Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File: b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier: uxaSoDl0AnqbBaMnXsL5Z5gTVL5wldZ/zNVuIkvihxA=
Subject key identifier: 72:3F:1F:58:DC:B1:48:1B:9B:26:C2:75:28:B8:B4:75:B0:FF:87:B1
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019A7112FB897D2B0F12468DE1491B61B167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number: 112F
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: NXG+cn6ND/r1yOpA/ztxrUdnk0Q7MPc74tlQ0KH4iqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fb:89:7d:2b:0f:12:46:8d:e1:49:1b:61:b1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=723f1f58dcb1481b9b26c27528b8b475b0ff87b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:74:65:e1:da:5e:37:c4:5a:34:d7:97:6d:5a:
4c:2d:25:c0:27:9c:72:20:2b:ed:f2:5a:4e:fd:c9:
fd:c1:d1:7c:b2:26:10:0d:1a:b1:7f:c6:0c:95:8f:
a3:f1:83:b5:c2:99:af:7c:9e:05:1c:12:90:74:a6:
8d:51:fe:87:5b:52:64:e1:53:95:8c:81:91:e6:de:
73:11:d7:2d:e8:4c:48:71:c0:15:22:68:1f:61:5a:
f9:3a:5b:2f:0d:6b:96:64:ea:f4:11:8d:2c:01:be:
82:26:e1:85:6f:af:55:7e:3b:b3:11:4f:c9:d7:b6:
16:2c:24:7f:4d:36:d5:16:cd:71:d9:ee:f0:c9:3c:
21:07:d6:e0:ca:1a:3f:d5:d8:dc:57:bd:6e:d3:62:
e9:56:c5:cf:30:76:a4:e4:f4:13:ee:5a:0c:29:57:
ee:88:d4:33:58:65:bc:2c:c3:f2:ca:78:99:89:88:
9b:15:6b:7c:e3:0a:e6:1e:12:dc:f0:d0:d8:7c:71:
9f:6e:bd:30:d5:1f:96:6d:eb:6f:fb:37:0e:65:61:
fe:41:66:66:2f:e6:9d:de:8f:a8:47:1a:11:48:30:
0b:a4:02:83:6b:2f:bf:47:3b:0b:d7:3c:76:d4:f7:
80:51:08:c7:09:6e:8b:da:b2:d4:09:ed:f6:fd:dc:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3F:1F:58:DC:B1:48:1B:9B:26:C2:75:28:B8:B4:75:B0:FF:87:B1
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b0:f0:e5:8e:c9:30:81:a7:ff:25:fe:b6:07:12:6f:6c:86:
3b:d7:db:7b:3e:28:14:83:68:1d:1f:1f:7d:56:c9:15:f5:39:
6b:08:e0:04:46:2e:40:91:2f:74:06:ef:b0:3c:f8:47:8a:fd:
f9:1e:52:a8:92:17:cc:d7:67:f1:95:1c:5b:40:e9:8b:e0:a0:
a5:fc:77:c6:a9:6b:c0:86:47:88:fb:88:cc:db:61:3b:67:bb:
6b:c6:1c:de:87:8a:77:25:21:3a:53:62:3f:e9:2b:00:f6:36:
c2:93:51:d2:4d:d4:9e:9e:7a:b8:ff:f0:02:93:6c:88:b1:e1:
a2:df:dd:34:03:a8:7f:af:ee:80:87:3e:ea:b1:7d:a3:7d:b7:
5b:64:2c:d3:aa:ed:cf:89:71:b9:3c:90:6a:de:d9:5f:07:51:
1c:e4:f2:58:1b:3c:84:cc:41:63:58:f9:46:87:dd:be:33:61:
82:08:7c:2e:87:36:53:cf:b4:a6:27:f1:67:aa:88:57:b4:db:
f4:ce:4a:31:54:40:3a:38:38:72:99:99:49:b0:7c:fc:52:70:
40:a6:9f:59:b2:c0:74:eb:67:05:39:a2:48:cb:00:6a:50:9f:
c1:44:cc:8c:bd:01:33:8a:b7:67:2b:4b:9c:70:32:75:3e:d0:
3d:8d:41:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client