Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File: B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier: wBemd/rdCzgJmX2nJhmm0/+MT5rSxnmjQMPeCmmuRpA=
Subject key identifier: CA:3E:EE:6E:7D:CC:A9:6F:5B:05:50:7B:F7:AB:E5:F8:12:07:06:39
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer: /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial: 019A72CA700CC6F56C1B0B8BC4511EC25B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number: 0668
Signing time: Tue 11 Nov 2025 12:01:00 +0000
Manifest this update: Tue 11 Nov 2025 12:01:00 +0000
Manifest next update: Wed 12 Nov 2025 12:01:00 +0000
Files and hashes: 1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: 7TS7/0xO7JVnEOT+WWDQUGkLJAWh5OvDz63HMFkEO3s=)
2: ul-xO-5mZZApWQIPteBxrXhy3Gg.roa (hash: Xgcb4gBJ+LBlJQi0BqbRaMDSR7lxsJ55H3PWqex5WBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:70:0c:c6:f5:6c:1b:0b:8b:c4:51:1e:c2:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Validity
Not Before: Nov 11 12:01:00 2025 GMT
Not After : Nov 12 12:01:00 2025 GMT
Subject: CN=ca3eee6e7dcca96f5b05507bf7abe5f812070639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0d:c7:8f:73:43:78:de:7e:c5:d6:b6:b7:38:
89:7b:20:76:6b:a8:84:8f:db:80:83:e9:c7:84:11:
6d:59:a5:36:c0:f9:d8:0b:05:bb:16:8d:55:43:1e:
15:bc:20:cb:18:d4:34:cb:11:ad:53:14:a2:d6:b5:
a0:19:ed:ed:23:8e:41:04:cb:08:fc:cf:0c:5d:66:
39:9c:fc:a8:f1:47:b9:2e:82:88:ba:bc:c3:f7:b3:
2f:d1:db:0c:2b:46:2f:66:72:15:32:58:0b:53:33:
bc:79:35:40:0d:d5:43:73:23:3d:e9:85:db:f6:f8:
a4:d5:7a:9d:5a:cf:dc:53:ae:ba:16:59:1b:2f:75:
b6:bd:05:64:08:ea:06:83:7c:2c:03:02:d2:e8:90:
f7:01:62:4b:34:eb:73:d0:7e:fa:38:b7:ca:2b:54:
be:ad:ce:05:ee:e8:13:e6:17:b0:9f:fc:c3:10:44:
1b:3d:85:52:3a:87:d5:ae:b1:72:88:f6:3d:6a:d1:
76:c6:70:f9:10:cd:2e:b7:9a:85:1d:c9:e7:a8:50:
7b:9f:3d:7e:22:cf:23:85:ae:69:b0:47:5b:0e:d7:
db:f8:ea:06:87:07:4a:32:c3:d0:37:e7:c9:2d:9d:
cf:9f:ff:b6:b0:e7:85:b7:26:1d:a3:c2:7c:e0:61:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3E:EE:6E:7D:CC:A9:6F:5B:05:50:7B:F7:AB:E5:F8:12:07:06:39
X509v3 Authority Key Identifier:
keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:d7:54:e3:62:93:33:87:c0:c4:d2:cf:f2:46:62:50:c7:
b7:a1:e1:1b:4d:59:8a:52:30:a3:60:a6:b3:96:0e:26:c0:4f:
a2:55:30:4d:31:d5:fc:2c:c1:46:8e:d6:a0:97:bb:6e:b8:c0:
94:55:bc:c5:66:1d:8a:76:99:5a:48:90:b1:c3:5a:fc:c0:6c:
b0:21:5d:7c:ef:02:1e:86:1d:c3:ae:ad:a3:50:68:c2:8d:3b:
ec:3c:c7:11:76:3b:06:f4:68:7d:38:e2:8a:75:19:f1:23:55:
9b:d8:32:0d:54:06:d9:8e:fe:2d:88:6d:29:d8:52:a4:4f:fe:
87:4d:65:38:da:88:94:fb:2e:88:22:3b:5b:a2:81:c9:53:b7:
5b:f4:11:0d:a9:83:42:7f:d1:f4:22:d3:be:35:6e:41:21:78:
56:dd:28:47:44:90:ba:f0:9f:76:07:0f:92:0a:9d:00:85:25:
4d:85:db:e8:7c:7e:fc:13:10:06:13:1c:f1:68:04:8d:4b:c7:
a4:8f:31:a7:6a:51:06:4f:b6:90:0d:59:85:7d:d8:8f:90:29:
de:b4:e1:6d:ac:2a:54:84:5f:a8:d7:89:8a:2f:ce:c8:56:e8:
29:12:4e:a5:49:fc:40:b6:7f:25:d6:f4:4c:ed:64:cd:b2:af:
88:af:68:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:23 2025 by rpki-client