Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: sHBgrsoc6dE0WCdM+w8tEMG4NxHTXQNOH8Wv6dImAgY=
Subject key identifier: B8:6B:A1:9E:5C:DD:13:E2:40:C1:85:F1:EF:5D:B5:FF:64:AC:E8:D6
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019A72940563BD5E40C251A400418D5D8C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 11B4
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: L0J0zZMJ4sCixL0cAn/k8QOOOq7CjmI+dHNA25+fUIk=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:05:63:bd:5e:40:c2:51:a4:00:41:8d:5d:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=b86ba19e5cdd13e240c185f1ef5db5ff64ace8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:45:19:81:8f:bc:c1:59:9f:7e:fc:52:21:
49:27:31:8f:79:ce:0f:72:16:f6:0c:23:be:1e:66:
b7:f8:f8:fa:6d:1e:37:e1:aa:17:1a:17:ae:d8:77:
e7:3b:48:13:4c:14:97:0f:d0:17:f5:31:56:5c:a0:
60:37:95:5a:e8:1f:b2:c7:0a:3b:38:a9:18:42:88:
a5:f6:ab:ec:e8:33:2d:91:79:71:85:24:c7:1a:9d:
6a:83:31:27:45:06:53:cd:9e:57:f2:d4:ab:75:e3:
c2:a4:a7:c1:f2:a2:2d:b1:83:53:37:ce:7d:8d:1e:
6e:19:80:a9:4b:db:34:b4:6b:c8:d8:b1:2f:b0:22:
8c:b0:b0:90:b8:4d:c8:8e:82:b9:0b:5d:cd:d2:69:
ef:2a:5f:86:02:45:28:4a:bf:1e:a1:8a:9d:c6:96:
0c:84:79:36:92:ee:20:4d:14:a1:93:fc:23:22:6a:
82:66:fd:5d:7b:17:bd:9d:e7:60:09:8d:80:eb:4c:
cc:b1:ef:d3:b9:94:8f:01:31:01:7d:2d:c9:bf:6e:
5f:ef:d9:cb:08:20:a6:25:4e:65:78:a3:5e:2f:7d:
b3:c1:ae:b2:5f:ea:2c:c7:49:6b:4d:bd:c5:b1:85:
8b:19:b2:5b:88:7d:bb:f6:7e:7f:3c:ff:ec:94:8d:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:A1:9E:5C:DD:13:E2:40:C1:85:F1:EF:5D:B5:FF:64:AC:E8:D6
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:af:a5:ef:ce:97:1b:62:1e:3a:c7:f0:47:2f:34:5a:64:a6:
45:af:cf:fe:fe:1f:1d:f9:50:1d:99:54:78:3e:48:d4:6d:41:
48:72:ac:0d:19:9a:2c:42:e3:0b:30:42:df:9f:07:0e:36:6b:
e2:90:49:b0:36:04:b1:18:5f:6b:de:1c:81:91:bb:f5:56:f0:
de:99:07:1e:06:aa:fa:f9:f2:94:36:eb:52:7f:c9:db:19:63:
dc:09:61:ef:fc:91:0a:47:4c:d2:88:43:4e:37:51:52:cc:22:
45:0f:91:69:33:e7:a7:37:ad:76:d8:25:20:55:d8:91:4f:8e:
33:80:b9:1f:f1:1b:9e:ad:d5:78:39:e4:e0:ce:14:c1:ef:81:
b9:cb:96:f0:0e:63:07:3a:71:b1:ef:3e:5e:30:06:c9:3d:0e:
38:3b:66:e6:61:e0:72:ef:c4:cf:9c:ca:cf:ee:6b:e5:6f:71:
71:bb:44:8c:04:ca:75:d3:44:3f:7f:b4:4d:90:54:9a:df:12:
c0:49:fd:30:36:4a:64:5f:fe:f0:b1:23:ff:0e:27:83:70:f0:
ca:1c:1f:cd:72:e2:4f:3a:de:29:43:c9:45:99:89:4f:c9:ad:
27:54:dc:12:2e:44:d5:cd:88:62:0e:84:f4:d2:3a:61:ab:8c:
da:4f:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:43 2025 by rpki-client