Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json)
Hash identifier: k1QXsIpookpjB5OyGWC7kotz+Jc+nFt04ywOrsTB+uY=
Subject key identifier: 88:AB:4B:4F:7E:B5:E3:E0:6E:61:A8:8B:2E:DE:EA:7F:97:90:7B:A8
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019A71B7A1825B695365B4B572DCF21FD9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
Manifest number: 1F
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: G2JOgyI9bZsQoR1XqDSKyl8Pl3x7aJbb2VPMg47K9UQ=)
2: X8Nnra_HltNRWULUv0jOvOL0YgA.roa (hash: VancjWcYbkfiXC8CFP9Ka11PiwvtrDF34c2Qr/v152E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a1:82:5b:69:53:65:b4:b5:72:dc:f2:1f:d9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=88ab4b4f7eb5e3e06e61a88b2edeea7f97907ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:ca:45:17:98:41:c2:28:cb:b6:9e:3b:68:
a4:16:e1:66:5d:cb:38:2c:5f:ea:1a:9c:7e:99:20:
1a:33:cd:a0:06:0a:7d:e8:8d:01:68:c3:8e:c1:7e:
b1:41:d4:23:1b:0b:69:f9:40:db:9c:0f:73:23:28:
e3:01:19:50:d2:61:aa:78:34:78:0b:db:5f:36:5b:
23:40:d6:e3:a1:e8:ce:29:fd:32:6a:f4:41:3b:a2:
c3:f8:85:d4:2a:20:01:c9:28:e8:d8:0a:31:c0:ba:
ec:93:5b:ff:4a:92:72:35:73:71:ef:b8:41:0f:b3:
c9:4d:1b:42:01:0a:63:2a:2b:39:0c:43:0c:04:40:
5b:b8:7c:7c:12:2e:72:5d:3f:56:51:83:43:60:b9:
4e:33:50:17:dd:ed:67:e7:e6:b0:32:9f:03:0d:fe:
cf:1e:fe:25:70:93:d8:76:30:40:40:5d:48:c0:76:
f2:14:06:66:7d:e2:c0:1f:75:0a:67:cd:0b:37:ef:
32:a2:02:9a:12:fd:0e:26:b0:c6:42:5d:8c:c2:21:
27:a1:34:86:8c:72:05:96:cc:24:2e:8b:d8:f2:10:
b2:10:98:f5:9f:8d:b0:f0:11:ec:5b:11:2e:a6:0c:
91:6d:e7:76:cd:e9:be:ef:3a:49:9c:79:54:2c:fc:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:AB:4B:4F:7E:B5:E3:E0:6E:61:A8:8B:2E:DE:EA:7F:97:90:7B:A8
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:60:88:cf:8f:4b:2c:73:97:6e:a6:fe:46:76:56:49:4b:
bc:94:18:6a:f9:be:b3:bc:0d:1d:d8:26:81:56:b3:31:df:be:
97:05:d3:a2:5f:95:27:bd:b1:ad:50:7f:f8:c2:b5:1c:ea:15:
1e:61:81:1a:94:fe:82:76:4a:ef:a8:0d:8d:69:3a:9d:d1:8a:
92:5c:7f:c2:13:1e:6b:95:82:7b:d7:c5:5c:48:b3:25:8c:f4:
23:7f:fa:b1:86:d2:b2:c7:49:fa:f3:a8:5e:1b:57:6f:20:e8:
a2:62:d9:72:79:90:e5:6b:c7:1b:c3:ea:aa:e6:9e:78:98:ac:
88:5f:d1:14:56:b8:85:a3:ad:74:52:fa:3e:79:3f:66:99:2e:
e3:48:be:ac:3a:d1:10:f7:4c:3f:58:d8:50:1a:fc:c3:17:91:
9e:3e:7e:53:a9:91:a8:6c:4f:ee:b5:da:00:a1:c9:69:4a:14:
66:79:57:bc:c7:c3:4d:a0:ff:f0:4e:f5:9a:09:fb:73:e2:5e:
fe:70:99:8d:c6:c3:90:3b:84:3a:7f:f6:7d:1f:03:77:fe:08:
5c:44:79:ba:27:54:33:6f:d8:2b:19:88:9d:11:53:d2:df:33:
dc:95:e4:09:82:c6:03:37:2d:48:e4:3e:3e:df:1c:03:b1:f2:
c8:d7:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:53 2025 by rpki-client