Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File: B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier: K0/bZfGXIfZhXYatxiyZ6kRYBZc88Y7NeRK5VV9Ks1o=
Subject key identifier: 75:6C:C1:C0:5A:26:B7:88:95:63:15:DC:7E:DE:97:2E:4A:C0:25:36
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial: 019A1EAD0486E47DB13740A2782116697F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number: 0AE1
Signing time: Sun 26 Oct 2025 04:00:46 +0000
Manifest this update: Sun 26 Oct 2025 04:00:46 +0000
Manifest next update: Mon 27 Oct 2025 04:00:46 +0000
Files and hashes: 1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: vw2nWFnxxIXsD8wzZTP8tUB8ZjwaPw0iGTjx18m8Ajs=)
2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:04:86:e4:7d:b1:37:40:a2:78:21:16:69:7f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Validity
Not Before: Oct 26 04:00:46 2025 GMT
Not After : Oct 27 04:00:46 2025 GMT
Subject: CN=756cc1c05a26b788956315dc7ede972e4ac02536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:8c:c8:45:c0:53:4f:58:0f:bf:3f:a8:43:
26:53:d7:c2:65:6a:58:89:83:a0:63:00:81:ae:c9:
0e:f8:db:41:6f:ee:83:64:6a:54:7c:b9:32:ad:4e:
dc:f6:57:7c:26:9e:92:55:9d:2e:a4:33:1c:95:ae:
b2:6f:98:7c:02:6e:37:20:f3:f3:b4:02:f0:43:f9:
f9:3c:73:1d:33:6c:8d:b6:76:b2:b0:39:6f:e7:e4:
76:fc:44:ff:4d:de:d8:1f:75:d6:36:93:08:c9:36:
e1:50:0a:03:88:34:40:8b:ee:1f:c3:0c:77:bd:e0:
35:f8:79:21:da:67:5a:e6:ca:6a:be:85:6a:ad:3e:
5f:c6:7f:df:ab:03:73:74:6d:2b:bb:f0:88:73:af:
52:a4:f3:06:5a:b4:56:36:fa:46:79:56:d7:05:9d:
c4:4a:e0:21:c5:31:eb:7c:9f:68:bc:f7:51:b5:2c:
14:a9:2d:0c:fe:d5:99:f6:96:45:99:b5:08:82:4f:
cf:da:9f:eb:9e:54:8a:b8:3c:2a:56:7e:69:ed:76:
a7:7a:e9:d0:29:fd:ec:95:67:ba:77:5e:06:eb:a5:
88:2b:fc:6a:fa:c2:29:05:20:48:20:a7:f0:b2:4a:
49:84:32:77:89:23:f6:10:aa:06:da:6e:69:86:59:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:C1:C0:5A:26:B7:88:95:63:15:DC:7E:DE:97:2E:4A:C0:25:36
X509v3 Authority Key Identifier:
keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:8a:a0:2d:3d:9c:c8:8d:e8:96:63:77:2e:df:f4:01:f6:4c:
40:f2:a6:72:3b:49:39:6c:31:d4:9a:d6:99:5e:21:08:58:50:
97:7d:5c:5a:91:fe:7c:a7:5f:41:c6:a4:bb:39:2d:d1:a3:a0:
86:45:a9:1b:59:b0:6b:60:c5:f5:49:62:49:b7:f0:c9:8a:43:
59:30:21:97:46:b6:bf:06:bb:fc:13:97:6b:1b:b6:11:d3:ea:
50:7c:45:c2:08:c9:fe:10:17:6d:20:2e:09:5f:37:d6:35:54:
47:f8:73:b7:33:b7:54:ad:bd:01:a3:95:19:24:0b:54:cc:30:
26:e2:69:2d:f0:36:fe:4b:f9:99:d3:fa:5e:fb:2d:86:88:2d:
be:28:58:b2:ea:ba:d4:6e:69:60:56:ce:71:c8:54:b6:2d:9b:
2a:6b:52:dc:6b:10:dd:82:69:35:34:22:1a:fd:5a:7e:55:5f:
35:99:6f:1f:1b:08:3f:13:b4:98:7a:c2:45:f8:0a:1e:3a:e5:
fe:0c:6b:aa:6a:ba:dd:a4:fe:13:28:fc:66:2f:0f:a0:f1:23:
38:7e:3a:8f:fb:72:88:ff:78:26:71:0e:bc:34:18:99:5f:74:
c3:49:f6:c7:8b:0f:87:83:b5:44:a2:8f:ad:e5:04:ca:20:47:
49:d1:3e:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerQSG5H2xN0CieCEWaX8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjM5NDg0NTMyNTA4NGJiOWVmNzhkNGY3MTdmYzRiNTQ1
ZmE3ZWQwHhcNMjUxMDI2MDQwMDQ2WhcNMjUxMDI3MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg3NTZjYzFjMDVhMjZiNzg4OTU2MzE1ZGM3ZWRlOTcyZTRhYzAyNTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18GMyEXAU09YD78/qEMmU9fCZWpY
iYOgYwCBrskO+NtBb+6DZGpUfLkyrU7c9ld8Jp6SVZ0upDMcla6yb5h8Am43IPPz
tALwQ/n5PHMdM2yNtnaysDlv5+R2/ET/Td7YH3XWNpMIyTbhUAoDiDRAi+4fwwx3
veA1+Hkh2mda5spqvoVqrT5fxn/fqwNzdG0ru/CIc69SpPMGWrRWNvpGeVbXBZ3E
SuAhxTHrfJ9ovPdRtSwUqS0M/tWZ9pZFmbUIgk/P2p/rnlSKuDwqVn5p7XaneunQ
Kf3slWe6d14G66WIK/xq+sIpBSBIIKfwskpJhDJ3iSP2EKoG2m5phllF1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVswcBaJreIlWMV3H7ely5KwCU2MB8GA1UdIwQY
MBaAFAdjlIRTJQhLue941PcX/EtUX6ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQt
MzRiN2QxN2ZmNzE1LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQtMzRiN2QxN2ZmNzE1
LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYqgLT2c
yI3olmN3Lt/0AfZMQPKmcjtJOWwx1JrWmV4hCFhQl31cWpH+fKdfQcakuzkt0aOg
hkWpG1mwa2DF9UliSbfwyYpDWTAhl0a2vwa7/BOXaxu2EdPqUHxFwgjJ/hAXbSAu
CV831jVUR/hztzO3VK29AaOVGSQLVMwwJuJpLfA2/kv5mdP6XvsthogtvihYsuq6
1G5pYFbOcchUti2bKmtS3GsQ3YJpNTQiGv1aflVfNZlvHxsIPxO0mHrCRfgKHjrl
/gxrqmq63aT+Eyj8Zi8PoPEjOH46j/tyiP94JnEOvDQYmV90w0n2x4sPh4O1RKKP
reUEyiBHSdE+yg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:15:40 2025 by rpki-client