Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
File: B0Rsf2NCHXPCj4ynf9LUo1chABU.mft (raw, json)
Hash identifier: GmXeGA5nLdjkQ0uZVdMs6tyJ7KHNVAv8KMCt0dCE1h4=
Subject key identifier: 17:56:34:20:E3:66:D9:45:14:22:DE:D1:AC:5E:E7:C4:BB:8F:74:E9
Authority key identifier: 07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
Certificate issuer: /CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Certificate serial: 019A725C98B6555DEB46E7FCE72282BF067E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: B0Rsf2NCHXPCj4ynf9LUo1chABU.crl (hash: dnlEfNu5/D0bO59wTMAylbEDQxHXHirKWHAYriR+d40=)
2: V80Jvy0KLZQjqpeQNIx-dc-Ahgc.roa (hash: 0JhsZS/w87YjLNxBWJNFG7eEJHrJWihhV/iC23LdiYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:98:b6:55:5d:eb:46:e7:fc:e7:22:82:bf:06:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07446c7f63421d73c28f8ca77fd2d4a357210015
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=17563420e366d9451422ded1ac5ee7c4bb8f74e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e3:74:0c:35:a1:7b:c7:f7:94:23:6a:84:90:
10:a8:fd:ea:e0:7b:33:06:9a:bc:57:b3:10:3c:da:
02:18:f9:4d:d5:d4:f5:d4:c9:0e:38:96:b2:70:34:
93:4a:fb:0f:00:c6:b5:9d:8e:36:dc:67:d6:9c:71:
ed:e7:01:09:1d:4a:b0:f4:c0:3b:40:02:48:47:12:
30:58:9c:9e:1f:08:4b:05:4a:fe:8a:25:ed:7d:7f:
7f:f8:ba:f7:56:88:12:7f:cd:ad:ac:ea:37:8b:7a:
1f:5f:1d:fe:85:ba:32:03:68:e5:09:e6:18:bb:ce:
bf:cb:31:21:cd:ac:ec:ea:83:16:49:ee:0b:2c:9f:
aa:50:93:33:43:6b:3e:40:3d:5a:2e:93:84:c7:b8:
15:fd:5d:5c:04:ef:ec:66:27:d8:cf:16:58:ef:e5:
ac:3b:cd:ba:82:34:a9:9c:99:1b:88:79:ca:11:28:
4d:68:aa:e5:7e:95:25:8e:4d:d4:d6:9d:92:42:90:
b2:22:69:ab:da:81:55:1c:86:d9:76:6a:38:85:cd:
6c:71:20:a1:58:98:fe:a5:b9:94:cc:8e:1d:9c:c8:
b3:af:80:92:28:f5:a4:1d:5c:82:0f:67:92:91:75:
95:4a:76:df:21:a5:3e:b8:b1:79:32:81:60:21:65:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:34:20:E3:66:D9:45:14:22:DE:D1:AC:5E:E7:C4:BB:8F:74:E9
X509v3 Authority Key Identifier:
keyid:07:44:6C:7F:63:42:1D:73:C2:8F:8C:A7:7F:D2:D4:A3:57:21:00:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0Rsf2NCHXPCj4ynf9LUo1chABU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0de343-2be5-4309-b7b5-a4f11b04c640/1/B0Rsf2NCHXPCj4ynf9LUo1chABU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:70:e2:83:34:d1:e6:26:80:6b:88:d8:4c:66:f3:ad:17:
32:a2:31:a2:33:fa:88:58:1b:68:9c:9f:7e:f2:3d:a2:6f:af:
45:05:b8:c7:38:4d:1c:88:c1:f4:8c:32:64:3d:15:a4:6b:ef:
13:17:73:12:9d:88:06:c6:5e:8a:37:9c:66:c9:9a:f3:c7:b8:
c6:75:ea:4a:c1:38:f4:12:75:5f:6d:1f:fb:eb:90:02:19:37:
54:53:bd:5e:ef:f2:b0:c8:94:bd:79:2a:81:bb:0b:c0:4a:fb:
d7:4a:58:4b:56:29:5c:92:24:ff:df:85:9c:90:f4:64:75:69:
e6:64:38:3c:46:ed:8d:06:50:f5:49:31:80:c7:25:ec:05:db:
87:2b:42:82:2d:4c:6e:c1:e7:67:18:36:64:71:6d:e5:70:c4:
3f:a5:b2:47:95:d9:00:86:f2:4b:62:81:ed:90:e0:e3:d7:ca:
2a:0a:c9:d1:00:c4:1c:94:c7:85:c6:2c:c8:8e:15:5c:b4:da:
a7:c5:d3:76:7c:fa:f0:51:46:eb:77:6a:0d:fd:70:38:75:a3:
7c:77:6a:bc:6c:b7:34:1c:e5:f2:de:fb:f2:d3:3a:89:d2:fd:
44:f3:df:b2:7d:a8:f7:36:69:9c:0c:f6:32:bd:e7:f0:65:ed:
86:99:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:58 2025 by rpki-client