Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: 0OZF6Spiji8L1C5Zh8l0e7OOzxZKdbNrH0851yt3qgM=
Subject key identifier: D2:BA:E3:4D:57:98:0C:99:41:69:BD:C3:1F:54:68:50:90:A1:06:36
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019A71B8BDEBB45DF079DB98539EFB3E0941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: weEWVt3y7cRggZV1EeRxIx1iZkrnqkjZYj/NQlvd/l0=)
2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:bd:eb:b4:5d:f0:79:db:98:53:9e:fb:3e:09:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=d2bae34d57980c994169bdc31f54685090a10636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:8c:25:04:4f:b2:58:f6:c8:77:ae:3e:9b:
6b:5e:28:8a:63:10:c6:19:fc:20:ad:8f:95:39:dd:
9e:69:3d:ed:ea:12:f3:01:06:52:e1:4e:bf:f9:a5:
d4:ce:d5:0b:a1:41:1f:a6:4b:45:c0:de:85:bc:e5:
30:81:6e:7f:9d:75:4c:86:57:7f:1c:0f:ae:84:ce:
d0:12:96:2b:01:f7:0c:eb:ec:e5:91:b1:4f:11:e4:
06:f9:3e:d9:82:39:ce:91:ad:f4:28:6c:0b:4b:f1:
4f:d5:3b:01:0d:61:5f:e8:69:20:21:69:0f:60:fd:
c9:08:44:16:d2:5e:b9:e1:6d:e2:f5:88:53:9a:07:
d7:74:fc:cd:60:00:c8:fb:2f:d9:e2:aa:a8:a6:a2:
4a:74:59:c0:1f:11:52:7f:df:04:34:e4:a4:35:ec:
fb:33:b9:8a:aa:91:32:87:c8:93:00:fe:e0:bc:37:
50:78:e0:d3:84:32:a8:e3:f5:64:6e:28:f6:71:79:
6d:43:ed:af:b9:0e:90:6c:b2:0d:c2:30:d7:56:3c:
82:64:ea:76:a5:7a:d9:ff:1b:15:cd:9c:16:23:51:
34:68:9c:64:4d:0a:7e:70:91:8b:cf:d9:1b:21:f8:
e2:ef:a1:d8:e6:2c:8e:ec:47:91:06:08:5c:29:b9:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:E3:4D:57:98:0C:99:41:69:BD:C3:1F:54:68:50:90:A1:06:36
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ed:4b:4e:80:7a:d4:8c:f9:4c:35:09:e3:af:4c:e5:61:7a:
8c:0a:67:5f:5c:ca:ad:a9:a8:2e:df:19:c9:f1:8c:02:12:fd:
42:4d:14:36:11:92:01:6d:dc:5d:2e:11:90:86:96:8a:ca:7f:
ca:05:5c:23:08:45:d1:ee:2f:9b:d7:29:6c:67:7e:cc:9c:29:
a2:04:14:60:c0:92:97:27:ed:e5:c3:4c:a2:ec:fc:0a:1e:a4:
2a:30:b6:ab:9e:6b:3c:86:ba:13:07:55:4d:3d:10:46:85:82:
29:e9:da:f5:ac:e5:fb:fb:35:ce:81:b7:0f:cf:24:a4:28:ff:
0d:14:8a:14:11:5a:04:19:ff:91:a2:1b:23:67:60:f6:61:7e:
1f:2c:11:be:96:ff:d4:45:66:09:2a:c7:e9:52:26:56:15:07:
cb:86:70:08:1b:65:85:93:96:81:b0:a7:65:a6:e4:e7:a7:cf:
07:be:4c:d3:13:57:4b:6a:28:7d:55:72:91:e2:08:ee:37:aa:
01:23:ab:bc:3b:0a:d2:19:b9:16:b0:51:f9:38:41:d9:37:a0:
5b:21:49:6b:7e:0f:65:6d:40:85:ee:92:be:c1:1b:02:c8:51:
11:dc:35:c6:74:6e:81:5a:23:f1:11:c7:59:60:24:4c:4b:68:
75:71:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:55 2025 by rpki-client