Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: vBYOt+jV/l9FMDepn7gjPVHesPyBlmlKZ906pdwDD84=
Subject key identifier: 64:C4:16:B4:A4:57:66:D4:DD:B4:82:2D:C8:E4:F3:5B:90:DB:CF:0F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019A71B85FC748950FA33C6F328C0FC81191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0A63
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: 1mGz/bx3EgluAkc8U0gxoYE3NIhrqVNdrJIZQK+T+ig=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5f:c7:48:95:0f:a3:3c:6f:32:8c:0f:c8:11:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=64c416b4a45766d4ddb4822dc8e4f35b90dbcf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:cb:52:10:49:a8:c2:7d:a3:3f:bc:bf:65:
71:28:79:ed:3e:71:86:2c:9c:c0:9d:e8:e1:19:e9:
77:6f:65:05:8b:36:95:b5:1c:8e:28:4a:89:3c:df:
da:33:e5:fe:b9:54:3f:45:2e:1c:9a:68:80:ed:6f:
79:19:cb:63:82:3a:c1:46:09:87:e4:14:af:25:65:
0e:df:b6:6c:2b:48:ee:07:66:b5:6d:10:8d:a5:37:
92:c1:3f:a3:7f:d8:ea:42:ac:35:17:f9:64:8e:50:
03:83:53:30:9f:94:9f:c5:eb:6a:8a:12:95:81:be:
ee:23:6e:29:66:e7:eb:c1:23:3c:3f:ca:27:5c:b7:
79:10:1a:73:ff:ca:2a:b1:1a:03:0f:37:44:35:9d:
37:7d:ce:27:fd:dd:d4:2f:53:d1:92:2f:e8:47:b4:
b4:9f:a0:46:2c:a5:3a:ca:65:a7:4e:81:83:f9:e4:
54:71:0b:bb:53:6a:ba:e1:1a:d3:99:fb:80:9f:21:
12:5d:2f:7d:37:db:6e:77:ff:f1:18:9d:33:b0:38:
f8:04:5c:4b:d5:3d:75:89:c0:f8:03:a7:29:7c:40:
98:3c:1d:84:1e:85:d0:88:0f:7a:24:c4:cf:f6:fd:
71:bd:17:20:06:87:f4:3c:0e:55:5a:43:86:f7:63:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:16:B4:A4:57:66:D4:DD:B4:82:2D:C8:E4:F3:5B:90:DB:CF:0F
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:27:41:d6:49:49:0f:8d:2b:e1:05:ea:87:20:e9:a4:b0:53:
4b:d2:ac:5c:ef:22:47:59:7e:9a:e2:35:dd:2a:e3:31:f4:de:
9a:82:55:65:d4:15:e3:04:bd:0f:aa:59:87:c4:8b:cc:f1:35:
b1:ca:4c:e4:bd:0c:49:02:b2:79:e8:40:eb:c9:b0:22:63:85:
bc:d1:80:5a:e8:d6:86:f7:d1:ad:f9:d5:95:b4:f8:fd:e6:4c:
b7:4b:4d:2a:59:33:88:ec:7f:05:e8:ab:3c:5b:7c:f7:4a:41:
04:24:e8:43:17:7f:3d:92:9b:a3:10:ac:5e:e7:26:94:6d:8f:
f9:a1:49:64:b4:7f:83:72:c7:26:ac:36:8e:01:af:b3:b5:f8:
39:c8:16:c9:75:5e:b9:30:21:65:a0:8d:38:90:43:17:c8:88:
4b:46:6b:c6:d9:3f:7c:fd:64:69:76:c4:1a:e8:6b:d0:e8:d5:
9c:c7:94:e6:bd:42:1b:9e:3d:5b:bc:c8:85:69:c0:73:70:d5:
0e:07:20:0a:b3:6d:4b:bf:a7:b4:04:45:ed:d9:d8:50:b2:c3:
bc:a8:0b:81:46:eb:56:a9:bb:70:25:68:7a:d8:70:58:0d:95:
fb:cc:f0:8d:42:a7:ab:8a:13:17:a8:b0:af:34:44:d6:ff:f8:
4d:04:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:01 2025 by rpki-client