Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: Gka6W3yCCjJLJGEI75OOaqBF6PRAiBJJwYtikxMsCYo=
Subject key identifier: 58:0D:09:4B:13:88:03:32:10:3E:10:D5:FF:4E:1B:C4:DA:CF:E9:07
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019A72260D476573A6FE202DDCD13729E139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=)
2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: 7AzC3XJMgn0++1dV1JDsEYULnx6RlOOiGg+kKlf+yUU=)
3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=)
4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0d:47:65:73:a6:fe:20:2d:dc:d1:37:29:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=580d094b13880332103e10d5ff4e1bc4dacfe907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:e6:ff:12:ac:a1:28:29:5e:14:ff:fe:c6:
6f:68:e5:cf:6d:eb:07:11:c9:f3:cb:95:dc:0e:36:
5a:02:dc:7a:7e:b8:02:44:04:65:ed:22:98:8d:c0:
76:90:6b:0a:05:e1:a7:f1:bb:dd:22:57:27:66:f2:
f5:46:5a:ca:5a:bb:46:81:bb:15:11:3e:02:66:21:
21:77:3e:a0:03:79:f3:22:ae:7c:06:92:3c:c1:4c:
ce:63:7f:11:b4:3c:00:21:87:a3:f9:a7:7e:bb:8a:
d4:84:df:bf:81:0e:e8:a0:44:b6:56:bf:f6:89:f2:
46:e8:76:b4:ce:1a:e7:eb:1a:a4:f4:12:b9:a2:1d:
86:7c:60:3b:4a:88:fc:ea:d7:d9:8d:0a:0e:49:f2:
f6:d7:a6:6f:a8:f4:af:f4:61:a8:de:ec:9c:01:1a:
19:08:18:9e:d3:93:1c:42:42:40:38:7d:fe:79:f2:
13:53:6d:e3:aa:cb:3c:57:58:78:8b:ef:b7:1a:0a:
a1:de:03:34:97:36:b4:8f:b9:60:f7:c8:5b:25:29:
9a:87:76:4b:6d:0d:42:2d:e6:44:11:12:c3:e0:1d:
ec:62:8c:ff:28:1c:7a:c5:16:20:10:a6:84:83:07:
ef:10:38:ac:66:65:99:be:42:ff:e4:1d:39:6d:ac:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0D:09:4B:13:88:03:32:10:3E:10:D5:FF:4E:1B:C4:DA:CF:E9:07
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:ad:64:42:c4:c9:89:f6:57:f7:1a:70:c1:4c:8c:06:48:
55:60:a9:19:c6:12:ff:3f:3a:4b:d9:16:20:ca:c5:ac:30:ef:
dc:fc:1c:06:d6:e3:5a:b8:fd:d4:b4:aa:f2:ae:a7:2d:60:39:
d4:12:e4:8d:17:48:58:d6:7b:a3:88:48:c3:83:12:d1:d6:f8:
73:da:6e:8b:ef:d9:ca:c8:f6:85:b2:48:2c:4b:c5:16:13:9a:
a4:cc:5c:26:e2:54:3e:f4:19:24:e1:6c:05:57:51:9a:d0:85:
ec:71:96:27:df:38:ec:98:a4:54:94:19:48:66:6d:63:a9:a6:
a3:75:c5:e6:6e:c5:ef:dd:88:d6:b1:b3:0b:43:63:5a:08:68:
e8:5f:11:9f:d4:89:ae:59:55:9a:22:d5:25:c1:c8:3a:f2:a7:
0c:21:18:ed:6b:9c:71:fb:d4:11:b2:78:4b:da:e2:b7:21:15:
ef:98:6b:d7:d3:57:99:e5:12:e2:b0:e5:52:4e:86:3d:2f:81:
90:39:b8:16:6a:06:d1:56:0c:d3:2c:13:58:09:ca:19:2a:b7:
07:91:5e:a3:6b:1e:d2:c3:1b:93:98:c0:1d:b3:c1:c8:b9:e0:
62:4b:57:71:64:d0:a9:64:de:a4:c7:e1:c8:e6:2b:c5:b1:dd:
26:98:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client