Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: 3EhK4JwLjTj8ohlF8MyIx6zu1PkV+AmKWuN91A8kcWg=
Subject key identifier: 4E:3E:EB:B2:99:52:B8:67:9B:E0:63:F5:8D:D0:21:31:2D:9F:36:F7
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019A71B82B416E881A2E418889474FB99CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: a9AQk9IZhpfKY0ZhnOL7cJxWCIXO5Fj9wtHNSigdxYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2b:41:6e:88:1a:2e:41:88:89:47:4f:b9:9c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=4e3eebb29952b8679be063f58dd021312d9f36f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:44:84:48:d3:c9:df:7c:b9:db:96:ea:86:
b1:60:1d:95:0c:9a:7b:d6:43:85:76:e5:15:6e:5c:
bc:af:82:ca:a9:4d:7b:7b:75:83:a0:54:0e:9b:62:
0e:ab:85:18:b6:67:ea:34:c6:a8:a8:36:a4:ca:ca:
fc:d1:d2:8f:dc:74:7e:e4:01:2e:ba:84:ee:0a:6f:
a1:91:36:ad:bd:85:01:61:0a:c3:61:8f:d2:5c:e9:
c2:55:72:00:fa:6a:76:17:ff:f6:b0:6c:42:65:d8:
42:97:12:23:32:75:84:80:5b:75:9c:98:d6:aa:98:
a9:44:73:b9:7b:30:ff:c1:b3:aa:1e:93:16:d7:f3:
10:d1:e3:76:41:8e:2a:9d:50:10:72:59:b7:f9:ab:
35:d6:77:6f:a0:05:7e:06:00:ba:d3:dd:62:2d:c1:
7e:17:9d:0e:81:3b:6c:16:29:52:f6:1a:8a:0d:85:
40:c5:95:57:8a:3a:38:70:0a:6b:d5:0e:f5:aa:67:
5b:72:f2:36:08:44:7c:07:ab:9d:05:20:51:07:c6:
c3:87:db:1a:69:0c:3d:9a:e2:4f:03:23:91:10:e5:
db:55:eb:96:3d:0b:b5:20:0d:05:6a:21:5b:b3:53:
cf:cc:15:1c:37:c5:99:0d:c6:37:c4:d2:a8:fd:e9:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:EB:B2:99:52:B8:67:9B:E0:63:F5:8D:D0:21:31:2D:9F:36:F7
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c6:e1:0e:b7:f7:a1:97:b2:dd:72:61:41:8c:48:41:8a:30:
43:ff:88:8c:71:7e:57:e4:8d:9a:6b:c0:9f:39:cb:72:2f:f7:
19:5e:f9:18:b6:9e:2a:e1:d2:32:6b:f4:9c:07:48:29:58:56:
55:e4:5d:c8:dc:46:7f:c0:fa:c2:90:7f:40:1e:4b:b3:52:24:
61:7e:85:7e:72:a4:cf:0f:a1:e7:8c:68:7c:4a:20:57:aa:2f:
cc:10:33:86:bb:d5:86:af:11:14:80:fe:62:7e:a5:f5:49:46:
dd:13:71:7b:0b:fa:7f:0e:c4:53:ab:ce:1f:39:8e:9e:0a:a0:
87:8b:4d:e7:45:08:94:04:7b:5f:43:b1:8a:5d:5f:5e:3b:e8:
b7:76:2d:2f:b0:e8:8e:7c:c4:00:06:9a:65:d9:60:c4:bc:05:
a4:9e:d6:db:43:b0:e7:83:01:f7:c1:bd:4a:da:cc:ab:a3:e8:
c3:82:14:48:57:b2:aa:ef:a1:38:cd:89:de:f9:ce:01:b2:0b:
49:7a:74:31:6b:3c:e6:3f:55:34:39:11:20:59:e2:08:06:84:
cd:86:04:84:96:97:14:87:35:dc:0c:20:83:e8:c8:bc:db:93:
c5:44:05:90:d1:fe:b8:5c:e0:f5:fb:c6:65:2e:06:35:fe:3b:
91:0a:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:35 2025 by rpki-client