Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File: srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier: qfOHaOfNC9gScitmAL//pw5NVqWYFZkF6IAawoyMOHU=
Subject key identifier: 59:A9:AE:FA:50:6A:0D:06:AD:C8:21:93:FF:C7:F5:06:5E:EE:9B:9B
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 019A71132A660B893BB5B01E005AC7B38152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number: 0B54
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (hash: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=)
2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: LGDYy1RbJz7+5+F6gA2wQgZaxK7xgtIPLXi99mx1oeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2a:66:0b:89:3b:b5:b0:1e:00:5a:c7:b3:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=59a9aefa506a0d06adc82193ffc7f5065eee9b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:60:9b:4d:65:49:15:ed:7b:66:83:19:78:
0a:91:03:92:b3:ec:ba:f7:75:a1:58:ee:5a:af:07:
79:a2:e9:e3:31:19:9c:9f:66:7f:35:d1:16:56:85:
93:39:b1:b4:a4:4b:5e:d7:93:51:c8:8c:88:8a:2d:
e0:f6:cf:2c:60:ad:96:74:7b:12:18:3e:bd:7f:4c:
f3:fa:52:42:02:ee:6c:1b:78:91:75:15:f6:f5:16:
74:1c:56:2c:3f:dc:24:a8:72:06:df:c0:c3:4c:0a:
3d:df:db:ae:88:2c:36:3d:f3:6b:5b:b2:2d:6f:5c:
8d:78:6c:61:44:a7:ea:1f:75:92:54:ea:62:b9:a4:
13:4f:cc:94:71:d4:2c:c9:d3:70:80:2a:42:0e:73:
f4:63:ac:3b:6a:3b:be:88:28:07:b2:4d:97:b3:4b:
15:ea:30:0a:47:78:ba:67:c1:1f:19:f9:56:20:4a:
36:d4:95:48:2b:fd:a6:bf:2b:d5:5e:67:c8:92:f0:
cf:6d:d6:2f:9c:48:8e:69:0d:22:aa:fd:62:c5:22:
1c:6f:a2:19:a0:fb:1a:59:56:24:6d:a5:c5:20:c3:
27:e4:42:44:3d:2a:c3:ec:c4:2b:a3:ad:26:53:1d:
b4:2e:a1:07:29:21:84:ba:91:11:3c:de:47:19:3b:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:AE:FA:50:6A:0D:06:AD:C8:21:93:FF:C7:F5:06:5E:EE:9B:9B
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:c6:23:3f:fe:79:6a:c9:62:2e:b6:30:99:7f:96:d2:f5:
23:65:1b:6d:17:44:07:7d:f2:c5:46:41:f8:8e:fb:c7:0d:4c:
43:48:f6:b4:22:66:76:9a:e7:ef:4d:e6:60:bd:8c:55:29:60:
a8:56:38:c5:03:f5:5d:64:34:da:13:28:11:b6:c7:55:b1:53:
09:09:b4:3b:9e:f4:3f:7c:2d:bb:b5:d1:2a:9f:06:33:15:d8:
4b:66:74:5f:51:24:25:8f:80:e1:45:72:30:55:b8:cf:46:f8:
a9:69:6c:5c:02:12:fe:ff:20:8e:8a:c7:ab:5f:9f:29:6a:0b:
96:a8:fa:9e:3c:65:30:11:b5:13:a4:55:a0:da:86:59:59:e1:
00:15:c7:10:e1:f3:c8:11:27:27:0e:26:66:65:78:58:18:c4:
10:2b:ee:3a:3c:4b:4c:4c:9f:60:8a:f0:24:96:0c:c0:f3:6f:
17:63:f3:12:36:e9:7e:21:5a:d0:06:85:f9:b6:b9:1b:48:e9:
bc:f7:cf:44:63:d8:19:11:f6:56:5c:22:30:01:c4:b9:42:bb:
80:74:25:ec:27:01:97:c3:04:80:b5:6f:5e:b2:d5:50:de:3a:
35:0d:3b:f5:40:86:d1:3d:e8:4b:e1:37:7c:03:91:ef:8a:2b:
89:00:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client