Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: IvejIhy0aXNeu6aav5umVcsxsArZmf793I/SMhvQKxE=
Subject key identifier: 74:57:0D:FD:BE:10:E4:49:EF:33:EB:C2:EC:AF:26:82:BB:65:59:74
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 019A72264CFF90BA026F9849B0A1C6197021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 09:01:43 +0000
Manifest this update: Tue 11 Nov 2025 09:01:43 +0000
Manifest next update: Wed 12 Nov 2025 09:01:43 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: D8f650yo01jlUGIKscIl464+zBMcI0itTvB2mp6IEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4c:ff:90:ba:02:6f:98:49:b0:a1:c6:19:70:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Nov 11 09:01:43 2025 GMT
Not After : Nov 12 09:01:43 2025 GMT
Subject: CN=74570dfdbe10e449ef33ebc2ecaf2682bb655974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:ae:46:71:52:4b:54:87:37:bc:f3:3e:e0:
72:66:d3:35:ea:fa:34:30:24:9a:08:8b:56:2d:12:
16:27:50:de:2a:7e:f1:24:56:0c:b2:df:d1:aa:b7:
1f:b8:ca:8c:08:c6:d5:76:56:33:0c:82:e5:63:ec:
5c:0c:bf:1c:a3:e3:5a:74:19:82:2a:bc:88:9a:12:
46:2c:ab:80:e1:d3:c2:85:99:77:a7:a3:89:5b:f0:
49:65:82:7b:48:7b:a7:e5:6a:f5:92:b8:4c:65:57:
2e:42:f4:bb:7c:08:32:93:56:09:43:1b:6c:82:de:
2d:0d:d8:1d:64:a4:f3:16:df:cc:08:d2:bb:27:b8:
28:fa:61:31:0f:6b:c6:9a:e9:fb:bf:e0:52:af:ea:
03:34:da:bb:9a:ab:33:b8:11:32:49:d2:90:e7:f4:
e9:a0:8f:cd:ab:43:c7:7e:42:61:f4:53:26:47:d2:
ac:56:3c:46:a9:1b:41:c0:3d:7f:4f:ed:a6:0b:91:
16:3f:96:26:a9:e7:ab:56:f4:46:17:05:17:1f:a8:
6b:9d:fe:dd:c4:ff:a5:d7:95:ee:11:bc:6f:64:2e:
ed:45:ba:e8:25:77:1e:cd:f4:20:ce:27:08:fb:74:
e1:5d:62:da:69:8b:63:7d:2b:88:65:8a:90:a4:78:
85:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:57:0D:FD:BE:10:E4:49:EF:33:EB:C2:EC:AF:26:82:BB:65:59:74
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cc:f5:a6:b4:95:dc:bc:6b:a1:99:d3:a5:fc:13:46:ad:c8:
9c:4f:a7:3d:32:37:04:6e:46:69:1a:61:7a:00:63:7e:a8:14:
91:38:4e:37:5e:8f:55:68:4b:a4:2d:d9:0a:94:41:30:7a:4f:
7e:dc:3a:44:e3:4f:ee:0c:ff:03:ba:3f:47:f2:26:45:3a:97:
da:8e:fa:b9:10:af:79:8f:f1:b8:25:24:97:82:06:fa:6d:57:
60:a8:7d:c7:74:d6:19:4c:0e:f6:16:d7:80:fe:94:c5:02:2f:
e4:9c:df:97:7d:c2:bd:67:fd:c8:4c:89:21:3c:a9:3f:61:bb:
77:7f:02:2b:c1:7c:be:a3:72:ed:ba:9f:cc:0c:fd:3c:e5:44:
68:78:b7:57:2d:96:65:dd:a7:04:39:34:81:14:64:3c:64:76:
08:0d:16:b2:86:33:45:14:62:c9:60:b9:58:77:31:cd:6c:d8:
c0:a9:b5:9e:3a:78:9f:62:50:14:ab:fc:10:ec:d9:95:75:62:
63:90:b4:c4:b7:8c:9f:31:5c:ff:94:70:b1:1b:78:c3:bb:47:
fd:8d:0d:fc:ff:a4:b2:da:43:58:c1:72:e0:38:ac:5b:d7:f5:
27:5c:50:f9:b4:74:f6:2d:6a:5d:5f:91:58:b1:49:8e:ff:42:
2f:1c:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client