Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File: B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier: 82ZVaP17ZwFxlIJebQPVnUY1cYRCYVXVdkKG4mVcVAs=
Subject key identifier: A1:15:B7:09:75:FF:F2:56:A0:76:6A:0A:E6:DB:31:6D:D5:9D:BF:D0
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 019A71EE775D40F2E6A600BC1A07CEE284EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: 2CIwVa2guH9I9mE05PyNSk_zLJw.roa (hash: 6WMXH3mPe6YH5cQJoRqeEOdgwx8H7f+4sGKrej+Vxnc=)
2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: SbYmcBMWkqs93/N5+8s/QbP+cn5QVCXSOhdjY66cpZo=)
3: U9ESt7XkFJMxc8hDKsx2ew3J7YE.roa (hash: IAjM9oVyj8oid2QGC8YSaV020xf4N3UKnDXpYd0lkxk=)
4: o1r9uGgWSMkBr8TYtqeKLaE5QOE.roa (hash: 7RzPsp3uHfpDYCSJda3tVfo5/SCH0Ae2ssPUnQ5pNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:77:5d:40:f2:e6:a6:00:bc:1a:07:ce:e2:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=a115b70975fff256a0766a0ae6db316dd59dbfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:46:2c:db:fa:e2:73:fc:63:fd:40:37:06:
52:2a:0e:46:a5:12:6f:d4:af:ff:5b:9a:db:5b:5b:
be:02:62:3c:6d:48:6f:a9:03:e2:a6:de:65:4d:8f:
46:91:b4:c6:fa:06:b8:6e:a4:76:dc:2b:40:80:80:
4a:38:d4:fe:c0:52:10:4b:50:57:bd:99:c4:1e:e8:
11:f1:e5:77:79:4d:f0:86:00:a1:3a:ea:fc:22:be:
ed:5c:3a:25:d1:61:ba:9d:9c:6e:7b:7a:84:0c:c1:
ad:67:b4:cc:18:21:d5:0a:a1:02:1d:90:d0:7d:d1:
bd:b8:f4:1a:9e:92:2f:0f:49:05:d8:e2:b0:ff:9d:
de:a3:96:e7:23:ba:88:29:a3:f0:e2:46:94:1e:80:
cc:c9:67:05:ec:b8:05:9f:0f:be:fd:9c:b1:92:78:
8d:5b:c8:e5:35:43:f7:dc:26:5f:1c:cd:0f:c3:35:
bd:9d:05:f6:a6:e3:54:25:7f:47:1f:d7:55:00:ac:
9a:38:f4:48:03:2b:31:99:c6:35:bf:2c:42:6b:86:
b2:68:e8:5a:be:9e:48:d3:77:a8:a2:0a:36:94:d0:
25:c1:be:3e:67:f7:6f:8a:5a:af:20:3f:3b:20:47:
4a:94:68:3d:d5:8e:24:e8:0a:a5:96:f4:8c:a1:12:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:15:B7:09:75:FF:F2:56:A0:76:6A:0A:E6:DB:31:6D:D5:9D:BF:D0
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:f7:10:c8:0d:f6:66:80:ce:4e:b8:ee:97:b2:74:72:d5:
39:5b:ee:2e:54:72:b6:e5:33:00:26:fd:f9:fe:df:8e:93:2e:
d8:3e:2b:d2:31:1f:e6:10:53:fd:2f:67:73:d4:cf:11:cf:8c:
75:ae:f6:24:69:3b:8c:45:ae:be:7d:f5:27:05:aa:90:c3:17:
c6:a8:22:66:57:09:14:a9:07:75:56:ca:cb:4b:4e:b4:c7:18:
72:99:60:40:3b:b5:10:23:d4:c9:7f:41:60:81:97:f2:e0:03:
66:bf:29:64:65:cd:f9:8d:8b:fe:29:b5:ef:7d:0e:b1:a7:d8:
fb:81:d9:a7:34:5c:ca:9b:08:55:7d:a2:a2:60:d3:2b:b0:bc:
fd:59:9f:09:3c:0c:6c:8d:2e:e3:4d:6c:5f:e1:7c:76:7d:9f:
bf:f9:bd:c6:84:92:96:32:94:3c:87:e3:6e:bf:0e:ef:dc:3f:
75:39:cc:93:75:1c:d6:4c:b6:c5:d7:aa:79:4d:67:d6:93:ca:
aa:75:3b:6b:26:6f:4f:a2:ff:b5:da:a9:df:6f:1c:38:f0:c2:
6a:a3:da:db:1a:51:61:45:1a:b5:7c:93:4a:df:6a:ab:bc:ca:
36:b3:43:0a:f5:a3:5e:89:58:26:8b:7f:a9:ae:2f:ec:c7:ff:
23:a7:dc:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nddQPLmpgC8GgfO4oTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdhMzZkNzc2OGE3YjMwYTRlZWNiYjY5NjRjOGMyMzdk
NzQ0MDEwHhcNMjUxMTExMDgwMDQ0WhcNMjUxMTEyMDgwMDQ0WjAzMTEwLwYDVQQD
EyhhMTE1YjcwOTc1ZmZmMjU2YTA3NjZhMGFlNmRiMzE2ZGQ1OWRiZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgRGLNv64nP8Y/1ANwZSKg5GpRJv
1K//W5rbW1u+AmI8bUhvqQPipt5lTY9GkbTG+ga4bqR23CtAgIBKONT+wFIQS1BX
vZnEHugR8eV3eU3whgChOur8Ir7tXDol0WG6nZxue3qEDMGtZ7TMGCHVCqECHZDQ
fdG9uPQanpIvD0kF2OKw/53eo5bnI7qIKaPw4kaUHoDMyWcF7LgFnw++/ZyxkniN
W8jlNUP33CZfHM0PwzW9nQX2puNUJX9HH9dVAKyaOPRIAysxmcY1vyxCa4ayaOha
vp5I03eoogo2lNAlwb4+Z/dvilqvID87IEdKlGg91Y4k6AqllvSMoRKfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEVtwl1//JWoHZqCubbMW3Vnb/QMB8GA1UdIwQY
MBaAFAdHo213aKezCk7su2lkyMI310QBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEt
YWFiYWRkMDcxOWJhLzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85ZWFmMWUtYzllYy00NjZkLTgzNzEtYWFiYWRkMDcxOWJh
LzEvQjBlamJYZG9wN01LVHV5N2FXVEl3amZYUkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyz3EMgN
9maAzk647peydHLVOVvuLlRytuUzACb9+f7fjpMu2D4r0jEf5hBT/S9nc9TPEc+M
da72JGk7jEWuvn31JwWqkMMXxqgiZlcJFKkHdVbKy0tOtMcYcplgQDu1ECPUyX9B
YIGX8uADZr8pZGXN+Y2L/im1730OsafY+4HZpzRcypsIVX2iomDTK7C8/VmfCTwM
bI0u401sX+F8dn2fv/m9xoSSljKUPIfjbr8O79w/dTnMk3Uc1ky2xdeqeU1n1pPK
qnU7ayZvT6L/tdqp328cOPDCaqPa2xpRYUUatXyTSt9qq7zKNrNDCvWjXolYJot/
qa4v7Mf/I6fc7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:32 2025 by rpki-client