Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: Oyyxlw9iFQqaJ+/s0lNL+LVBfOEUgSCLKsew4OTAx70=
Subject key identifier: 0B:44:7C:B7:B4:D9:3A:E0:09:DD:F8:31:32:FF:5E:CB:51:ED:E1:CA
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 019A71B8BE4964AFE197BF9B129A1CBEA486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: iMoY0HGCgcuCBvnEIWQ6TspjRsMbuzcw14SWAfLmV7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:be:49:64:af:e1:97:bf:9b:12:9a:1c:be:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=0b447cb7b4d93ae009ddf83132ff5ecb51ede1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:04:f6:b5:98:dc:86:b1:bc:61:c8:87:f6:
68:92:c8:a8:9f:77:49:dd:5e:64:9d:d1:0d:22:11:
3b:42:0b:46:23:0a:bb:b7:0d:c5:8a:1b:e8:23:26:
4b:bb:7e:8d:8f:83:e3:dc:95:27:04:95:12:be:f9:
ea:15:26:fd:c0:28:3a:42:ba:76:71:5e:bf:bb:1e:
ee:81:45:a7:28:72:88:7f:c6:72:60:7d:10:95:10:
23:ad:ef:86:31:71:6d:7f:de:02:22:15:d9:a2:e6:
fd:51:b9:69:36:12:c4:a3:6f:a0:d9:ea:47:1c:77:
67:e8:b2:6b:6f:0e:ca:35:67:fa:98:2f:3d:ad:42:
bd:35:52:b0:54:16:6d:35:c2:ec:60:f5:0b:67:f3:
c6:74:1e:7f:bf:99:b3:54:10:b9:39:65:d5:91:30:
cb:53:a0:64:ed:a7:d3:31:2d:8a:b1:24:c5:31:3e:
54:23:e6:47:3c:fe:4d:4a:c7:88:5c:f3:a6:dc:3c:
0e:4c:b1:d4:05:a9:3e:72:42:41:74:a5:cd:99:9c:
e2:6d:a6:b4:f7:14:12:3c:a3:6e:16:a1:0d:26:da:
43:74:e9:79:8a:a4:7e:09:6c:77:cf:f9:cb:b1:99:
d3:79:b1:38:d2:aa:8f:cd:3c:cf:8a:f4:ab:82:b4:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:7C:B7:B4:D9:3A:E0:09:DD:F8:31:32:FF:5E:CB:51:ED:E1:CA
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ff:b4:f2:3c:d9:bc:b2:ec:7d:60:e4:0a:6b:92:76:6a:bd:
29:f9:00:61:6c:52:00:e4:75:0e:8a:80:5b:06:03:d9:7b:1e:
74:bf:89:e9:f5:d4:4e:ad:53:2d:f0:dc:0b:3c:48:49:68:2e:
98:35:2c:df:8b:09:7f:d4:e0:10:e4:9f:a3:1c:80:b5:52:51:
e9:61:98:67:9d:88:a5:a6:60:5c:db:41:73:a6:66:cc:3a:e0:
74:46:44:13:e8:86:08:c6:41:59:13:67:92:96:02:7b:68:8c:
c1:02:32:05:09:07:5b:ae:8a:c2:57:d8:6b:58:57:e5:4f:55:
d7:f5:09:8d:b1:ac:1f:9f:50:c2:51:b6:7a:36:d9:36:82:ab:
8a:07:10:ad:aa:2e:aa:b4:10:d6:78:5c:bd:48:82:da:bb:13:
44:6b:a8:d4:37:fd:2b:7d:cd:ef:25:67:87:12:01:3e:56:5f:
46:21:09:a2:fc:e8:0e:a3:49:b5:d3:ab:30:ba:45:45:df:19:
cc:a0:c3:f3:4c:b9:51:74:12:87:39:3d:15:38:20:ec:6f:6f:
e0:21:ec:22:77:62:30:43:9c:01:73:60:17:7e:2a:26:4e:14:
43:57:fb:47:00:e1:c8:11:40:f3:95:94:a4:8d:91:5f:50:9e:
b1:28:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client