Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: lkz6l9+36wUkH38Rf29SdEcpaYbRBBi+1cLNKtA1BHc=
Subject key identifier: FF:C5:EA:26:B7:24:0D:4C:14:53:96:9F:55:DD:E5:0C:5A:6C:7C:26
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 0199FC58B42F4AFA39F71EC8771F7B53978A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0CBD
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: 9Wu7XRpAszuYrScJfH3Zhpm7E2ogmzVWjgLWAjjJmsU=)
2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b4:2f:4a:fa:39:f7:1e:c8:77:1f:7b:53:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=ffc5ea26b7240d4c1453969f55dde50c5a6c7c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2f:16:c1:08:f7:04:2c:75:e7:17:96:18:db:
08:be:06:de:87:fd:52:ed:b3:1c:5a:e1:85:97:9f:
a0:85:27:77:23:b9:52:a9:98:9a:07:13:5c:43:e7:
c3:21:3d:2e:9b:2a:64:9b:3d:37:92:8f:92:5e:e5:
18:72:8c:38:73:05:a3:14:0d:c1:d7:af:ce:1b:ff:
0d:48:f7:a5:c7:24:77:ca:00:88:88:9c:d5:f1:1e:
4f:e3:25:32:97:ce:5a:5c:36:8f:6a:89:1b:b4:f9:
e3:6e:74:c2:08:50:4b:b6:8d:22:30:11:68:e7:b2:
33:5e:90:e8:c2:db:f6:21:df:aa:ca:b9:e6:1d:7f:
a1:db:ef:b0:e7:4d:bd:f2:57:18:da:35:1d:4d:8b:
69:d3:c8:10:93:89:9e:23:00:b2:ea:84:b3:ce:34:
0b:90:b1:66:9d:29:f7:b2:14:89:f0:ad:fb:9d:e7:
a2:bb:89:8f:4d:60:d0:a8:47:79:05:aa:f7:ca:28:
83:1a:08:51:9b:bf:cd:e8:a9:11:16:f2:83:03:91:
b4:af:66:4d:aa:fe:f0:9e:ba:26:85:1a:64:88:5a:
c5:17:5f:8e:6d:a4:bb:69:52:97:25:f7:81:5f:ea:
dd:b3:06:e1:46:06:28:1a:b8:22:bb:37:5d:e8:10:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C5:EA:26:B7:24:0D:4C:14:53:96:9F:55:DD:E5:0C:5A:6C:7C:26
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3e:76:a9:3f:54:0b:9e:49:56:4d:53:0b:f1:28:06:16:88:
bd:9d:df:34:e4:c9:b7:18:ce:6b:62:6e:a9:e3:e8:d9:fe:7f:
a8:cc:20:ae:e3:7a:81:c8:45:8b:0d:1d:8c:d0:97:2e:9f:69:
74:f5:66:0c:0a:60:f8:10:26:ec:7e:04:11:4e:b8:dc:da:c6:
e7:93:90:1c:82:a9:f4:7c:d1:ad:a5:b3:f8:41:18:8b:12:44:
e6:d3:91:32:26:6c:87:a6:1b:09:1d:08:7b:1b:38:30:09:75:
0f:15:86:75:e0:68:18:b6:94:f5:3d:e6:7c:d3:af:67:a0:21:
e7:5c:63:e5:27:97:d8:0a:16:b1:c4:81:01:39:2f:40:88:7a:
34:56:0f:51:50:8d:78:1b:4f:01:7b:3d:4a:e6:86:c4:40:59:
a0:ea:60:b0:3d:f7:7e:19:a4:d2:3d:e2:09:79:c9:54:17:eb:
c7:f1:9b:0e:40:54:39:86:d4:db:ed:af:97:c6:66:ae:82:d2:
69:41:84:f5:1f:19:50:f9:fc:d6:c9:44:15:d2:0e:92:94:97:
bd:66:aa:61:f1:cd:5f:a4:06:bf:29:5d:de:87:a6:c7:07:db:
a6:15:73:06:ca:f7:e1:a1:aa:ec:3f:f5:b7:e8:66:0e:08:a3:
66:e3:60:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:53 2025 by rpki-client