Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File: B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier: u+3zzhTbNROtPaTbG2HMLrsaFwl2tYJCG0EO4VqvCsg=
Subject key identifier: 90:88:5E:A9:B9:19:E3:B9:86:10:7F:4C:57:C3:59:92:34:03:30:DF
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer: /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial: 019A613200DBF417522CD52B0370F0C6B79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number: 03CF
Signing time: Sat 08 Nov 2025 02:00:58 +0000
Manifest this update: Sat 08 Nov 2025 02:00:58 +0000
Manifest next update: Sun 09 Nov 2025 02:00:58 +0000
Files and hashes: 1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=)
2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: 2h4LjU3b000ileSznR0+89BLJ7qdZ0jUdC7EtMmoCBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 21:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:32:00:db:f4:17:52:2c:d5:2b:03:70:f0:c6:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
Validity
Not Before: Nov 8 02:00:58 2025 GMT
Not After : Nov 9 02:00:58 2025 GMT
Subject: CN=90885ea9b919e3b986107f4c57c35992340330df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:7c:19:56:76:89:a7:fe:56:22:66:f0:89:
d8:a3:45:2a:82:eb:ee:56:93:2f:cf:eb:69:e4:7a:
1e:46:fe:90:f1:49:1f:00:44:7a:5c:f1:ad:02:46:
e3:3e:22:7c:13:31:8d:ab:ef:4c:1a:bb:ca:94:72:
a2:57:9d:46:94:7c:e6:c7:d0:e4:c5:d4:65:5a:80:
e5:02:d7:83:f9:2f:02:c6:48:0d:68:7e:1b:c7:e4:
cb:7e:56:86:cd:cd:c2:7f:11:c8:2d:8b:85:79:a6:
f7:f5:e2:9a:9c:ef:44:7c:82:b2:e3:c3:bc:58:d3:
10:da:17:b1:ef:2c:3e:01:64:f0:34:e0:ea:ad:79:
99:d3:02:d0:10:8b:9e:9a:3a:8f:70:d5:54:c7:fa:
9d:33:04:2f:26:0e:23:38:f3:b5:64:af:44:6b:ee:
09:4e:4b:27:01:76:9f:58:aa:2d:ec:1b:2c:12:80:
50:e5:2d:72:9c:de:c0:b5:61:26:d5:ea:58:6d:81:
01:ea:8b:54:29:90:73:10:b5:c7:b0:d7:41:16:0f:
f1:ba:98:bc:54:71:53:53:c9:5e:34:c8:6e:ac:19:
32:17:af:62:5b:52:e6:8e:bd:8e:8d:23:ba:49:c6:
43:3e:12:99:0f:a8:5c:f1:72:6a:d7:d6:58:c3:93:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:5E:A9:B9:19:E3:B9:86:10:7F:4C:57:C3:59:92:34:03:30:DF
X509v3 Authority Key Identifier:
keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:ca:08:7d:1b:f6:b0:01:b6:e6:58:d0:79:32:dc:e4:e8:
b9:4a:85:cf:4f:3e:b1:cb:a7:04:eb:cc:3f:c7:64:24:b5:85:
79:79:c8:bd:90:9f:e3:1c:df:01:6f:2b:0a:b4:b8:61:eb:62:
86:5e:5f:b6:85:70:2f:cc:42:08:1b:3c:89:1f:14:c7:61:99:
a7:9c:52:7e:78:61:04:28:30:9f:c2:2f:c8:7f:33:8c:b8:87:
07:9d:29:aa:ee:cb:6e:36:6c:d4:8b:78:60:f1:b3:43:6d:db:
9a:5a:21:d1:ea:b8:61:3a:d9:5f:38:82:60:7e:a2:68:8e:9f:
33:0e:e1:f3:58:5a:de:3b:95:ef:02:78:8e:06:24:06:27:41:
e1:42:0f:b5:4f:c1:c2:2e:4a:e7:fd:62:06:26:f5:87:3f:da:
df:c9:19:9a:2d:89:1d:37:b8:69:1a:45:21:03:46:5e:ab:16:
99:dd:7e:7e:53:14:14:3c:55:0c:40:0e:6b:f7:22:b7:0f:5c:
4b:7e:2f:f5:0c:bc:de:a8:64:75:1b:0a:26:ac:3c:d4:18:f9:
bd:39:9a:0e:6b:60:d5:bf:ff:11:02:2d:6e:84:40:91:f8:81:
bd:74:31:e5:16:fd:5e:75:60:18:1c:75:ee:ce:e6:e3:2d:fc:
02:cb:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 03:34:25 2025 by rpki-client