Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: CVrHM7R0JABNCJM2H4Xzhs6I48h0Apo3Z2iEqHXAeTo=
Subject key identifier: 75:77:6B:80:8E:7E:11:54:56:11:95:FE:FB:64:7D:1B:5F:D5:32:65
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019A7301835A8CFC6307EA926AC3868A5A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 09AF
Signing time: Tue 11 Nov 2025 13:01:10 +0000
Manifest this update: Tue 11 Nov 2025 13:01:10 +0000
Manifest next update: Wed 12 Nov 2025 13:01:10 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: napZVDldxO0p66Lfuc4smkg9XGngnRHfWP0T6F0X084=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:83:5a:8c:fc:63:07:ea:92:6a:c3:86:8a:5a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Nov 11 13:01:10 2025 GMT
Not After : Nov 12 13:01:10 2025 GMT
Subject: CN=75776b808e7e1154561195fefb647d1b5fd53265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:38:e6:a2:77:b4:d5:02:52:50:9b:2f:bb:
2b:bc:ba:5e:af:ae:4b:f8:33:4d:d3:3b:4c:9f:20:
5c:51:02:9f:35:21:4f:ee:8f:22:a4:34:e1:3d:1d:
db:02:cb:53:5c:4a:70:ab:50:be:e2:4e:32:14:ca:
82:63:b2:1e:2c:7f:85:9c:8d:a5:4e:65:94:63:40:
98:fa:9a:d5:9f:37:d0:e4:75:ed:83:4a:21:28:ef:
cc:bb:a4:51:4f:83:89:6a:56:4d:10:43:07:0e:82:
71:2d:6c:a8:87:47:d0:dd:88:c5:7e:b7:35:b2:20:
ee:0f:39:c8:d2:68:79:e9:84:45:6b:41:9e:53:72:
66:32:d8:ed:bc:fb:da:c2:5e:99:28:f6:b1:6b:82:
01:e4:fc:a5:17:91:a9:32:92:c7:4a:a7:84:5b:94:
fb:92:7f:be:dc:f3:10:64:e0:4b:fe:fc:94:19:35:
bc:84:d6:d5:de:00:b6:f5:66:74:22:4a:54:44:25:
82:69:e9:1b:90:9d:1b:5b:32:ab:a9:dd:8d:d1:41:
fd:b1:3d:92:05:50:20:fd:7b:f1:2c:0a:9f:ff:75:
a6:0e:17:d2:27:4c:20:ed:18:81:d8:5b:b9:ed:a3:
31:34:c4:52:59:ed:f9:9f:62:cf:5b:2a:f3:49:62:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:6B:80:8E:7E:11:54:56:11:95:FE:FB:64:7D:1B:5F:D5:32:65
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dd:dc:97:cd:b6:80:ea:cb:4d:6f:0a:e8:17:df:20:b0:75:
c4:21:9f:b2:89:35:d8:1e:55:51:eb:91:43:d6:c8:0f:d3:75:
83:b6:d0:aa:e2:9e:e2:50:d4:9a:14:26:cc:c2:fc:bd:b9:fb:
c1:a0:50:df:62:80:f4:d0:0d:b7:e7:a0:cc:86:08:5b:ad:17:
99:89:69:84:98:50:b0:d0:19:ce:d5:c7:fc:6a:67:05:f2:df:
fb:da:15:52:11:ca:7b:3d:5c:4a:c4:17:85:51:2f:01:4e:06:
dc:b2:53:de:c8:74:4e:f0:bc:f3:b4:2b:a4:ac:6a:f0:d0:bc:
9d:17:9d:ba:e1:9f:95:db:b4:cf:42:e9:79:9a:86:2e:b2:1a:
eb:94:2a:b5:14:e0:77:ed:4c:27:01:c0:a3:0a:c2:b6:de:3b:
6f:81:91:89:24:7c:0d:65:66:43:5f:90:e7:25:49:47:63:e1:
88:83:89:3f:21:74:f5:27:1b:1f:a8:df:4f:ab:cc:12:79:52:
f6:9a:76:54:5a:44:aa:b5:9f:d3:31:5d:9a:39:34:01:a8:37:
de:a7:5b:01:aa:dc:f4:f0:02:6c:1b:3f:f8:f2:33:62:a2:ef:
80:9a:0b:94:ad:0d:ce:db:f2:9a:9c:16:5c:15:a3:13:b5:d2:
ec:58:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:25 2025 by rpki-client