Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
File: b4t5gQzrxboqUvegjVGW0z6M3Oc.mft (raw, json)
Hash identifier: OCabnkj68knWPBuujd3W/TZwz08U/uH3xoNUNNempDc=
Subject key identifier: AE:12:99:C9:FD:E9:6B:1D:44:95:79:8C:FB:D0:15:09:F8:1C:47:11
Authority key identifier: 6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
Certificate issuer: /CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Certificate serial: 019A70A50A4AB1EB936AB835DAA3F701DF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 02:00:55 +0000
Manifest this update: Tue 11 Nov 2025 02:00:55 +0000
Manifest next update: Wed 12 Nov 2025 02:00:55 +0000
Files and hashes: 1: b4t5gQzrxboqUvegjVGW0z6M3Oc.crl (hash: eXvU7/rUWZSBLd80NNkssRCCoE1AgyuX7EwoI9PK4hE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0a:4a:b1:eb:93:6a:b8:35:da:a3:f7:01:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8b79810cebc5ba2a52f7a08d5196d33e8cdce7
Validity
Not Before: Nov 11 02:00:55 2025 GMT
Not After : Nov 12 02:00:55 2025 GMT
Subject: CN=ae1299c9fde96b1d4495798cfbd01509f81c4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:ea:f9:51:8a:d2:83:3b:0b:27:19:a0:47:
18:80:f9:57:70:4f:95:e7:af:d6:76:d9:a7:c5:93:
c4:4b:df:45:3c:e9:54:85:c0:64:77:17:75:dc:e9:
81:48:4b:a9:6e:db:4d:2d:28:41:5c:b8:ef:f9:1d:
01:79:55:5e:60:08:ec:23:59:2d:9b:dc:68:ec:1c:
65:d1:15:00:38:af:17:95:d2:bf:f1:34:c4:08:81:
0e:c7:3b:e4:05:1e:fb:f8:e1:f2:e1:fc:4d:66:23:
fd:7e:c6:1b:12:1c:6f:7d:81:68:16:4a:7c:08:18:
01:b8:31:dc:59:00:5d:13:51:a5:e3:d3:e4:93:7b:
f5:95:91:00:e5:11:44:80:28:19:2b:d2:83:8c:9f:
d9:12:ab:c2:f8:d8:d6:07:36:4f:73:b2:cc:4d:01:
3e:5f:8d:73:17:72:05:9c:ca:6e:5f:3c:8c:39:77:
b8:66:dd:8a:7b:ab:a5:3c:8d:d9:6f:7f:1d:c8:7e:
83:6c:00:23:16:29:47:e8:64:3b:b1:24:d6:65:0d:
ce:5a:37:a5:0b:51:93:4d:dd:79:9c:ff:e2:46:4e:
63:10:4d:fc:8b:b6:03:b9:26:bb:a5:13:74:b9:26:
11:1e:89:37:5e:02:c6:0e:11:47:7b:a1:48:78:64:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:99:C9:FD:E9:6B:1D:44:95:79:8C:FB:D0:15:09:F8:1C:47:11
X509v3 Authority Key Identifier:
keyid:6F:8B:79:81:0C:EB:C5:BA:2A:52:F7:A0:8D:51:96:D3:3E:8C:DC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4t5gQzrxboqUvegjVGW0z6M3Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de6759-0919-4e5c-8aca-44355328b7b0/1/b4t5gQzrxboqUvegjVGW0z6M3Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:7c:eb:c4:0b:e2:70:39:d6:be:09:25:df:9d:1d:cf:2d:
0d:48:12:3a:b2:7b:2a:3b:5d:7a:a9:ce:48:d2:6e:15:68:d7:
c0:d4:92:6b:5f:b7:95:47:35:60:0a:f9:ad:ef:27:0f:8f:5a:
bd:41:2e:3c:b5:bd:27:86:5c:31:a8:c2:e2:c6:6b:e4:de:b6:
ea:56:5b:dd:f7:e5:6c:cc:a1:fd:95:95:41:c5:9f:cb:a4:61:
26:6e:6b:cd:df:9b:05:5e:69:aa:2f:24:58:18:c4:cd:9d:cd:
3b:24:a3:71:54:62:90:f4:0d:07:b9:ce:95:44:a8:e9:93:fe:
6a:04:d8:7e:1b:a8:14:78:02:01:bf:26:5c:87:d2:e7:9e:13:
cb:20:c1:e1:e4:90:ea:34:2d:f4:0e:3c:01:22:ac:9d:42:89:
a8:5e:5a:5f:75:54:ef:a0:74:c7:a2:3a:50:9f:36:29:37:e3:
32:8f:87:e9:52:b8:b0:a9:10:29:4c:20:71:d6:ed:94:1e:e5:
6c:5d:ca:fe:41:e3:92:99:4d:86:f9:d2:da:3b:c9:c3:79:03:
ed:78:cf:21:8f:d8:d6:47:57:25:b9:5f:1f:42:db:d9:eb:25:
f2:7e:0c:33:11:d4:b6:6c:f3:e3:16:25:c8:f4:45:3c:43:2d:
1f:4d:67:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client