Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: s6rTqvJu1DamKz0pAefEQvDNSZCIDUWt7whoTuOZP6k=
Subject key identifier: 54:89:11:B2:68:5A:8D:FD:10:CE:6B:B4:36:0C:42:AA:CF:D5:D8:05
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019A70DC120CD3054D6273A2CDAE56B0EBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: TceTUWbePf77qIlARgWaHjgw8Ilkhn1ehyx5TB4CGCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:12:0c:d3:05:4d:62:73:a2:cd:ae:56:b0:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=548911b2685a8dfd10ce6bb4360c42aacfd5d805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:58:c1:df:76:77:d0:9b:31:70:9d:28:68:
51:85:8d:78:c6:d1:81:6f:1f:70:ce:98:99:1a:6c:
5c:3c:56:de:dc:12:d2:33:d3:f5:76:0f:7c:97:0e:
c4:5c:0f:59:19:2b:d8:6b:36:7e:9a:c1:26:e7:af:
1c:55:8c:da:4f:66:9c:71:d3:67:14:f3:0c:2a:a1:
44:69:57:98:ca:96:57:b9:66:17:65:b4:5b:b4:67:
d0:71:c7:9e:26:50:fb:ae:d5:e0:60:c3:5f:e2:66:
b9:1d:b0:9d:d6:d0:f7:ec:39:d9:5f:47:ed:28:5f:
a3:30:ad:fb:e0:cd:ac:d6:6c:fd:02:ab:a6:b5:19:
28:38:b4:68:75:07:b6:74:07:74:72:28:bb:3b:d4:
14:67:88:aa:d5:2c:67:31:7f:c0:86:1f:6f:34:4d:
c8:73:f3:fe:cf:aa:0a:da:af:d9:f4:ec:d8:c7:46:
12:a7:76:27:9d:af:20:2d:a4:df:9b:e5:13:52:b7:
a1:ad:97:06:7d:60:0b:c3:9d:7b:9e:ad:95:7c:28:
47:b2:9f:7b:d4:b5:32:41:1d:c2:e6:be:45:d8:13:
0d:be:43:9e:da:a9:3c:b8:65:a4:bd:bc:1c:52:ec:
6d:6e:9a:44:15:1d:26:c2:e7:9a:3f:66:04:7c:6c:
7b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:11:B2:68:5A:8D:FD:10:CE:6B:B4:36:0C:42:AA:CF:D5:D8:05
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:62:6c:50:a0:bb:66:34:f7:93:c2:fd:52:fc:3f:e4:49:0f:
02:28:03:19:4f:a4:ea:d5:3c:c1:79:32:c3:24:97:0e:e4:a1:
97:f7:43:b8:b6:57:24:74:8b:cd:0e:73:de:e2:30:87:7a:38:
7a:fe:fd:6d:4f:43:8f:e8:de:f1:1c:18:21:cf:a2:d3:e2:57:
72:9b:6d:b6:ff:4b:17:a2:83:e3:ff:b2:5c:17:4a:8c:4b:1d:
a3:98:59:72:6e:7d:b3:81:b3:88:95:9a:c6:12:6e:fa:d8:60:
66:8c:34:e1:cf:89:1a:1b:16:b2:f1:fe:9d:65:88:33:e0:a1:
94:fa:1d:f3:c6:3f:66:71:b4:0b:53:21:8c:cf:71:2c:32:ab:
ec:93:a8:17:7f:da:b4:c8:4c:e3:05:74:01:8d:ca:18:99:01:
8a:8f:ce:91:19:29:a0:0f:fe:52:89:a4:cf:c9:a6:5b:84:35:
7c:5a:c0:aa:aa:16:8a:49:b3:e2:3d:95:ee:ed:1d:43:57:c4:
b3:92:b2:91:57:e8:dc:b3:ba:b7:08:10:4d:2c:b3:e8:22:27:
d0:7d:58:d5:a6:6f:0a:ab:58:25:8a:d7:df:91:97:e6:a1:4c:
55:90:30:98:8e:39:eb:c9:a4:65:52:06:64:95:82:61:9e:7d:
1b:15:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client