Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: xsY24+hs6IA+XlyNXR81Z1bpamx6CF8bDDG5SM0C0tw=
Subject key identifier: EB:A3:EF:31:4F:24:15:F3:93:4C:5F:D0:25:3F:D8:89:02:9D:03:93
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 019A7149FD154A28CA741299CCED607C2515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 05:01:05 +0000
Manifest this update: Tue 11 Nov 2025 05:01:05 +0000
Manifest next update: Wed 12 Nov 2025 05:01:05 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: Bi5U1JXXzIsTcYA1j4qEJOxNDsSaJVkximzl1fYqM7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:fd:15:4a:28:ca:74:12:99:cc:ed:60:7c:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Nov 11 05:01:05 2025 GMT
Not After : Nov 12 05:01:05 2025 GMT
Subject: CN=eba3ef314f2415f3934c5fd0253fd889029d0393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:ee:15:e0:02:40:c7:25:6f:ae:d7:0e:75:
58:c4:2a:3e:48:3a:b7:51:f4:37:61:c7:1f:a1:b4:
de:a1:32:40:1f:f7:89:c0:e0:3f:32:12:58:af:ba:
03:e2:db:42:dc:27:c7:bb:2b:4d:2b:e3:8b:32:0f:
14:f4:c1:60:97:68:36:72:45:e9:d1:28:23:b6:03:
88:aa:fd:ae:26:cc:e8:8f:9d:6b:ed:5f:d7:27:1b:
03:3d:73:e4:20:39:8d:f0:dc:f9:3f:ed:d2:4d:5a:
10:43:86:6e:23:6f:8c:3a:91:41:99:41:31:db:17:
7a:cf:52:b7:f7:06:23:25:4c:a3:23:85:ee:cc:c9:
ca:f2:83:32:b3:4f:bd:b8:6b:3f:5c:7e:cf:8d:db:
cb:4d:18:6a:d9:ce:f5:2c:99:c4:48:99:b6:c6:37:
80:65:13:2c:3e:27:a6:05:6a:27:c3:4f:61:25:83:
41:fe:b0:46:0d:de:98:1f:89:f6:ef:d0:99:0d:03:
13:3a:f7:62:4b:21:48:93:a0:95:6f:81:63:6e:35:
16:9a:b7:d6:b8:f6:e3:fd:32:b7:46:64:58:1f:1c:
0b:96:1d:94:b2:69:18:af:b0:6e:3d:6a:20:78:f5:
fd:ca:97:4e:26:d7:de:95:02:81:25:2a:67:a3:f0:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:EF:31:4F:24:15:F3:93:4C:5F:D0:25:3F:D8:89:02:9D:03:93
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:42:72:2b:9d:05:2b:05:e7:f9:05:b0:51:7e:1b:e5:65:70:
b6:d1:66:c5:a5:28:ad:2a:b6:c8:53:06:49:c8:13:52:c3:b9:
3d:50:a2:bc:a3:c1:22:1d:be:86:66:5b:5f:38:4d:a8:55:f6:
ac:a0:2d:c9:93:53:8b:9d:cd:f6:4b:14:dc:da:66:ee:6c:51:
53:86:9f:b2:de:a7:f1:15:d9:bf:7e:75:9c:b8:74:aa:73:c8:
d1:87:8a:69:9e:7c:44:ca:72:98:7c:ae:83:01:ea:f1:29:ae:
62:46:f6:c7:ff:5e:9b:f2:94:8a:9f:b3:5e:df:7d:8d:64:94:
06:8a:06:71:53:9d:a0:83:0d:33:67:fa:f7:27:5d:50:d9:54:
64:a6:30:83:14:80:6b:d1:c0:5d:ec:43:90:9e:17:f0:07:45:
dc:d0:5e:45:4d:b2:47:f4:81:78:bc:7b:0a:ef:bf:13:8d:b0:
b6:dd:c2:e3:65:95:5e:5a:ab:8d:f5:76:be:13:6d:97:de:5e:
d9:86:aa:01:1e:6e:dd:cd:9a:60:53:cb:35:22:29:89:7d:36:
d1:85:f8:ae:95:4b:7f:98:08:d6:b0:8f:0d:af:a7:53:03:26:
d6:03:b7:e4:05:51:8f:2c:5d:81:1c:6f:a5:0b:94:70:08:50:
62:26:b3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client