Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
File: pB6cBojcQS_Ce8DiQtcDmp34yGg.mft (raw, json)
Hash identifier: bTQml/9hqme3vrZ2H6PGEGYWhnpiQVbSKlqyuDI6wDA=
Subject key identifier: 4F:40:25:55:96:B4:A5:1E:9F:90:C5:13:F3:5D:82:B5:F0:45:83:94
Authority key identifier: A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68
Certificate issuer: /CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
Certificate serial: 019A71B8F70F48DDB86779AE03C5C49A0B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
Manifest number: B8
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: pB6cBojcQS_Ce8DiQtcDmp34yGg.crl (hash: 5hkh7Cuj9V+PPJ6L1wrv+6FfX4rEJb2KmaJnnab0tuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:0f:48:dd:b8:67:79:ae:03:c5:c4:9a:0b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41e9c0688dc412fc27bc0e242d7039a9df8c868
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=4f40255596b4a51e9f90c513f35d82b5f0458394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:60:e3:27:26:c1:bb:a4:7b:90:60:8f:c2:
23:91:f8:be:97:5b:85:2a:ab:cd:ad:09:69:ca:02:
7e:dd:6f:66:f6:83:1c:f7:15:67:22:f1:11:7c:9d:
aa:12:b1:19:3b:eb:cc:d9:c0:27:7e:af:a9:06:3f:
d3:c0:d8:3d:23:23:18:1e:00:31:dd:53:51:9a:03:
43:a4:f1:17:57:2a:e2:30:55:c7:1c:3d:e7:5c:33:
e3:61:9c:a2:ef:6c:a1:ea:61:7f:26:f4:50:da:c9:
ce:1f:1b:3a:78:6c:56:c7:02:11:b1:89:b6:5d:77:
6b:6f:c7:a5:c4:d1:c5:54:f6:c6:f7:2f:64:89:77:
86:09:79:31:b0:72:89:d8:68:cc:d6:ab:7f:c3:11:
d7:fa:e5:58:b5:1e:98:5d:3e:c5:f8:44:71:4d:31:
be:81:13:90:78:b2:fa:4d:d1:74:b6:dd:bb:b2:f0:
02:a9:d5:65:94:6e:cc:f9:9f:40:19:6f:ef:64:27:
78:30:31:54:4b:f9:e1:11:55:5e:84:7b:2f:57:9e:
8e:41:74:21:d5:c5:17:d4:65:d9:82:a1:ef:11:c7:
75:bb:8f:cf:9a:2b:5a:e5:d0:4e:af:5a:08:d1:22:
97:2e:5e:fe:25:3b:74:77:08:75:b9:97:15:70:5b:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:40:25:55:96:B4:A5:1E:9F:90:C5:13:F3:5D:82:B5:F0:45:83:94
X509v3 Authority Key Identifier:
keyid:A4:1E:9C:06:88:DC:41:2F:C2:7B:C0:E2:42:D7:03:9A:9D:F8:C8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB6cBojcQS_Ce8DiQtcDmp34yGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0bb2e4-8c80-4b89-838f-3d136f3a78d7/1/pB6cBojcQS_Ce8DiQtcDmp34yGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:27:af:a6:c5:75:cf:10:dc:cf:2b:04:ab:87:a4:b7:f0:26:
e5:a4:83:fb:d1:10:1d:18:2a:24:46:86:8c:df:bf:04:cc:a7:
01:6e:ec:19:16:25:32:80:23:15:fc:31:52:33:46:20:31:4a:
89:9d:b6:fc:95:a6:37:61:0e:f1:f5:24:a8:96:a1:93:23:83:
a8:fc:6e:e6:44:b5:b7:bd:07:3f:8c:37:14:2c:cd:ca:0a:e3:
8a:95:b2:46:12:eb:0c:22:e9:3a:bb:ba:09:14:48:cf:08:c0:
0f:c3:e9:fa:e8:56:32:d2:fd:64:61:71:ac:e4:78:bf:26:ac:
7a:75:be:71:67:04:fa:74:a7:a8:71:ef:bd:f9:66:b2:7c:0d:
83:bd:15:13:52:4e:32:e0:8d:d1:18:ac:7d:13:e0:15:2a:1d:
12:5f:99:8b:28:1c:42:ba:83:2c:f8:41:f4:44:90:59:37:f0:
68:95:41:f0:25:19:5e:93:84:c2:5a:01:29:d7:1c:bf:65:6b:
72:9c:18:4c:d9:e2:3a:44:35:29:4f:f0:87:01:da:6d:ec:26:
aa:13:d2:9a:de:45:60:9c:df:2a:15:a5:5c:5f:6b:c8:7a:f1:
b8:58:54:9f:35:ab:70:cc:a0:0c:f1:98:1e:46:c2:7d:18:11:
c6:37:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:36 2025 by rpki-client