Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: CPYG9HP726hlBt2YsOdt2cRzXHhs8iD73QtiBdnCqnM=
Subject key identifier: 46:50:60:3A:7C:1A:3E:EB:06:80:CB:D2:43:92:60:98:19:85:EC:84
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019A7225FBAAE16B8F757730B6C2A31D6AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: Nd+M9qZ9unCXG74hHO+cBReLp4qJiAyz21rWfsdKvzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fb:aa:e1:6b:8f:75:77:30:b6:c2:a3:1d:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=4650603a7c1a3eeb0680cbd2439260981985ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:25:c5:0f:59:4e:00:5d:5d:f7:d1:26:f7:
90:ed:cf:96:1e:9e:fa:6f:81:1a:4d:07:a2:4d:e1:
d5:eb:d2:6f:10:54:9c:41:00:1c:3a:d9:0b:5f:06:
46:5c:d8:47:3d:94:41:3d:67:19:ff:47:34:f8:ec:
e7:a3:9b:7d:85:bd:3e:8b:4d:60:ae:ac:84:e5:86:
7b:91:72:23:7a:23:7f:c6:05:39:63:d7:72:d9:77:
7a:0c:4d:a2:d0:27:65:b0:cf:65:96:0c:c5:16:9c:
d2:f0:ca:83:a7:8a:be:31:f4:35:0e:dc:41:df:f4:
4f:e0:b2:02:d9:3f:ed:de:ac:82:de:f9:84:ac:b9:
81:45:ce:9b:df:87:eb:ee:57:5e:5c:ce:8f:19:90:
59:48:77:a2:9d:b4:b0:ab:d4:b3:09:3c:6a:73:ca:
41:93:b6:0e:89:d6:39:9d:32:a5:71:cc:81:54:f8:
a0:6f:99:44:ab:25:fd:8d:3a:5b:bf:a2:ca:f8:ed:
dc:60:fd:bb:49:48:ed:72:73:83:fb:38:51:d7:bd:
7e:76:89:63:0a:08:92:92:0a:54:8c:a4:3c:72:f2:
82:0d:5c:f3:79:5c:64:73:0e:db:b9:39:78:5a:b1:
b7:10:e5:b9:a4:c3:a1:ef:0e:d8:31:5c:ad:d0:9f:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:60:3A:7C:1A:3E:EB:06:80:CB:D2:43:92:60:98:19:85:EC:84
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:e7:ac:3d:31:cf:54:7e:d3:39:26:65:78:de:e8:3c:72:
bd:ec:2e:f9:80:73:89:1d:39:d7:e8:76:a1:48:7b:95:3b:47:
5f:6f:af:5b:1c:0e:0c:9c:60:33:c7:21:e1:dc:9b:24:6c:f3:
72:91:51:a8:0c:fd:fe:ad:36:56:e2:c9:4c:8b:15:55:1a:9d:
f5:fb:c6:4d:0a:3f:05:e0:ab:6b:49:81:3b:5d:be:56:7f:93:
95:8e:c7:98:5e:d6:7c:97:09:ac:e9:9b:b7:d1:49:92:b6:31:
5e:2d:04:99:21:c7:6b:23:57:b3:0e:be:dd:1d:1e:0e:f0:0c:
ce:d6:88:e8:19:3d:0f:8e:9c:73:a8:1a:ca:2d:63:22:fe:b0:
2a:21:59:64:bb:6e:9c:53:74:d4:5f:36:fd:95:9f:ca:42:a1:
26:43:41:4a:ec:c4:f0:d9:e0:b5:36:09:48:69:c5:20:d6:90:
5f:c1:a1:14:32:37:bd:65:d9:ac:c1:7d:59:e5:c4:5f:3d:3d:
e5:ce:31:38:fb:9f:78:07:2b:a0:cf:c8:5f:ac:0e:68:e2:fd:
fc:eb:7f:b3:6b:d0:cc:df:4c:fc:f5:8e:6e:0c:8a:de:44:c3:
4c:0e:7c:13:17:be:5b:c4:50:91:23:44:2c:36:b7:ab:85:a9:
b4:38:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client