Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File: B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier: HM0EPkPbzVISzw+hlHpFCeeHVRwt56qh5cVPRehd/qk=
Subject key identifier: 40:F7:D3:88:D7:C9:69:AC:F7:E3:09:6C:22:12:05:1E:DF:27:9A:4C
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer: /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial: 019A72934A366B6BA417CF416E50F4B02278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:00:46 +0000
Manifest this update: Tue 11 Nov 2025 11:00:46 +0000
Manifest next update: Wed 12 Nov 2025 11:00:46 +0000
Files and hashes: 1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: HCeakzf+CwT5oiLMEgo8h66USWDyLyVzeQQc6AadMlc=)
2: LDJYdCgEn8OHisMoTT81wCOejnM.roa (hash: eRVNCz8Pk6p2554eo6icsKHVU7mmhCMFdPhBfpeYBU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4a:36:6b:6b:a4:17:cf:41:6e:50:f4:b0:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Validity
Not Before: Nov 11 11:00:46 2025 GMT
Not After : Nov 12 11:00:46 2025 GMT
Subject: CN=40f7d388d7c969acf7e3096c2212051edf279a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:2d:65:a4:0c:f1:8c:7b:bd:44:89:40:ab:
b7:97:b9:6f:42:91:58:43:52:8a:9c:35:26:6f:2f:
8d:15:b6:71:86:7d:39:c3:0e:7b:17:21:c6:eb:82:
6e:d9:f9:92:2b:70:7e:88:0b:81:6c:74:60:6d:31:
17:7d:a8:1f:cb:23:25:0c:c6:d9:af:8a:f8:a8:ef:
b2:69:c9:41:4f:de:a4:ec:5a:0b:ea:14:5f:c7:0d:
c2:ef:6d:fa:5b:74:e3:85:51:b0:fe:b1:cd:6f:89:
dc:3d:9e:b8:46:5d:a6:c1:50:d5:c1:c3:7a:8f:87:
e1:51:39:4e:83:d5:b3:64:4a:b8:f3:12:09:8f:35:
74:39:71:a5:69:a2:05:9d:c7:7f:88:2c:68:3e:57:
41:62:10:cf:75:66:ce:47:a1:ee:a9:df:f1:03:ee:
07:e7:58:a0:bf:59:98:5d:09:1e:9e:7b:51:da:a1:
ad:ac:87:5d:08:46:72:55:36:28:59:78:7b:04:1e:
2b:08:2e:f2:67:58:76:7e:1b:b1:fd:e5:af:40:f1:
54:60:cc:06:d5:8c:32:f6:80:ae:bd:0e:43:6f:5b:
12:b3:71:30:9a:36:9c:7b:f9:f4:8d:f8:27:86:a1:
1a:58:c9:2f:b4:f2:f3:d6:3d:d6:eb:89:4c:4a:ba:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:D3:88:D7:C9:69:AC:F7:E3:09:6C:22:12:05:1E:DF:27:9A:4C
X509v3 Authority Key Identifier:
keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:87:de:7d:fc:bf:1b:0f:ce:ad:8b:cb:fb:91:75:da:ca:d1:
cd:99:4a:0e:7a:21:1d:a9:f8:42:0a:2a:5a:dd:c5:ac:78:fa:
b3:07:7f:f0:81:4a:0b:03:86:13:ad:3d:8b:c2:f9:1d:14:81:
70:e9:1c:9c:48:e6:55:75:ca:d5:2c:6f:b5:0f:55:23:66:6a:
9c:b8:9d:af:eb:ce:06:d7:a3:8c:03:1f:05:3c:8b:ee:00:90:
d5:e5:11:25:69:40:19:b3:2f:9f:52:ee:16:1c:a3:c9:3a:2d:
fe:c2:40:da:f4:24:62:17:de:36:d8:9f:8a:7a:da:e2:95:de:
d7:b4:78:bd:f2:89:1a:c5:7a:e0:cf:42:e2:92:7e:8c:48:0a:
95:35:07:46:24:e8:a2:95:c3:f9:de:df:c9:1f:0b:01:37:8f:
41:01:f3:8b:e8:1e:d0:79:a6:d3:ef:1e:97:4e:c9:8d:77:ed:
65:99:34:5d:8a:54:3a:39:d4:7c:ce:89:a8:49:af:e8:75:04:
dd:38:09:f7:f7:88:8d:e1:de:ec:07:62:4e:a1:48:96:25:a0:
c3:82:f9:3e:0e:39:3c:21:f5:8a:52:f0:89:31:23:c3:52:1d:
d6:47:29:50:df:94:1c:7e:dc:92:a5:e7:01:b8:5d:10:23:b1:
e8:51:1e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client