Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: HQ8gQXnaekHTDqRusDVHnPn/vje2pivWjkg7jstnRb8=
Subject key identifier: F4:5D:92:CE:82:60:3F:E6:8D:7C:1D:C7:7E:7C:F0:54:62:41:78:A7
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019A511992A77FD2FE25F025D399DA43F52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: BxrcBMCyeO2CxJ4V6wbdgRhqZB6T1SrnCnRE6CPCzTQ=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:92:a7:7f:d2:fe:25:f0:25:d3:99:da:43:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=f45d92ce82603fe68d7c1dc77e7cf054624178a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:6d:6a:6c:56:71:96:4f:4d:33:00:46:98:
a0:f8:77:b7:17:6c:8f:e4:85:ef:80:2e:a8:f5:64:
4d:50:36:a8:c8:8a:c2:12:b0:26:f5:93:7c:1b:df:
d6:2f:31:5b:b2:11:e1:61:e3:68:7e:44:5b:c8:92:
c7:bb:7f:73:5b:5a:13:32:29:f0:c4:7c:70:d4:38:
e8:12:e2:76:f2:b5:b4:76:b7:e7:c3:2d:75:91:f9:
61:16:d3:a5:8f:36:b0:0e:13:ee:4e:68:b3:71:8c:
47:a5:02:15:65:83:40:90:32:ab:f9:99:cc:6c:1c:
4c:a9:a5:73:23:0d:01:0e:00:eb:31:82:93:4a:89:
59:e0:e3:9c:0a:75:80:3c:01:fd:03:da:d6:6b:5b:
b1:a7:30:e4:46:57:cc:2f:70:9b:24:e2:2d:eb:61:
08:6e:ef:55:b7:30:ef:ee:fb:b9:4d:3d:d0:47:e2:
67:ca:5d:7b:ed:14:ee:8b:af:94:1c:db:07:c3:fa:
2e:c7:42:12:3d:54:72:44:97:d8:c4:43:b2:69:d9:
0f:dd:10:27:dd:eb:c6:9b:75:55:10:b6:54:df:5b:
60:62:93:37:50:aa:5c:bf:e7:ce:1a:dc:a1:0a:e4:
6d:44:fc:55:5c:48:ba:b9:0c:ad:b7:4c:2d:cc:c6:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:92:CE:82:60:3F:E6:8D:7C:1D:C7:7E:7C:F0:54:62:41:78:A7
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2b:07:ea:08:08:52:d2:a8:76:63:8e:b6:f1:eb:23:fe:6d:
d5:b7:ad:c5:47:e3:bc:1b:61:84:e7:d0:fd:0a:66:0d:0d:36:
84:fb:d4:0e:c1:44:29:67:a7:f7:11:e3:79:ae:46:6b:89:0a:
83:0a:70:f6:aa:42:35:0f:3c:54:60:b2:f2:a1:30:40:0a:98:
e5:46:6a:0b:91:7b:e2:41:f4:7c:7a:87:1e:e8:bb:05:f9:f4:
91:0e:f3:75:69:92:7d:1d:59:a2:14:44:b7:80:93:75:aa:3e:
28:2f:18:0c:e8:6a:87:e4:6b:e3:34:5a:a6:4c:9a:2c:bd:04:
cf:89:2b:17:45:a8:a7:91:c4:8f:17:f1:60:7e:aa:0a:61:a2:
70:41:ce:9d:db:16:fc:74:fa:72:d6:31:e9:77:df:b2:34:16:
24:19:0b:0d:9b:4f:6a:98:18:84:a4:44:60:70:63:de:79:e7:
9c:d9:a2:e2:51:c9:6e:91:c9:45:73:4e:19:52:8d:dd:c4:1d:
40:b0:18:c2:a9:fc:e6:2c:16:d6:28:6b:4f:bb:23:9c:db:b0:
e5:46:b1:dd:df:0a:a2:2d:36:ce:2f:f9:e3:78:9c:6b:7b:7b:
35:85:1e:7c:66:ae:ab:fb:78:e2:7a:ca:6f:4f:4d:c8:87:78:
68:eb:04:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGZKnf9L+JfAl05naQ/UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1
NmQ0NWUwHhcNMjUxMTA0MjMwMDIxWhcNMjUxMTA1MjMwMDIxWjAzMTEwLwYDVQQD
EyhmNDVkOTJjZTgyNjAzZmU2OGQ3YzFkYzc3ZTdjZjA1NDYyNDE3OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJtamxWcZZPTTMARpig+He3F2yP
5IXvgC6o9WRNUDaoyIrCErAm9ZN8G9/WLzFbshHhYeNofkRbyJLHu39zW1oTMinw
xHxw1DjoEuJ28rW0drfnwy11kflhFtOljzawDhPuTmizcYxHpQIVZYNAkDKr+ZnM
bBxMqaVzIw0BDgDrMYKTSolZ4OOcCnWAPAH9A9rWa1uxpzDkRlfML3CbJOIt62EI
bu9VtzDv7vu5TT3QR+Jnyl177RTui6+UHNsHw/oux0ISPVRyRJfYxEOyadkP3RAn
3evGm3VVELZU31tgYpM3UKpcv+fOGtyhCuRtRPxVXEi6uQytt0wtzMaWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRdks6CYD/mjXwdx3588FRiQXinMB8GA1UdIwQY
MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt
ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1
LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCsH6ggI
UtKodmOOtvHrI/5t1betxUfjvBthhOfQ/QpmDQ02hPvUDsFEKWen9xHjea5Ga4kK
gwpw9qpCNQ88VGCy8qEwQAqY5UZqC5F74kH0fHqHHui7Bfn0kQ7zdWmSfR1ZohRE
t4CTdao+KC8YDOhqh+Rr4zRapkyaLL0Ez4krF0Wop5HEjxfxYH6qCmGicEHOndsW
/HT6ctYx6XffsjQWJBkLDZtPapgYhKREYHBj3nnnnNmi4lHJbpHJRXNOGVKN3cQd
QLAYwqn85iwW1ihrT7sjnNuw5Uax3d8Koi02zi/543ica3t7NYUefGauq/t44nrK
b09NyId4aOsEKg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:21:34 2025 by rpki-client