Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: 29PyFgPDrX7Vw8BO05/dcy3/QDWZtQTpI8INy1f3w1U=
Subject key identifier: F0:29:C4:FB:5A:21:59:A9:07:08:92:BD:22:A5:B4:CB:B4:82:6E:75
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019A72937C7301F2E87C3CAE94F4B2EC1BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: sVVk+Y08hUBjkK39c5XTFZea5tilwRBsAFCfPaHN+/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7c:73:01:f2:e8:7c:3c:ae:94:f4:b2:ec:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=f029c4fb5a2159a9070892bd22a5b4cbb4826e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:91:15:b2:6a:83:74:40:4b:2b:e5:b3:54:
89:39:c7:ce:0a:44:72:c0:f4:fa:3a:76:9a:43:90:
c5:83:c3:30:69:fc:ab:d8:a7:2e:cd:14:aa:36:6a:
8c:72:3f:0b:fd:e1:59:65:16:c7:7e:44:e7:26:2d:
6d:6b:18:36:4c:db:bd:aa:48:c9:e7:92:ab:63:29:
5a:a2:78:b8:f0:1d:46:93:69:cc:5e:d9:18:d5:8b:
43:ba:7c:52:b7:54:5d:56:26:7e:89:db:02:b8:c4:
1d:3b:7c:23:ab:c0:2b:19:25:4d:ee:8e:a2:78:a4:
74:42:22:cf:94:10:47:17:e8:1f:b7:b2:43:60:43:
02:e4:68:f7:2c:a5:85:02:04:1c:b7:52:c5:8d:24:
d2:27:fb:25:98:df:f0:aa:d9:58:0c:b9:48:1a:2d:
29:95:80:31:2b:c7:de:4d:b4:c1:31:8d:f6:3d:5a:
68:a1:5e:db:1b:c8:2a:92:2d:ef:ef:63:36:2f:89:
88:31:28:a9:00:de:90:f4:3f:84:0c:0e:9f:d9:20:
16:fd:14:ca:e3:07:c4:eb:63:0b:15:71:51:42:67:
d8:cb:70:f5:80:ed:47:d6:a9:4c:e3:93:8f:ca:e7:
a6:49:62:5a:bb:9b:0b:15:39:49:72:0b:aa:50:36:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:29:C4:FB:5A:21:59:A9:07:08:92:BD:22:A5:B4:CB:B4:82:6E:75
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:4a:d8:6c:a1:c6:f8:53:8b:b0:86:2c:4a:29:4d:72:d3:2f:
23:bb:55:91:88:0a:c6:14:cd:7d:0b:6d:46:df:c6:b2:7f:b4:
54:44:1e:19:bf:2c:3b:01:17:22:12:d8:19:1b:2d:93:88:df:
bf:cb:7c:d1:9d:c4:a5:2b:51:9c:30:46:74:a1:32:b4:77:72:
73:26:f2:c3:b9:b8:33:22:46:b4:04:67:c0:5e:3b:c4:e1:44:
c1:ff:d1:f6:3f:15:cd:a6:10:4d:1a:66:f5:c1:4e:9c:d1:24:
12:b5:b2:ca:c5:9b:a9:4d:41:a6:cb:c8:ee:eb:e7:7a:cf:88:
8d:3c:ff:80:fd:1a:f5:03:36:72:00:aa:01:d0:f5:0e:7d:89:
c3:89:ed:5c:d4:f2:a8:f4:ca:1a:96:85:41:cf:2b:be:0b:33:
e6:b9:ea:19:66:38:dd:97:d7:7a:26:5c:4b:31:a1:16:23:dd:
fd:40:d0:54:bc:b2:4e:91:38:af:f8:02:32:64:02:57:55:4a:
cc:82:89:ce:bb:6b:4a:1a:9d:2d:de:29:d1:6e:65:55:65:64:
cb:02:d6:05:2e:cd:f8:d6:9e:4c:cc:c1:35:e3:fe:ab:32:3d:
ff:0b:bb:56:c9:ab:91:12:9a:a1:7b:e1:69:09:9a:d4:b3:36:
45:0e:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:34 2025 by rpki-client