Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier: MS0kldMPTxU84pzDm9cL7QVbl5OW9SLpUaHaM/xru8s=
Subject key identifier: 82:44:43:D5:F8:7D:DA:92:C0:27:1C:CD:3E:D7:73:CF:C8:04:42:3C
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial: 019A559BB17C452380C5AF05CC9B2081E9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 20:00:58 +0000
Manifest this update: Wed 05 Nov 2025 20:00:58 +0000
Manifest next update: Thu 06 Nov 2025 20:00:58 +0000
Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: mOCTIdtmFMoX6GWnpWIRkroclxScjDGPkRQdJanRYy4=)
2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:b1:7c:45:23:80:c5:af:05:cc:9b:20:81:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Validity
Not Before: Nov 5 20:00:58 2025 GMT
Not After : Nov 6 20:00:58 2025 GMT
Subject: CN=824443d5f87dda92c0271ccd3ed773cfc804423c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:e5:51:07:28:c6:5f:5a:cd:db:de:9a:eb:
9b:3c:3b:82:d7:ec:4a:89:08:72:7c:fa:71:31:8f:
d9:aa:25:f6:b9:2e:e8:4d:a1:21:73:f8:d0:a9:10:
e7:0f:70:ba:b6:da:ec:f0:e8:05:27:7e:f1:db:28:
91:a5:61:a6:0b:f5:91:7b:f8:c8:fe:8a:55:2b:0a:
27:dc:3a:cb:0d:d3:58:18:ad:98:8b:9a:f5:43:16:
88:6e:c5:68:42:e5:47:ef:b3:0c:aa:1b:c8:3a:1a:
06:1d:89:e1:65:bf:14:34:f3:9e:56:b1:ea:f1:42:
f9:6b:6a:3a:de:c5:ff:78:d9:b3:10:94:09:85:14:
19:56:4c:de:04:8e:bf:e0:bd:7f:c3:2d:cc:70:a0:
6e:17:3d:46:54:27:13:58:b3:58:05:ac:b9:35:36:
af:09:64:4b:fb:b3:16:51:93:34:07:a2:29:76:91:
87:f0:3f:4b:9d:28:0a:34:54:39:5a:72:1b:24:61:
f3:d4:81:10:74:b2:bb:1d:97:e4:ce:33:f0:ae:46:
23:d3:ef:f6:ee:e3:ab:fb:5f:bc:9a:67:ea:af:44:
9a:0f:95:99:b5:01:7a:00:e5:be:ab:27:bc:9d:aa:
8f:f8:d5:e8:52:69:da:6d:37:eb:dc:70:ad:70:d9:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:44:43:D5:F8:7D:DA:92:C0:27:1C:CD:3E:D7:73:CF:C8:04:42:3C
X509v3 Authority Key Identifier:
keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:38:bf:4d:58:05:62:13:28:58:5a:2a:1f:41:11:37:41:
8f:ec:da:30:62:28:cd:0a:69:d7:1e:c1:5d:71:8a:ce:87:57:
71:d4:21:35:ce:2a:16:3e:9a:43:bf:d1:37:54:55:05:d9:45:
d7:89:23:c0:e0:66:e4:c1:4a:47:66:e7:75:96:a3:73:73:b0:
bf:22:7f:7e:a6:46:22:e5:56:b0:55:21:3b:f0:55:92:a8:ad:
65:41:1f:59:d8:22:c5:2d:cf:2d:b8:23:64:b1:08:6e:82:db:
29:d6:59:ae:8f:db:0c:7b:6c:5a:d5:e3:42:42:c3:b0:e6:72:
b5:e2:21:7b:95:c6:bb:44:2f:38:12:2b:eb:09:d1:e2:4d:5d:
dd:96:09:b2:51:f2:a4:06:89:33:34:6d:33:c9:93:f3:31:bf:
5d:55:27:04:ba:ae:48:11:56:44:f0:21:d5:cf:ee:27:79:f0:
8a:05:1b:bc:9f:21:76:92:42:df:da:f2:ff:28:71:43:4a:cb:
6f:df:ca:42:60:4c:c1:72:cc:7f:d6:e0:c1:c8:59:34:07:2f:
72:4e:e4:05:67:b1:de:d5:f1:7d:7d:fb:46:8e:49:2e:b2:6e:
a7:37:19:3b:3b:25:83:b1:64:b8:20:8a:48:44:4b:4b:64:6e:
39:9d:b3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:20:57 2025 by rpki-client