Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: OOVOQEZ+JQnQ5dDb+1KA+9gJG09OD6yNACgBxj91S6A=
Subject key identifier: D8:0E:8A:6C:06:69:69:2E:99:B5:6C:CE:DA:52:1D:D1:2D:07:5A:0B
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019A21ADB6915E64CFFC5298033F8E41467D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0850
Signing time: Sun 26 Oct 2025 18:00:23 +0000
Manifest this update: Sun 26 Oct 2025 18:00:23 +0000
Manifest next update: Mon 27 Oct 2025 18:00:23 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: YgVNR51H7vm/0FQ37HbqP2unVNAgQEY0yLZWIE7dpkw=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:b6:91:5e:64:cf:fc:52:98:03:3f:8e:41:46:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Oct 26 18:00:23 2025 GMT
Not After : Oct 27 18:00:23 2025 GMT
Subject: CN=d80e8a6c0669692e99b56cceda521dd12d075a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:db:f4:ea:16:b7:83:2c:79:2c:4a:06:f5:
a9:b5:72:d9:2a:bd:23:7e:2b:e6:e7:8b:e4:0f:33:
be:b0:80:3a:18:1e:12:53:26:40:ca:36:c0:d3:d2:
cd:4a:6f:90:66:94:30:0e:1e:d6:17:cc:77:97:9b:
5e:97:1d:e7:b6:12:d7:41:d1:dd:a5:ce:27:d7:4a:
7b:ab:5b:7c:f6:32:a2:a0:5a:87:d3:c6:21:3f:a4:
f3:b8:a7:c1:f8:38:09:53:d6:e9:1b:e1:c6:a6:0e:
61:55:1f:d2:0e:6c:39:8b:a4:29:05:0f:f9:1d:2e:
cc:74:38:0f:70:b0:17:ad:ea:56:c9:5b:b5:2a:e0:
ab:c8:b3:aa:34:fd:42:7e:3a:8c:07:c2:a3:02:47:
dd:63:d8:94:03:0b:55:81:69:63:c8:64:de:17:0a:
4b:36:09:57:05:d3:86:8c:43:d3:40:55:0b:67:40:
c0:ce:3e:80:f7:b3:45:44:9e:74:d8:18:7d:4f:de:
90:86:f0:05:67:13:f1:f5:6d:8e:4a:13:9a:33:bb:
32:c1:f0:03:0e:ed:8a:0c:ec:7b:d5:1c:75:85:da:
f6:96:10:96:a9:52:3e:60:c5:a5:1c:5c:c8:c2:94:
01:60:81:e1:7d:90:15:de:46:d5:9c:c3:f2:2e:27:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:8A:6C:06:69:69:2E:99:B5:6C:CE:DA:52:1D:D1:2D:07:5A:0B
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:6f:c5:87:b8:69:3b:cc:b1:71:a7:69:04:40:f6:71:4e:
a8:1a:51:c0:cf:68:c9:df:b6:d3:bf:80:60:f8:ea:ae:00:8b:
3d:30:b1:ad:c3:61:df:c7:66:b4:24:ee:8f:a0:15:3c:4d:33:
7c:f2:1c:0e:b9:18:bc:0d:12:94:00:66:97:15:88:a9:64:14:
85:51:05:a6:94:9e:54:90:fc:0d:2e:b4:a9:06:c7:a2:56:f1:
60:8b:6f:96:7d:58:13:2a:65:76:e8:ed:e3:28:6c:09:84:5f:
70:81:f6:14:74:17:d1:8f:e3:9c:05:0b:1a:01:20:c6:8e:7a:
39:12:29:0c:f8:ce:2c:0a:6e:79:93:03:22:a2:eb:fc:50:7d:
29:76:b0:ae:51:b2:27:c9:e5:8e:30:67:4f:c0:e1:cf:57:8a:
ca:ac:e3:89:2c:41:fa:5b:c1:4b:b7:a7:f2:3d:02:aa:ae:20:
0b:11:8c:a7:32:de:8b:8a:f7:5f:17:f5:eb:69:a8:75:41:d0:
71:fe:9f:6b:e0:e3:9b:a0:17:25:bd:6b:22:7d:85:09:28:c8:
38:46:45:40:fb:ab:2b:23:a0:4c:ac:49:42:24:b1:b0:c5:c4:
46:2f:d7:70:b6:e2:a8:15:6b:3e:ee:c7:c7:10:45:17:d0:93:
94:e3:2f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:34:39 2025 by rpki-client