
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: bD0gOZLbGSxNjYC9fX9X/jOsPkukJDqfemu/18y5MuI=
Subject key identifier: 6F:20:5E:D8:F1:EC:0E:3B:46:EC:22:15:ED:EA:69:2E:61:12:DA:71
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 019A72265D4D21CAF4A42E908B83F5914F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 0407
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: 5sViL6KTJC9I2lDRqxMcFsrLfE0meSENVOA7/2vxKZ4=)
2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5d:4d:21:ca:f4:a4:2e:90:8b:83:f5:91:4f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=6f205ed8f1ec0e3b46ec2215edea692e6112da71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:62:3c:29:bf:e5:2e:6d:ef:96:46:f5:d1:
27:44:e5:38:01:4b:7a:30:f1:b8:88:a6:64:74:54:
72:41:9e:12:e7:ba:3b:4b:60:2e:55:c0:c3:03:56:
e5:ad:90:7d:31:3c:ab:fc:b7:cd:93:89:6a:11:c9:
06:f2:77:d1:d9:48:e4:0a:0f:af:12:35:3b:f6:93:
79:5d:ed:ab:44:2e:9e:68:df:6d:24:fd:af:a6:c8:
68:a8:13:51:41:56:09:49:2a:8d:7f:bc:d5:46:06:
84:c7:c7:42:57:32:b6:56:64:17:01:f6:9b:31:d3:
81:88:35:bd:d5:00:f4:54:3a:49:25:d2:ce:6c:47:
c7:7b:04:eb:32:f0:a8:98:85:3a:ec:3d:14:af:c4:
07:ad:30:cf:20:94:17:75:99:35:77:be:1c:e8:e8:
90:a8:32:c4:8b:fe:5a:af:01:2c:62:79:44:32:34:
65:04:cb:dc:d7:ce:f9:99:2a:33:29:25:05:93:eb:
96:d2:89:57:5e:24:d6:58:1c:53:95:e3:8e:16:e8:
cd:37:ac:36:88:39:ad:07:99:53:47:f9:ae:2b:00:
4d:2e:35:d7:12:ee:06:88:69:17:45:54:ed:d5:cc:
d1:e2:4f:10:dd:07:17:a0:66:fc:13:51:6f:1f:cc:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:20:5E:D8:F1:EC:0E:3B:46:EC:22:15:ED:EA:69:2E:61:12:DA:71
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3c:d7:57:69:d9:80:f9:e3:0c:4e:64:2b:1a:0c:d1:9b:58:
67:49:83:ef:52:03:c6:1d:27:ba:1b:2f:71:cb:55:67:ca:67:
aa:5f:85:71:75:81:f3:a7:a1:3d:35:92:5e:56:4f:05:df:3a:
10:78:b7:62:95:00:a6:3f:17:1e:d1:6c:31:0c:45:c8:48:7f:
62:0e:b0:b0:68:d5:4e:55:21:cc:b7:da:82:2f:ad:20:cd:a0:
00:85:20:1d:24:ac:37:f5:79:51:ec:22:ae:01:52:bb:5c:92:
cd:48:e8:54:41:73:73:26:9e:76:4f:1d:e0:eb:3b:67:bb:94:
9b:af:8c:c3:8a:57:d4:4f:6c:d3:09:94:cc:18:bd:b4:a6:dd:
4b:7d:ff:79:b7:df:9a:fe:2a:b0:81:fe:0e:7f:b2:b7:23:ab:
91:e7:80:5d:00:ec:8a:32:06:8f:7f:b1:37:15:5b:da:9d:04:
12:20:3e:4e:76:33:cc:08:1b:65:01:36:d1:22:cd:18:02:52:
2b:d3:ed:35:8a:ac:77:03:df:6b:da:93:f9:35:6d:7a:62:6a:
43:b1:e0:03:a3:a3:82:37:22:e8:2e:a5:67:b2:19:45:47:7c:
ab:6d:b1:2d:18:ad:e3:9b:de:70:5f:3d:d8:cb:67:ab:9f:b4:
2d:2d:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:53 2025 by rpki-client