Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: 79uz/Fa/43ufDuCUrZiGu76/FNwjF1UQ9oUdfGfxMkY=
Subject key identifier: B6:35:58:8C:8F:87:A0:A8:83:48:A8:E4:50:70:3C:1F:83:A2:AC:DC
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 019A7293FC4FCE74D787F854011A34FEAE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: jnMq3Pcij4ytpVeqkwaoBxNdDFTTWts6/5QKj6XM5gw=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:4f:ce:74:d7:87:f8:54:01:1a:34:fe:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=b635588c8f87a0a88348a8e450703c1f83a2acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:eb:b6:0d:f0:c9:93:29:11:10:0b:0e:c2:
57:a8:59:28:ca:18:70:32:ef:d9:71:4b:e0:eb:fa:
38:1e:6b:eb:2f:63:c3:d1:38:7f:ba:16:ec:79:14:
60:92:94:c1:05:ce:97:a6:53:4f:12:15:fa:19:14:
c5:13:76:32:f5:41:6a:69:01:71:04:ea:11:18:a2:
87:a5:88:9d:06:30:3b:42:58:ff:9e:92:8a:54:6c:
c8:0f:34:8f:9f:7d:56:ab:ad:e4:2d:fb:1f:56:8a:
b1:04:6d:44:4f:2c:b8:4c:21:55:8b:55:c5:b0:b0:
06:d3:53:ba:59:ed:d6:91:0a:1d:e5:7b:96:3e:06:
83:3a:35:e7:14:08:ba:b8:2b:1d:dc:7d:8e:f7:b2:
13:3d:95:1f:a0:ac:26:9f:c3:e4:b5:ec:3d:e5:cc:
af:e5:43:dd:24:b9:a4:4a:d1:7f:7d:84:b6:6a:9b:
8a:2a:b9:89:46:f2:33:da:5e:0c:e8:69:0d:4d:dc:
2b:1c:fc:7c:d0:c3:c2:ec:18:f6:90:95:86:b4:82:
1f:a7:c3:83:09:cf:bd:4c:2e:75:6b:75:f9:e1:60:
6a:c6:58:22:75:9d:4e:dc:62:cb:37:84:17:9e:ff:
06:83:eb:03:4f:d8:2f:12:7b:5f:b8:7c:a1:94:4d:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:58:8C:8F:87:A0:A8:83:48:A8:E4:50:70:3C:1F:83:A2:AC:DC
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cc:d8:b7:f8:4e:2a:d8:db:75:f7:43:47:9b:69:a7:09:0c:
ef:ad:47:bf:4a:27:e8:c5:19:85:94:5d:fe:c3:b9:0c:ce:de:
ae:31:53:cb:7c:d0:80:b6:05:ef:96:92:53:08:e5:a2:cf:79:
83:28:84:9a:c7:bb:98:c0:78:75:cc:83:c1:90:15:f0:2c:a5:
32:c9:3e:79:c7:a5:5b:0d:10:85:35:75:88:25:4f:9c:e5:12:
18:b4:dc:ba:9b:47:d5:a8:1d:0a:a7:40:31:37:e9:66:f4:3b:
1c:3a:75:de:e6:3b:19:c8:0f:ee:fe:72:69:bd:3b:c1:5a:6d:
69:e5:69:5b:3b:b9:cc:a9:ad:0d:78:20:91:dc:eb:4c:87:8f:
12:ba:0e:0f:1d:a8:a3:c6:8a:b7:6f:ad:8f:19:97:21:82:14:
3f:6f:19:75:d5:54:31:58:dd:a9:b7:47:db:fa:5d:49:40:0d:
e5:9e:a2:15:d7:57:f2:03:d9:01:a5:1e:6f:15:0d:94:20:c8:
7e:c9:5c:9e:84:75:ee:e1:16:ae:70:d9:eb:4f:be:b1:b3:fa:
74:f6:46:21:a4:7f:5c:c5:92:ff:c9:5f:1f:c6:e3:98:41:86:
64:54:dd:a0:62:06:ec:12:da:99:c3:c9:61:4e:ea:19:13:9e:
35:04:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:55 2025 by rpki-client