Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File: BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier: kSOnIy52GaunC3Re7ZZesVOiql+cUn01HOYHdkGTJBA=
Subject key identifier: E6:CD:2B:07:EC:ED:80:C0:C7:5A:9B:8C:FE:25:42:98:C9:41:58:34
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer: /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial: 019A722604E22CF878ACB9D5B459F691937C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: qsbP5W3BcA3Z7xhVxyYqB7/gXz+l9KbfoCcdPbfuopM=)
2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:04:e2:2c:f8:78:ac:b9:d5:b4:59:f6:91:93:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=e6cd2b07eced80c0c75a9b8cfe254298c9415834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:41:22:97:bb:43:7d:48:3d:77:24:4a:38:
6b:6d:a3:1c:32:af:54:9e:c0:e8:35:87:5c:64:79:
07:a9:48:3a:3b:a0:c5:3b:de:5c:9d:27:ad:c9:eb:
2d:7a:80:e1:7a:67:53:3c:7e:1d:b4:51:71:81:3a:
c3:59:65:ec:1b:f2:b0:ca:b8:ff:2f:2b:1f:09:e3:
62:10:5e:8e:0f:4f:e5:48:47:9f:5e:7a:ac:b6:8f:
a4:c1:00:e8:0b:60:e4:6a:42:57:21:cf:fb:c6:19:
b8:c9:ca:69:bd:52:75:a2:ba:dd:f7:dd:5d:e3:3c:
30:bc:84:39:4a:f1:f8:eb:1b:de:a4:23:e5:d4:06:
c1:a4:69:6a:89:7c:93:d0:81:ed:b2:36:3f:1e:5f:
56:fb:0b:97:e8:5e:74:e5:4a:1b:b9:ad:e2:df:95:
fb:26:46:20:9c:33:85:04:9a:2b:00:6f:46:cd:c2:
79:7c:d5:df:b6:ee:1e:e2:6c:aa:87:71:47:8e:38:
18:ba:e8:59:5c:05:7b:06:c6:c6:a1:49:ce:04:86:
cb:02:d5:d2:51:bb:7c:bf:23:58:80:c2:57:2a:16:
76:4a:e1:cb:ff:e5:a0:34:d9:9d:6b:3b:7c:e7:3e:
28:87:3b:7e:bd:82:4f:0c:a0:d7:ed:c3:21:52:53:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CD:2B:07:EC:ED:80:C0:C7:5A:9B:8C:FE:25:42:98:C9:41:58:34
X509v3 Authority Key Identifier:
keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:57:3a:51:55:8d:00:4f:55:70:e1:49:87:fd:8e:78:3b:2f:
20:d4:1f:cf:82:e4:9f:1c:9d:3c:c1:a2:0b:39:a0:87:0b:fd:
80:8d:b6:53:0c:93:f4:f5:9b:80:ed:da:18:98:3f:e5:79:b4:
84:23:7e:5c:1c:f6:6b:67:7a:94:dd:da:0f:5b:dd:c8:e1:b7:
8f:af:00:37:41:d6:c9:d6:89:ef:bb:22:4a:18:a8:c0:8d:70:
5d:e8:c6:1d:f5:ee:72:56:73:0e:17:44:cd:7c:3e:75:36:fd:
4e:b8:2a:b6:e2:49:b2:b8:30:12:e6:79:7c:37:50:4e:48:67:
dc:5b:db:a8:48:2c:9d:31:eb:6a:de:90:db:f1:06:12:10:27:
30:35:09:04:4b:65:41:18:77:b1:c5:f3:00:cf:b6:1a:ea:07:
6d:ce:f6:62:3c:a5:3a:18:5f:f5:39:96:24:e5:66:ec:81:80:
e6:7e:da:52:4e:d1:31:64:dc:8e:35:4d:f9:06:8e:fe:e4:dd:
1d:20:92:eb:b2:79:0e:27:33:76:a3:b1:e1:ff:ea:5b:68:92:
a5:93:3b:47:92:7e:bf:23:13:60:f6:6c:b9:b0:08:f1:e3:97:
53:25:d6:9b:14:9d:01:5a:2a:31:1d:60:52:db:28:57:38:ba:
29:63:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:19 2025 by rpki-client