Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: hsaLy1Y100NEsnJjCUCWrc917e6HMBapuzTmX8AbP6I=
Subject key identifier: 34:D9:8F:FF:DD:74:26:62:BA:21:22:02:A3:99:71:B0:9F:65:BE:65
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019A71B7E923AEE7C0AC220993B9CCE568A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: kBkpEmJ7tS/2WzN4Sp4VETsDehOI09qkEe+Hk/0gkJY=)
2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:23:ae:e7:c0:ac:22:09:93:b9:cc:e5:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=34d98fffdd742662ba212202a39971b09f65be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:fb:64:4e:ed:a6:67:b3:bf:33:f7:2a:50:
c3:27:46:63:86:27:6d:5c:df:fd:24:62:f4:dc:21:
54:6a:47:08:82:0f:b7:9c:bd:e0:5f:7b:7b:f9:a1:
20:86:b4:1d:d1:95:8d:90:68:65:cc:63:c8:d6:6d:
40:ad:de:9b:5d:4b:08:40:8a:9d:3e:0c:08:25:06:
77:75:1a:3e:09:e5:47:d1:e8:70:e0:f2:07:d7:75:
14:72:35:d7:03:5d:e3:a1:0a:a6:d3:3d:d9:01:e5:
d6:a2:8d:3b:13:60:f0:4e:46:b9:29:9d:ca:3d:b5:
21:26:a4:b2:51:25:aa:79:d8:cb:db:d6:46:a4:67:
6a:47:73:0a:63:1f:52:3f:90:2d:29:6d:2b:97:f0:
0d:33:9e:ca:ef:f0:ff:21:4d:d7:da:66:dd:58:a0:
bc:89:15:3c:64:94:e5:98:56:01:38:a8:aa:e6:7e:
d2:33:7d:f2:be:82:99:64:b5:e8:f7:5d:de:31:e1:
28:e7:4d:01:41:4a:d1:73:21:c6:14:a2:5a:1c:f7:
d4:ef:38:5b:34:e1:3c:9a:e5:b3:25:07:f8:e6:99:
40:91:92:e0:12:71:3e:79:b0:ed:97:a2:2b:92:c7:
3a:5b:65:85:5a:31:3a:8c:d8:73:98:93:90:12:63:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:8F:FF:DD:74:26:62:BA:21:22:02:A3:99:71:B0:9F:65:BE:65
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:0e:8f:20:be:73:0d:33:08:f2:6f:4c:88:b9:a9:8c:d9:
95:4e:19:3b:9d:59:f4:1e:e4:e7:ae:e4:45:a8:bd:b7:ac:22:
ea:6e:b7:5a:eb:67:c4:d8:49:5d:d0:08:38:b3:5a:57:03:75:
28:ff:e5:de:ff:2e:06:56:53:36:21:88:58:fa:de:d1:1f:75:
7e:de:3a:e1:bf:2f:d2:08:e9:4c:fb:b2:96:7a:dd:a8:5e:09:
49:90:84:06:0c:1a:3c:2d:15:cb:17:ed:23:90:4e:14:d8:d6:
a7:83:8f:1e:0a:69:17:ed:ad:52:6e:09:bd:b7:04:6a:0a:82:
5a:7f:ba:40:99:9d:08:09:3d:5a:44:9a:75:9f:e3:dc:66:d2:
c1:75:76:a4:af:45:3b:1a:c8:33:cc:d2:9c:7e:3b:17:d3:75:
72:5f:fd:89:88:57:8d:7a:3e:17:04:74:1a:6d:a2:05:6e:0e:
d1:37:bc:02:9b:49:61:30:d3:55:bf:ec:9c:1d:70:cc:3c:65:
ed:e3:0d:03:a6:83:2f:cd:af:ae:a0:c3:6a:98:b2:93:80:d0:
40:57:2a:1b:c9:f4:f4:40:00:88:0f:38:72:7e:20:b8:6e:ac:
1c:30:0a:c3:23:3d:f9:31:95:f0:32:b0:b5:3e:ec:2b:5d:39:
f5:55:48:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+kjrufArCIJk7nM5WihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2VjOTcyZjk3NjBiODU1ZjFkNDM5MGJjMzc1YjNmYTNk
NDExYjYwHhcNMjUxMTExMDcwMTA5WhcNMjUxMTEyMDcwMTA5WjAzMTEwLwYDVQQD
EygzNGQ5OGZmZmRkNzQyNjYyYmEyMTIyMDJhMzk5NzFiMDlmNjViZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCb7ZE7tpmezvzP3KlDDJ0Zjhidt
XN/9JGL03CFUakcIgg+3nL3gX3t7+aEghrQd0ZWNkGhlzGPI1m1Ard6bXUsIQIqd
PgwIJQZ3dRo+CeVH0ehw4PIH13UUcjXXA13joQqm0z3ZAeXWoo07E2DwTka5KZ3K
PbUhJqSyUSWqedjL29ZGpGdqR3MKYx9SP5AtKW0rl/ANM57K7/D/IU3X2mbdWKC8
iRU8ZJTlmFYBOKiq5n7SM33yvoKZZLXo913eMeEo500BQUrRcyHGFKJaHPfU7zhb
NOE8muWzJQf45plAkZLgEnE+ebDtl6Irksc6W2WFWjE6jNhzmJOQEmOg4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTZj//ddCZiuiEiAqOZcbCfZb5lMB8GA1UdIwQY
MBaAFG4+yXL5dguFXx1DkLw3Wz+j1BG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAt
MTQ1MTJlN2U1OWVmLzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85ZGFjOWMtODVjNi00NTcyLWFkNjAtMTQ1MTJlN2U1OWVm
LzEvYmo3SmN2bDJDNFZmSFVPUXZEZGJQNlBVRWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZycOjyC+
cw0zCPJvTIi5qYzZlU4ZO51Z9B7k567kRai9t6wi6m63WutnxNhJXdAIOLNaVwN1
KP/l3v8uBlZTNiGIWPre0R91ft464b8v0gjpTPuylnrdqF4JSZCEBgwaPC0Vyxft
I5BOFNjWp4OPHgppF+2tUm4JvbcEagqCWn+6QJmdCAk9WkSadZ/j3GbSwXV2pK9F
OxrIM8zSnH47F9N1cl/9iYhXjXo+FwR0Gm2iBW4O0Te8AptJYTDTVb/snB1wzDxl
7eMNA6aDL82vrqDDapiyk4DQQFcqG8n09EAAiA84cn4guG6sHDAKwyM9+TGV8DKw
tT7sK1059VVIdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client