Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: GcSDehUjrbKI5GRw9Xewkvz/UI4mukMSEX8Drmz0Ylg=
Subject key identifier: B4:26:25:94:7D:62:B8:79:BD:07:16:D4:DD:DD:EE:EC:97:E5:C0:EC
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019A7225FA34AB46792C94DAAB23FF2CB6EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 151C
Signing time: Tue 11 Nov 2025 09:01:22 +0000
Manifest this update: Tue 11 Nov 2025 09:01:22 +0000
Manifest next update: Wed 12 Nov 2025 09:01:22 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: CAyml7qpoTNmoEwndPsynTty6772p9oq5RFzHREN5vQ=)
2: q4kKsYZfOGon2mT-Eapypp72_Ec.roa (hash: w/Ifs9Hdm+PYXiSZpAXsafh4R7xPHRN+zAgqDILsgeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fa:34:ab:46:79:2c:94:da:ab:23:ff:2c:b6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Nov 11 09:01:22 2025 GMT
Not After : Nov 12 09:01:22 2025 GMT
Subject: CN=b42625947d62b879bd0716d4ddddeeec97e5c0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:78:10:af:86:6c:55:17:ce:90:a0:be:a6:
06:b8:85:4d:54:aa:a4:a8:45:06:d0:e4:7e:32:85:
50:6f:d3:27:c5:f3:32:a8:74:fd:8b:8b:26:f4:aa:
47:36:03:78:05:ca:ac:98:4d:21:d6:2d:bd:be:51:
63:d6:64:5e:7b:f9:aa:3a:db:7c:a2:9e:66:49:da:
11:3f:e3:0b:1f:87:dc:b9:cd:b7:34:5a:df:93:f1:
94:93:97:60:fe:74:2b:fd:5c:52:34:20:f8:7f:8c:
88:a6:6a:22:ee:e9:b8:8c:15:b7:44:2b:87:d9:df:
48:3a:2f:36:ac:69:76:81:99:90:cb:04:cf:42:4f:
23:49:7b:45:93:71:15:be:89:3e:f2:2a:08:ad:45:
e5:c3:d0:6b:24:e0:af:ab:5d:62:8e:40:5e:bc:90:
e9:9d:cd:8a:6a:6b:a9:d6:fa:a4:a1:12:4a:bb:f2:
8a:78:09:6d:6c:5c:f0:bb:e6:4b:a3:e1:89:64:7d:
4c:10:ff:e3:d3:2d:df:59:b4:05:0d:26:d9:83:de:
43:e6:01:46:14:aa:75:da:4f:34:c7:75:9e:03:f6:
f6:a9:60:8e:1c:c3:26:e0:74:9f:0b:cb:6a:ed:fd:
04:59:94:bc:7a:d2:ce:bd:fe:03:86:f8:ba:4d:c0:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:25:94:7D:62:B8:79:BD:07:16:D4:DD:DD:EE:EC:97:E5:C0:EC
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a5:44:08:eb:3d:a3:6c:91:40:dd:06:f1:cf:77:bd:7d:18:
4c:17:d9:aa:ad:cd:fc:3d:81:d8:7e:4b:44:fe:56:3c:f9:4d:
f9:50:a6:4f:02:b2:2b:9e:66:05:6d:37:07:ac:7a:b2:82:2a:
4f:1d:ce:8b:29:41:a6:61:f3:91:41:21:4d:76:aa:dd:55:14:
10:bf:1b:39:7f:a3:36:cf:c6:4b:48:de:6c:9d:1d:eb:a2:79:
1b:ba:8a:5a:23:ce:88:f8:0b:22:ea:b7:e0:ca:83:f8:df:e5:
3d:b9:01:1d:39:03:72:8c:e0:35:53:c5:40:25:5a:ab:78:cf:
71:75:cb:5e:26:d7:64:bf:af:e2:03:0c:b5:7a:0b:5d:18:08:
ef:10:92:37:96:98:6e:1d:da:26:f5:f3:2a:99:eb:ac:15:f5:
51:2c:27:32:1c:35:06:5d:04:f7:32:3e:71:c1:a0:a9:f0:35:
42:ff:60:de:e0:4c:94:79:1a:5a:55:a7:54:1b:b8:8d:a6:36:
ad:d9:2b:2d:bf:e4:d7:e8:de:fc:4e:2e:bf:58:32:67:5d:12:
28:2a:74:17:02:ad:4f:3c:8b:52:d6:78:67:f4:f1:66:e0:e0:
fb:22:02:ba:f3:ee:0d:bc:3a:5e:89:59:21:46:10:b4:f0:58:
52:e8:bb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:49 2025 by rpki-client