Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: WFF8ywHhPQJHlT4urBxmljF4yVZH5VkjxDVs4KS/pm0=
Subject key identifier: 48:51:7B:78:D8:B6:8C:21:7E:70:66:77:F7:F7:23:59:55:66:76:F7
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019A71EE908CEFF238000A25FA9303192F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: 7QEILJMHcOjGVudAFU892hCm7Ddd3JzpfJWwyPymA7s=)
2: npXHmGXZGuLcOHTCUM12CgHnXyg.roa (hash: 1gC/eDL6k6iHyWBQvbxBWaVuZWHOyh/0XMWrseRbP5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:90:8c:ef:f2:38:00:0a:25:fa:93:03:19:2f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=48517b78d8b68c217e706677f7f72359556676f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:8f:7a:d9:5c:b7:62:5f:ef:c5:8f:b5:56:
7c:52:c1:56:86:b8:53:8c:91:26:0e:e7:93:73:e8:
30:9a:64:e6:d6:99:77:8e:79:b9:f0:39:52:ed:3c:
a6:5f:82:b6:c6:c1:d1:98:88:e9:4e:52:13:b3:a1:
2f:8c:c8:7c:22:4f:b5:56:95:ab:95:90:ac:c2:a3:
96:6c:22:8c:12:8c:ad:1f:87:ca:50:d7:15:95:75:
f4:e7:df:bb:21:0c:c5:e0:ad:07:a7:a1:e8:b6:d3:
d0:44:6e:4e:d7:1f:d8:c2:34:a2:ee:a2:d2:44:e4:
52:fc:4d:f9:82:44:cc:b2:d3:a4:ec:62:e5:2a:39:
aa:42:22:d4:bd:84:ef:b9:91:ad:a7:d8:59:5d:9b:
d3:b2:31:0c:b3:2d:89:4b:21:60:40:32:ab:2f:ba:
6c:f0:c8:d7:4d:dd:b2:b9:fc:0c:ac:77:7b:dd:32:
67:0d:72:65:f5:01:57:00:b0:92:3e:d1:36:72:6d:
8d:65:df:50:11:b6:8a:ec:5e:78:2d:fd:94:90:72:
78:7c:62:77:9e:bf:05:de:dc:6a:c9:18:58:eb:33:
34:8e:3f:64:7a:18:ce:a0:2b:4a:6d:5b:0f:50:ed:
f6:09:d8:b2:6c:65:f0:88:f0:b3:b4:98:8b:8f:41:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:51:7B:78:D8:B6:8C:21:7E:70:66:77:F7:F7:23:59:55:66:76:F7
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:17:e0:cd:b9:3c:b5:f9:d2:ec:d6:80:9d:18:48:a6:e2:1c:
05:84:0a:93:c8:01:8b:e5:e5:9e:cd:95:70:f4:18:ea:4b:8e:
1d:8d:63:df:a1:00:5b:9b:dc:c7:67:79:6d:78:2d:de:00:ac:
69:44:00:69:b8:ec:8d:83:54:19:14:b4:31:4a:4e:78:32:ae:
4b:3e:56:44:4d:23:3f:5d:7e:e1:8d:e9:04:f4:70:75:93:bb:
b2:01:db:b5:80:80:3f:0f:ee:84:de:dd:61:31:7c:9d:ee:08:
44:29:75:69:4e:a0:eb:8c:92:48:45:c2:6f:fd:20:90:2a:3c:
f9:e6:78:8c:a7:32:06:98:d2:90:d4:25:dd:43:15:11:28:25:
11:ca:2c:c4:dd:be:9d:7e:45:c5:a6:4a:89:b8:f6:c3:1d:ed:
9e:11:b2:9a:e8:df:1f:d2:be:9f:a8:a4:d2:3a:25:05:33:ce:
f5:fa:1c:20:f5:f3:c9:77:52:14:b2:ec:a5:2e:46:83:61:95:
56:14:d4:ba:b8:7c:4d:65:e2:64:49:1e:74:84:3e:12:15:1a:
7e:cb:bb:11:6a:e3:0b:27:0c:70:b2:c3:c0:64:ff:1b:1c:78:
b8:39:d7:5b:c0:a5:92:cf:9e:df:9e:f6:12:41:fb:e4:a5:19:
37:db:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:46 2025 by rpki-client