Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File: B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier: xnNJr9DA6DDOPfNG01qg6MdBDoPlY29UbeAlSIx1wsU=
Subject key identifier: 96:C4:D3:D3:C8:D7:11:92:7A:B6:52:78:68:40:0F:3F:90:B6:9C:4E
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer: /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial: 019A4DE1F445D6B31CC80014D1C1BB98B172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: o4fhoMzwngDgqYryeKJNMflq/ByXTa/zNTqwL3dyI0g=)
2: bWkzDjoyXp1j-qZqgWYsRC5CuDw.roa (hash: +Se3L4OH81c744mhhDr0vSFFcNI0VPir7WMuZ7dt6OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:45:d6:b3:1c:c8:00:14:d1:c1:bb:98:b1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=96c4d3d3c8d711927ab6527868400f3f90b69c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:c3:5a:4f:e1:81:b0:b1:05:bf:e7:a2:e6:
a9:6c:df:ee:87:d6:e2:f5:44:d7:27:7f:30:1c:96:
99:a5:35:5a:94:78:85:36:72:3e:21:27:86:f2:22:
c7:a7:59:13:b0:f9:80:40:d2:07:51:20:b3:a4:96:
bf:f3:48:c0:9c:72:8e:95:da:f9:1e:f4:d5:b7:8d:
b3:a2:2c:50:46:9e:bf:ba:04:42:40:42:05:95:26:
40:65:9e:a4:c1:35:eb:7d:27:93:4d:05:b6:29:5b:
92:56:b5:95:c0:f1:68:63:24:04:3f:a1:2f:d0:4b:
9a:03:a4:aa:60:b6:86:c9:f7:dd:b6:38:fa:03:1f:
86:65:b4:d3:40:cc:18:b3:43:1d:a4:82:a7:05:82:
55:69:c0:ce:69:7e:2a:32:c8:ae:4a:18:d1:00:60:
3f:77:b9:60:27:a5:bf:05:44:30:dd:bf:a6:20:80:
02:bd:0f:04:15:8a:cd:1c:19:44:2a:31:2b:cf:27:
3e:84:f6:4f:4f:a8:2c:59:0d:b4:bc:6d:ca:27:0a:
bd:68:c1:0f:97:bb:e3:83:e0:d6:d6:56:21:79:05:
40:4a:11:d6:6a:13:3e:cb:06:64:ed:b1:69:aa:cf:
a2:0d:6b:12:b9:4e:84:f5:4e:85:17:1f:3d:85:23:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C4:D3:D3:C8:D7:11:92:7A:B6:52:78:68:40:0F:3F:90:B6:9C:4E
X509v3 Authority Key Identifier:
keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:46:39:97:dc:fd:cf:4b:97:87:78:5c:ff:7e:73:0e:f9:c4:
3e:94:25:0b:a4:8f:6f:0a:94:91:f7:47:f6:e7:94:be:ba:72:
80:d6:ec:c1:f7:d5:b9:99:b5:b7:37:19:5d:a4:2e:a9:09:f0:
74:cb:9c:1a:ac:c3:c6:74:e5:eb:6a:86:20:44:ac:dc:9a:5e:
b4:3d:b3:78:7d:03:d4:2b:76:ed:09:04:77:46:cc:39:d7:2f:
8b:85:0c:df:06:a4:40:90:e5:ac:20:80:1f:90:d6:15:8e:fd:
39:ab:e2:88:15:91:07:bd:35:99:a0:f3:2a:d0:0f:ab:18:ae:
5b:f3:37:2c:43:34:28:72:24:32:7b:71:3e:6c:43:c4:89:57:
17:93:d8:88:e5:c2:f8:29:d0:7f:5f:d6:9f:1c:e0:db:6a:f7:
15:bc:cb:6d:6d:d1:1c:f5:1f:48:d6:f8:f3:5e:6f:38:96:5a:
9c:22:4a:1a:72:b3:0a:75:65:ae:fc:32:b8:f5:fe:2f:e7:c6:
a3:2e:a1:8c:e3:d4:96:72:56:7c:e1:7e:fc:4e:9d:78:40:64:
4c:96:13:25:3a:fe:60:7f:69:d3:ae:3a:18:e7:5d:eb:5f:9c:
67:ea:35:a9:22:0f:ff:a7:df:67:fe:e6:7e:cc:ca:59:21:50:
4f:b2:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:16 2025 by rpki-client