Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: XAVhGfJbMPcjqylsFn3sl1o32MuWe8vFL5CJ4xwevGk=
Subject key identifier: A9:42:38:CD:15:FB:57:56:46:8E:4E:5F:C9:1E:50:BE:97:32:E1:CC
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 019A722604F5B622C078BEE637E54049D6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 128F
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: dEKAtuIkDiPN3tGzbPMP/sbiH0GhOlcLGWE4pt1lZc8=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:04:f5:b6:22:c0:78:be:e6:37:e5:40:49:d6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=a94238cd15fb5756468e4e5fc91e50be9732e1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:7f:8a:7b:28:89:9f:d1:b0:e9:90:f7:f2:
c9:8e:65:d8:3a:96:6a:b6:93:7c:91:3b:49:54:89:
41:a2:a5:0d:32:50:af:54:40:71:b2:c5:72:e5:19:
f4:03:04:d5:3f:b4:98:7e:da:fd:9e:cf:db:a4:d4:
94:24:75:02:61:b2:2a:4c:13:ee:59:b8:d3:71:98:
7d:0b:61:1d:20:3a:f9:6a:d2:64:68:9d:31:88:c4:
11:a1:ac:61:6f:cf:23:39:34:55:1c:c0:e3:9b:00:
fc:e2:fc:5d:7d:65:01:37:21:32:17:b4:ff:cb:f0:
48:50:8d:ce:bb:05:45:51:b2:8d:5b:4a:c5:5f:b5:
06:42:51:9e:ba:9a:7b:c5:3d:ee:27:ab:53:1c:1f:
20:b4:23:49:28:21:ab:44:2a:6a:64:fe:e5:30:42:
1c:95:1a:e4:94:99:61:a7:46:cb:bb:9c:fa:44:63:
9c:cf:2f:db:b7:8e:15:ad:80:4c:43:05:4d:2f:9c:
0b:39:47:a8:fc:70:f5:d2:1b:e0:c6:65:67:aa:18:
b5:cb:2d:23:cd:79:18:03:c7:e3:2f:9c:12:96:3e:
19:3c:8d:20:03:01:75:fa:bb:a6:dc:bb:1d:b9:a6:
f5:8e:8d:f3:04:98:d0:14:c7:f1:0c:d7:c7:c8:f2:
ea:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:38:CD:15:FB:57:56:46:8E:4E:5F:C9:1E:50:BE:97:32:E1:CC
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:04:e7:3d:a3:2a:80:87:8a:d1:8d:66:3f:4f:7e:1d:46:10:
d2:b7:a6:66:59:91:ff:29:e7:39:d7:68:0d:4d:87:fb:05:ea:
25:5f:dc:d1:ef:43:bf:4c:58:1a:e4:cf:3b:1e:6d:89:4f:a2:
a6:1e:77:87:7d:d7:20:19:6c:d0:d7:94:04:ef:38:96:36:6c:
16:b6:33:2b:4b:e1:5e:6d:af:af:cc:62:d0:b1:fc:09:b4:78:
a9:80:34:29:66:92:57:1c:e7:c3:f0:04:97:36:3e:86:99:97:
ee:e6:5c:61:a5:cf:f3:63:dd:78:d3:7c:ca:2f:76:fb:35:c7:
0f:1a:9b:09:77:19:df:9f:83:1e:c7:ae:98:1a:fd:e4:78:4f:
e2:2f:a8:7a:0c:4e:c9:dd:d4:49:7e:e6:78:c6:4e:7a:45:40:
84:b6:eb:b2:2b:56:84:e1:fd:37:58:2c:e1:a1:5a:7a:d5:39:
76:36:7a:a9:d9:2e:d1:df:33:35:9f:b6:ff:5c:cb:43:e2:f4:
a5:92:9d:e8:63:67:18:86:68:a0:0f:02:28:74:4b:de:eb:e6:
44:42:77:68:b4:3b:81:d2:5b:cb:9b:93:a7:c6:82:c9:c9:34:
db:2f:cc:a2:94:44:73:ce:6f:43:3c:a0:6d:76:19:2c:bc:14:
01:18:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client