Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: b323t84PsmaVTP37xrncdUtX7Dbye18UvhrG40robxY=
Subject key identifier: 28:16:BE:AD:CB:69:29:C4:A5:E7:A2:64:75:6B:24:77:64:F6:C1:76
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 019A72939ED850DC2D3041D20179728A0576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 03C6
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: PuJnAKFT9c+UPGumYKOsXSu28xqdaBqHC6KYBQbFqS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9e:d8:50:dc:2d:30:41:d2:01:79:72:8a:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=2816beadcb6929c4a5e7a264756b247764f6c176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:d0:ac:d2:15:39:85:04:68:5a:ea:a0:21:
6b:5e:ef:83:44:ca:d5:4f:92:44:12:bd:b5:ea:d0:
e5:c5:3b:cc:a6:ee:92:3e:62:06:24:98:40:ee:26:
df:ea:e1:86:e4:1c:1d:f9:47:44:70:1d:b7:22:1a:
f9:a9:77:3a:c0:0d:11:e8:5e:fc:09:76:a5:07:19:
f3:32:ea:22:ac:aa:0b:a3:d6:81:1f:f1:1f:97:9f:
5e:33:d9:c7:9e:6b:8d:33:af:41:c8:f4:8b:ef:0e:
ec:0d:b4:cd:d9:6b:42:fb:e0:93:71:00:94:8d:2e:
68:ea:4c:6d:1b:07:2b:f3:11:cf:73:9b:9d:ed:e2:
ea:98:d9:d9:9c:78:ea:e8:57:19:f2:e3:4e:8d:4f:
54:fe:73:83:87:56:88:41:64:3c:01:c8:be:48:19:
e1:b1:65:b5:e4:51:53:ca:63:a0:eb:99:90:ce:35:
83:40:25:00:7a:80:3e:ee:d2:be:56:94:10:1c:d4:
e6:7b:7d:aa:e9:29:9f:68:10:57:43:6c:37:97:01:
58:e4:df:60:50:25:11:2a:c0:24:ac:c3:fb:66:94:
73:a5:41:1a:ba:4e:9a:bf:aa:de:7d:2d:2b:7e:0a:
54:72:43:83:53:03:da:cb:e1:f5:73:f2:79:77:00:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:BE:AD:CB:69:29:C4:A5:E7:A2:64:75:6B:24:77:64:F6:C1:76
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:f3:dc:5a:c0:9b:9b:6f:8d:fb:74:94:3e:db:7f:4f:c3:
0d:f8:bd:c8:b4:05:dd:6f:20:b4:e7:2d:96:94:7c:d6:03:70:
bd:2d:c9:4a:33:d1:44:76:0e:b3:78:e5:a6:29:09:92:e6:44:
12:75:f9:f1:26:9b:38:1e:32:50:bf:6c:a0:2e:8f:23:25:b3:
04:9c:2a:8f:b7:0f:a8:a0:fd:de:99:58:06:46:63:f9:71:ab:
0d:52:37:e7:bc:cb:00:04:30:c5:49:ae:0b:fd:ba:65:a3:5a:
5e:56:55:72:f5:f8:31:20:80:9e:67:fd:4c:7d:d6:d9:bf:d0:
6b:33:7d:94:37:e9:0d:85:30:8a:b1:48:1e:4d:be:53:bf:62:
70:e5:8b:a9:46:eb:04:74:60:21:9b:ba:68:72:ed:cf:6e:90:
17:12:14:8d:20:1d:56:6c:7c:ca:53:69:43:76:d1:b8:36:9c:
47:49:ea:f2:76:de:00:c7:86:09:c5:bf:0f:eb:25:6e:7f:c1:
d7:16:46:fc:bb:f0:85:7a:b9:9e:ff:71:6d:1e:29:0b:30:8f:
9b:65:26:9a:07:15:7f:28:f3:0b:4b:f8:34:52:17:1d:d9:5f:
61:45:d2:10:83:65:f6:82:df:46:d6:88:3c:ca:54:1d:e7:12:
09:8f:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:15 2025 by rpki-client