Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: FHKFPhUFXCh7iuM3TWgEXdFUnp5KK//z/w32daZy1K4=
Subject key identifier: 0A:B6:B1:08:5F:2A:CD:3F:38:68:FA:B8:E7:55:8E:7B:1C:07:64:7A
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01995040BFC070B972036369D0CEE5EE42EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 168B
Signing time: Tue 16 Sep 2025 02:00:44 +0000
Manifest this update: Tue 16 Sep 2025 02:00:44 +0000
Manifest next update: Wed 17 Sep 2025 02:00:44 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: Tok/u5PVm3+hOzjUsac6FJTiWA3Eh4wZVnoV3l3H8FU=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:40:bf:c0:70:b9:72:03:63:69:d0:ce:e5:ee:42:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Sep 16 02:00:44 2025 GMT
Not After : Sep 17 02:00:44 2025 GMT
Subject: CN=0ab6b1085f2acd3f3868fab8e7558e7b1c07647a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:d4:68:a7:1b:a0:87:54:46:64:a1:d0:6b:
8d:f0:8a:af:4e:c4:1d:85:c2:84:9f:ee:87:2d:fc:
8e:45:55:75:bf:e7:1a:e2:5b:a7:f8:ca:a5:f0:46:
82:5d:31:2a:61:41:25:9f:d9:17:02:9d:91:66:8a:
9d:9f:c7:42:84:33:86:2f:55:6c:92:80:d0:13:64:
5f:2d:4e:6d:d1:a0:34:5b:21:df:42:b3:f0:be:82:
16:7f:0d:cb:9c:f4:a5:81:b5:f7:69:9b:c2:0f:58:
f0:33:44:12:86:0e:58:48:26:93:37:8c:44:98:4d:
92:86:44:35:6a:f4:b6:68:6f:e6:38:3d:e0:6f:18:
c5:87:18:15:48:0b:a9:59:ac:bd:97:61:ae:bd:61:
fa:ae:96:2a:ec:c6:a9:e6:54:83:7f:27:c2:83:12:
b1:84:e2:9e:93:8d:45:19:9d:9d:11:d1:0a:03:3a:
8f:87:07:ed:97:5f:91:cd:36:06:90:45:e2:18:77:
ef:18:5a:94:58:49:df:31:44:ff:8c:ca:db:08:37:
55:f8:07:8a:a5:01:d6:02:3d:98:6e:64:42:4d:4f:
dd:4c:3e:e7:11:8d:48:44:e8:a1:6f:1a:5b:d2:a5:
38:46:b5:a6:79:57:2e:78:60:bd:0c:00:5c:a2:ce:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:B1:08:5F:2A:CD:3F:38:68:FA:B8:E7:55:8E:7B:1C:07:64:7A
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:85:fb:37:40:45:80:3f:9d:4c:7c:48:82:5a:b2:70:ac:
74:ad:af:5b:3c:02:8e:c5:6e:59:0c:dd:2d:fc:79:96:ef:3a:
de:2a:60:18:a9:39:5f:2f:a8:78:94:16:78:76:bf:57:29:6d:
e1:15:b8:52:e1:7e:b1:8d:4b:8a:1c:74:88:ea:7e:31:75:23:
27:b3:dd:c9:e0:30:4c:7b:7c:b2:75:62:6e:1a:da:ab:e6:af:
a7:58:da:81:07:df:25:39:77:88:df:54:3d:29:44:56:88:47:
d0:4e:2e:d3:6d:0f:89:0a:69:d2:e5:3f:3b:77:ca:7e:64:80:
1f:9d:3c:41:42:32:fe:fc:fa:d4:fb:9e:c6:f3:c3:ca:4d:df:
64:ab:0a:be:f9:c3:5f:c8:2c:01:f0:70:e5:c1:52:77:f2:f3:
d6:6a:21:ed:83:95:54:74:03:ac:13:f3:7f:66:25:c2:2d:59:
b2:87:7e:88:d0:f4:7f:45:9a:26:8b:60:42:b2:66:8d:7a:07:
1a:5a:e6:23:93:94:f6:b1:a7:9c:5a:48:a0:d7:46:f4:57:e5:
f0:85:4d:5b:ad:4e:82:f1:df:43:80:00:8b:ae:72:fc:3f:ee:
2e:3a:b6:71:8f:9c:23:af:3a:ec:e0:d9:08:34:40:16:6e:4b:
23:0c:f8:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlQQL/AcLlyA2Np0M7l7kLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1
NmQ0NWUwHhcNMjUwOTE2MDIwMDQ0WhcNMjUwOTE3MDIwMDQ0WjAzMTEwLwYDVQQD
EygwYWI2YjEwODVmMmFjZDNmMzg2OGZhYjhlNzU1OGU3YjFjMDc2NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuXUaKcboIdURmSh0GuN8IqvTsQd
hcKEn+6HLfyORVV1v+ca4lun+Mql8EaCXTEqYUEln9kXAp2RZoqdn8dChDOGL1Vs
koDQE2RfLU5t0aA0WyHfQrPwvoIWfw3LnPSlgbX3aZvCD1jwM0QShg5YSCaTN4xE
mE2ShkQ1avS2aG/mOD3gbxjFhxgVSAupWay9l2GuvWH6rpYq7Map5lSDfyfCgxKx
hOKek41FGZ2dEdEKAzqPhwftl1+RzTYGkEXiGHfvGFqUWEnfMUT/jMrbCDdV+AeK
pQHWAj2YbmRCTU/dTD7nEY1IROihbxpb0qU4RrWmeVcueGC9DABcos5CrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq2sQhfKs0/OGj6uOdVjnscB2R6MB8GA1UdIwQY
MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt
ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1
LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD6F+zdA
RYA/nUx8SIJasnCsdK2vWzwCjsVuWQzdLfx5lu863ipgGKk5Xy+oeJQWeHa/Vylt
4RW4UuF+sY1Lihx0iOp+MXUjJ7PdyeAwTHt8snVibhraq+avp1jagQffJTl3iN9U
PSlEVohH0E4u020PiQpp0uU/O3fKfmSAH508QUIy/vz61PuexvPDyk3fZKsKvvnD
X8gsAfBw5cFSd/Lz1moh7YOVVHQDrBPzf2Ylwi1Zsod+iND0f0WaJotgQrJmjXoH
GlrmI5OU9rGnnFpIoNdG9Ffl8IVNW61OgvHfQ4AAi65y/D/uLjq2cY+cI6867ODZ
CDRAFm5LIwz4zA==
-----END CERTIFICATE-----
Generated at Tue Sep 16 07:54:19 2025 by rpki-client