Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: r+9PC7qZdp4Q+mS2sl9QoiwlQdIfBxARTTFpUpd776g=
Subject key identifier: 27:1F:2D:F7:05:41:D8:06:19:F5:3B:F4:50:80:B0:68:73:30:DA:60
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019A71EECD6C051EDD826C3D7C9432E762D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1442
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: bVcP+VFfjXkgzO5oCSV8G8Mt523Btqity9u9qlBt9fU=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cd:6c:05:1e:dd:82:6c:3d:7c:94:32:e7:62:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=271f2df70541d80619f53bf45080b0687330da60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:f9:54:ce:e1:cd:c9:ad:53:c2:b1:a6:df:
fe:49:6c:06:e7:de:5d:82:d8:86:50:73:e3:fc:a9:
3d:8b:6f:0f:28:dd:de:ea:bc:5e:61:35:02:15:07:
c2:7b:49:a5:f4:7c:1c:27:39:0f:ca:93:fc:84:93:
5d:b5:b4:dc:bb:73:58:32:f9:38:b4:aa:b5:57:66:
fa:93:7a:f0:21:34:02:8e:25:44:53:18:38:14:63:
0f:b3:54:41:be:07:a8:00:43:ae:1e:79:3c:b9:02:
71:ca:5e:39:1e:22:92:3d:5d:a2:96:f2:b8:b7:0e:
d4:ff:dc:1a:12:12:d7:bd:88:11:4e:ae:51:e4:1a:
c4:fe:00:40:ab:b5:81:04:b3:d7:dd:ea:81:a4:92:
a4:91:a0:41:39:1c:86:58:4b:42:bc:1c:e9:c8:e1:
e8:f3:73:32:3f:32:8c:01:68:96:3e:6a:c5:79:0f:
3c:31:df:be:72:85:96:8b:8f:ef:1c:d5:4d:69:a8:
7a:bd:85:c2:b4:8d:d8:07:9f:fb:91:ab:be:9c:27:
01:17:42:c5:29:39:43:e0:5d:a5:33:78:25:0e:48:
bf:f2:e4:e2:6b:e2:02:b6:f2:79:b7:fd:08:77:1b:
18:73:cb:63:b3:e3:16:c1:94:a4:3b:54:3b:97:e2:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:2D:F7:05:41:D8:06:19:F5:3B:F4:50:80:B0:68:73:30:DA:60
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:0e:f8:3d:fa:f4:91:38:5b:4b:34:37:11:ef:d9:d7:82:eb:
6d:af:6f:0d:f9:16:0d:28:b1:cc:cd:42:68:f0:ad:02:62:33:
5d:fe:52:18:6e:f2:5c:88:ee:27:8f:94:fa:08:f3:e0:fa:67:
ce:6e:b6:3d:3b:22:38:95:fc:99:b3:12:25:9e:ce:59:38:64:
4d:81:97:94:cd:17:b6:7f:65:e5:24:c7:b5:fa:a2:4b:df:c4:
6c:9e:82:38:3a:6d:db:8f:b1:ce:4c:1a:ce:f3:a7:30:ec:9c:
7d:56:a6:5c:98:bf:90:8a:23:68:81:78:21:fe:31:96:15:a9:
ed:05:d6:19:da:d6:cd:84:fb:2d:b3:e0:a5:7e:bf:01:19:1a:
81:5a:f6:1d:58:25:df:e2:f4:bf:33:74:72:1a:d0:40:dc:d0:
8e:e3:88:dc:c4:96:59:12:45:e1:62:79:5e:5f:de:95:45:66:
bb:21:42:ef:94:b5:7b:8b:58:f3:11:a1:74:bc:b5:f2:03:fe:
0b:ed:f1:bf:10:45:a5:2a:de:4a:16:b4:f5:52:64:b0:4f:79:
f2:28:7b:d6:00:83:32:7a:12:f8:2f:03:e8:18:54:26:ce:d0:
46:9c:aa:75:e8:be:44:d0:2f:c8:57:85:2b:4d:0b:f0:6b:72:
21:35:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client