Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft (raw, json)
Hash identifier: 5BbCjK2sjbmVHr5uVubvlFds7odGFjs3wIgvy7/ZmBg=
Subject key identifier: 7D:CC:1D:56:82:A9:BD:77:15:95:A0:B3:83:B5:80:19:C2:0A:6D:C3
Authority key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Certificate issuer: /CN=47e05df247174cd350b1af37833327c7702b8fff
Certificate serial: 019A2108E9122E451F5044403C34E03C5D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
Manifest number: 06A1
Signing time: Sun 26 Oct 2025 15:00:23 +0000
Manifest this update: Sun 26 Oct 2025 15:00:23 +0000
Manifest next update: Mon 27 Oct 2025 15:00:23 +0000
Files and hashes: 1: DcGW9RVJN1HDfDOegRPFfnj3g48.roa (hash: rUGaeOJ+LXvEthDAQG+r5QtUQxI1CT1RFQ8J8YnH+rY=)
2: R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl (hash: mGOY3C1tMV84mBeAGxRXPz2ckDkeKrnTvyPSSBNEIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:e9:12:2e:45:1f:50:44:40:3c:34:e0:3c:5d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e05df247174cd350b1af37833327c7702b8fff
Validity
Not Before: Oct 26 15:00:23 2025 GMT
Not After : Oct 27 15:00:23 2025 GMT
Subject: CN=7dcc1d5682a9bd771595a0b383b58019c20a6dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d3:99:da:f1:a4:e6:14:f7:0f:44:01:92:e6:
03:56:c7:bd:de:3c:e5:2c:c7:79:67:b0:0d:a1:58:
80:ca:12:8a:71:d7:f6:89:a4:c2:72:16:32:ce:6a:
2a:3c:89:10:4c:4d:97:40:71:0a:55:2c:25:17:e1:
c6:8a:5f:78:f8:ca:63:c9:9f:e8:2c:7f:a5:bf:d8:
6c:f5:01:51:f7:57:a5:6e:6a:91:ee:b0:25:88:9b:
2f:e1:70:cf:0f:53:8a:c1:01:42:92:b4:51:8f:22:
fc:f1:57:88:4d:39:32:a3:4a:99:42:28:ab:4a:7f:
13:ae:22:6e:0d:79:15:4e:b7:d8:09:29:7e:29:94:
25:b7:f4:0b:18:c1:b8:70:04:f8:73:93:f8:33:3a:
8c:97:ba:89:3f:b9:04:46:fb:7c:e0:59:50:d6:b7:
2d:20:54:51:5a:3f:77:10:ba:fa:20:23:23:7c:24:
71:8d:d5:fb:5f:8b:85:aa:03:b3:12:f4:cb:89:4c:
59:b7:c6:ad:e2:cc:76:a1:d0:25:b8:56:34:26:e0:
9c:95:9a:4e:6a:3c:ad:de:58:0a:b5:1d:92:6c:3b:
2a:5f:23:97:30:3e:79:9a:17:b0:7f:f6:c1:d7:aa:
ec:94:2b:35:73:9f:89:96:2a:16:f6:e5:77:c3:21:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:1D:56:82:A9:BD:77:15:95:A0:B3:83:B5:80:19:C2:0A:6D:C3
X509v3 Authority Key Identifier:
keyid:47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bc:2a:bc:4e:40:13:2c:79:db:87:77:a7:78:d7:8c:f1:a9:
b1:5b:65:fc:3f:aa:0c:88:74:f6:40:4d:0e:3a:c7:33:6a:94:
89:54:ad:30:6f:ec:9e:57:5e:8b:fb:3c:3e:f6:91:b0:12:f3:
1d:2e:e6:18:6d:d9:68:56:4e:61:f5:8c:62:91:95:10:b4:ec:
bb:72:2f:42:16:52:ac:60:cc:09:a7:5b:da:f9:a6:0d:b0:da:
4f:0e:36:8b:97:f1:18:d0:c7:8e:db:bc:71:10:c6:15:d0:3a:
63:f7:58:f7:18:58:1d:ab:c3:c9:d6:bf:d0:67:ae:e5:d7:9e:
92:6c:4b:44:ff:b3:be:87:e9:f2:6c:13:13:4d:ba:73:f5:5e:
34:36:35:ca:39:62:ee:b6:1f:d6:bd:f2:1f:6f:d5:3d:95:e0:
55:5f:cd:f5:1f:7b:ee:4a:29:fd:f9:ac:ed:52:d9:82:e9:f8:
e1:e4:48:d8:73:e7:7b:5c:8f:13:2e:c6:47:22:42:dc:60:c9:
3a:bb:c6:b8:2f:54:81:7c:f9:f9:db:68:7e:10:6a:0d:fe:b2:
47:47:03:ff:a2:ad:61:97:02:97:ed:a3:69:b7:e8:48:66:20:
e7:18:6b:4f:70:ce:bc:40:f0:53:37:42:7c:9b:df:8e:66:65:
b8:5d:b9:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCOkSLkUfUERAPDTgPF2SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTA1ZGYyNDcxNzRjZDM1MGIxYWYzNzgzMzMyN2M3NzAy
YjhmZmYwHhcNMjUxMDI2MTUwMDIzWhcNMjUxMDI3MTUwMDIzWjAzMTEwLwYDVQQD
Eyg3ZGNjMWQ1NjgyYTliZDc3MTU5NWEwYjM4M2I1ODAxOWMyMGE2ZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNOZ2vGk5hT3D0QBkuYDVse93jzl
LMd5Z7ANoViAyhKKcdf2iaTCchYyzmoqPIkQTE2XQHEKVSwlF+HGil94+MpjyZ/o
LH+lv9hs9QFR91elbmqR7rAliJsv4XDPD1OKwQFCkrRRjyL88VeITTkyo0qZQiir
Sn8TriJuDXkVTrfYCSl+KZQlt/QLGMG4cAT4c5P4MzqMl7qJP7kERvt84FlQ1rct
IFRRWj93ELr6ICMjfCRxjdX7X4uFqgOzEvTLiUxZt8at4sx2odAluFY0JuCclZpO
ajyt3lgKtR2SbDsqXyOXMD55mhewf/bB16rslCs1c5+JlioW9uV3wyHBlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3MHVaCqb13FZWgs4O1gBnCCm3DMB8GA1UdIwQY
MBaAFEfgXfJHF0zTULGvN4MzJ8dwK4//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMt
YWVjOTZmNDMxMDE4LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8zOGMyZTEtOGEzZi00MGIxLTgzNTMtYWVjOTZmNDMxMDE4
LzEvUi1CZDhrY1hUTk5Rc2E4M2d6TW54M0Fyal84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7wqvE5A
Eyx524d3p3jXjPGpsVtl/D+qDIh09kBNDjrHM2qUiVStMG/snldei/s8PvaRsBLz
HS7mGG3ZaFZOYfWMYpGVELTsu3IvQhZSrGDMCadb2vmmDbDaTw42i5fxGNDHjtu8
cRDGFdA6Y/dY9xhYHavDyda/0Geu5deekmxLRP+zvofp8mwTE026c/VeNDY1yjli
7rYf1r3yH2/VPZXgVV/N9R977kop/fms7VLZgun44eRI2HPne1yPEy7GRyJC3GDJ
OrvGuC9UgXz5+dtofhBqDf6yR0cD/6KtYZcCl+2jabfoSGYg5xhrT3DOvEDwUzdC
fJvfjmZluF25GA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:22:36 2025 by rpki-client