Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: aBRPPVrPA8Y+yZXAPi4ZiQT6jBLSXWbrqn7PeVHk5mE=
Subject key identifier: DB:DA:FD:01:F1:20:6C:80:35:05:1C:7D:4A:79:38:B6:2B:1D:92:57
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 019A71B8F549C49B3AC617DE2CFA1B7E8387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: nCyjASuwgClHFCilt9ieAoqqNx/ddDqjVMNia0STsyI=)
2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f5:49:c4:9b:3a:c6:17:de:2c:fa:1b:7e:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=dbdafd01f1206c8035051c7d4a7938b62b1d9257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:9c:03:49:d6:1b:68:aa:98:a5:fd:86:c0:
44:b4:47:4c:ba:fe:5f:d1:ae:b0:fa:2e:d4:c5:80:
c0:49:7b:ca:f3:6e:aa:16:ff:c0:75:51:fd:9a:0b:
1c:25:5f:a8:af:7b:2f:36:d3:1c:13:34:ec:0b:e8:
a6:f7:48:8c:0f:03:52:86:91:87:ed:e5:30:c2:05:
0d:df:7c:c1:5d:72:03:8b:46:66:50:f2:df:87:ed:
da:e5:b9:4d:cc:57:29:8b:5b:4c:07:89:ad:76:22:
4c:17:73:20:e4:e8:d3:50:fc:5d:97:db:2c:0d:68:
1d:2e:db:23:cf:0b:2f:e2:73:19:7e:91:f7:47:e7:
3d:d2:4f:3e:f6:d4:90:63:6b:e7:64:fc:d8:90:ce:
0f:a6:f8:46:05:61:f1:b6:e6:a1:86:21:88:d2:07:
f9:be:06:0a:32:b5:9a:18:79:87:e3:ba:f4:b9:33:
1e:ec:66:99:4e:e6:19:0b:c9:81:5b:c1:3a:7a:38:
b8:3e:e8:59:d7:df:63:94:a7:47:c8:79:c8:a9:9e:
5a:49:ec:d2:7a:2f:ae:6c:a5:96:60:b6:49:9f:94:
a6:08:ff:e9:c9:89:2c:8d:cf:dd:e6:ca:e4:cf:db:
d5:23:9d:ae:53:45:2d:91:f5:b7:dc:71:eb:b5:cc:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:FD:01:F1:20:6C:80:35:05:1C:7D:4A:79:38:B6:2B:1D:92:57
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:80:4f:6d:7c:ff:cc:11:88:7e:8e:fe:b9:7d:8e:70:d8:
30:6b:3c:bc:b9:c3:bd:32:c6:31:2a:4a:be:db:3d:01:5b:13:
71:0b:18:6b:d9:ac:bf:24:ea:52:84:0e:f3:b4:ad:b3:03:7b:
f3:3f:c4:b6:f4:55:23:63:e4:8e:f5:f9:75:14:88:08:ad:40:
73:54:3a:85:57:cd:e5:c3:90:10:aa:6c:08:9c:1f:95:03:01:
ce:07:0f:2c:fe:35:b4:a4:df:71:7e:ee:bb:a0:53:cd:1a:8b:
3b:e7:38:81:32:7e:68:40:a2:e8:1c:b9:da:69:15:48:04:d8:
37:de:64:82:ea:33:87:6e:5c:51:10:5f:90:bb:b9:29:44:47:
4a:74:21:e7:c8:b4:b9:66:80:8a:3c:82:50:20:83:59:65:a2:
88:0c:2a:23:c3:30:40:00:f7:cc:5a:8b:31:01:6d:c6:5b:61:
ef:5a:c5:58:0d:15:b7:0b:f4:1d:82:ac:9d:0b:e6:b7:1d:f8:
4d:13:03:92:5b:37:ed:6f:44:b2:56:17:db:40:4d:76:b4:80:
7d:bd:76:db:50:18:8e:a9:1a:2c:64:58:e1:11:d4:ce:06:f4:
28:37:72:fe:f6:6a:3d:78:49:64:df:bb:69:19:b0:58:c2:37:
68:83:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:41 2025 by rpki-client