9:ae:03:9c:2a:09:b8:1d:87:3d:74:e2:49:24:6f:
53:e9:3c:99:ed:54:c2:2d:04:c6:ae:46:6a:13:1f:
56:2f:10:93:42:c8:b6:dc:50:c5:92:8e:4f:f2:54:
f6:42:08:55:32:0b:8e:7c:32:1f:d4:20:9a:c0:3b:
d2:01:2c:d4:f0:69:a3:6b:97:3c:21:a0:48:4e:ed:
fd:ad:34:3e:9a:c5:67:49:e2:13:4c:1c:c0:fe:f8:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:F0:82:E8:21:28:56:BE:FB:08:90:49:7E:C8:ED:F3:17:3A:4B
X509v3 Authority Key Identifier:
keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:a8:ac:6f:01:06:46:3b:5d:6b:f4:00:09:e3:ea:a1:56:
3d:10:f5:1d:d9:9c:49:69:89:1f:0b:c7:4f:b9:bd:fc:77:76:
b0:52:82:de:3b:22:28:bd:dd:6b:d6:7b:87:9d:1d:bd:d3:20:
ea:00:fe:8d:63:21:3b:03:59:64:be:99:11:bf:42:bc:46:79:
6f:91:06:6b:76:3c:1c:78:7a:bb:25:e8:40:9b:0d:be:9a:c0:
23:2c:65:43:1a:12:b6:fe:7c:14:4f:2f:e6:bf:a9:00:71:74:
a2:4d:29:07:66:05:ac:1a:04:ea:2b:d4:00:1c:77:a4:d7:4e:
83:ac:be:45:f7:3c:ea:c3:4c:ca:b4:84:24:ef:c3:fe:fb:ae:
13:a2:43:a9:19:18:11:0d:89:8f:7d:b6:74:cf:2c:86:86:be:
0c:eb:23:1a:0a:c4:69:59:87:65:7d:c9:9a:fe:b3:61:50:de:
5b:37:87:02:56:f5:a2:57:35:46:12:a8:eb:c0:db:a6:15:56:
ef:e5:d5:e3:ec:33:e7:0e:c4:d5:76:3b:3d:d6:5a:a9:89:6e:
ce:43:bd:32:1a:2a:20:42:80:48:b8:c5:56:70:5e:a1:49:d0:
eb:6e:7f:18:49:90:8c:23:5d:3c:17:63:bb:92:b0:a3:78:0e:
fb:05:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:53 2025 by rpki-client