Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: FVSrt0tIeWOs1Q+Xd89mgXloP8wmIqOHNXKCzBeHTBw=
Subject key identifier: 40:33:C7:03:D4:9F:60:60:BB:13:01:95:B1:D9:30:82:8F:65:AD:4C
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 019A706E58F8A67CD4986A1CAABAF1334AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 07B4
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: jvKczCEB1j7VIp8desSXrbngHzqUbrDgIdu3kby1YiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:58:f8:a6:7c:d4:98:6a:1c:aa:ba:f1:33:4a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=4033c703d49f6060bb130195b1d930828f65ad4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:2d:f0:d2:ee:a6:19:62:96:d1:6b:ab:d1:
ea:d4:27:ed:15:ed:a5:46:5e:e2:d1:b4:af:34:5f:
b4:ee:15:e4:8e:10:2b:73:fb:37:7e:35:72:70:a9:
ef:02:ad:ab:58:5d:8f:1c:74:92:ca:55:92:7e:88:
20:64:86:de:59:4a:9a:15:ac:17:12:e0:df:bd:bc:
44:8c:cd:3f:41:43:4d:73:f8:5d:c6:eb:ba:e5:e0:
0c:9c:da:14:29:1d:77:d5:7e:41:3b:e0:70:0d:0f:
e8:71:9a:06:68:e1:bd:85:dd:43:f8:8b:27:5a:9a:
18:c9:30:54:1b:d0:0c:19:93:8f:a9:15:fc:6f:f7:
56:55:95:32:08:c5:33:69:8c:af:1f:0b:ed:a9:8b:
cc:33:8b:14:64:8b:54:03:86:be:7b:19:a9:a0:b9:
a8:0b:fa:69:66:17:a6:66:f4:bd:9d:7e:6b:52:43:
48:9e:5f:41:2c:36:dd:c2:70:5d:53:77:e5:92:a8:
e2:7a:4f:4e:91:24:ce:7b:92:ee:ce:0b:7c:76:ee:
5e:80:4f:0b:cf:8a:e6:25:6d:5f:74:b9:12:95:e7:
a5:28:4f:d9:3d:62:ba:8f:c6:ac:9f:e0:88:26:34:
57:69:26:71:b0:63:c3:53:9d:85:fa:de:b9:4b:9f:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:33:C7:03:D4:9F:60:60:BB:13:01:95:B1:D9:30:82:8F:65:AD:4C
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:11:23:93:b0:55:05:e3:3d:09:b9:b4:40:c4:2f:ee:a4:50:
7b:b3:31:87:eb:84:39:f9:ec:6c:36:3a:c7:cc:11:a6:d6:c1:
e8:54:4c:39:93:60:d4:96:5b:f5:5f:f9:84:8b:b4:ca:64:f6:
5a:1d:5a:6d:67:e8:73:ca:d3:57:be:ac:ed:e0:5d:78:ab:36:
e4:9b:a0:8f:95:ea:b3:8d:ab:25:82:8b:8c:e1:3d:e4:3e:df:
29:63:2b:b4:f6:65:1a:f1:0c:f8:38:c9:f1:de:fc:59:1e:5a:
0f:d5:61:93:5e:29:ea:36:17:e8:ea:fb:3f:71:0f:32:d3:42:
18:ed:23:bb:b7:db:ee:aa:de:d3:7b:11:97:42:06:1a:f1:1e:
b6:14:d2:6c:e8:34:51:0c:1a:d8:8e:b7:86:41:d2:96:42:fe:
33:b6:da:0f:4b:2e:c6:04:6a:a3:ef:41:38:a7:c2:91:70:53:
8d:a4:a9:c8:10:86:ae:c0:d2:7b:95:f8:52:6a:ff:19:14:2d:
72:31:7b:66:95:5b:4a:bc:77:0e:aa:7b:3a:97:d6:6d:dd:69:
0d:b6:86:5f:c8:fb:42:dd:74:0b:2a:47:38:60:53:1e:ce:76:
41:75:ac:62:11:a9:e7:13:dd:a0:d4:66:95:21:48:84:92:d7:
16:79:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:42 2025 by rpki-client