Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: MBOF3aopm3Jgf/mAdvjEgIQ3Ypb2QUo+vJfWrKCXwvw=
Subject key identifier: 82:55:5D:B0:30:A8:3F:4E:E1:B5:F8:39:9B:20:04:0E:93:E0:F9:0C
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019A7225BA3C03456AB597FEECECB1A513D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: xeqYnGQnJ9cqbZfJzXYtZHYL02PZ9U6qspeAI9e6BFg=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ba:3c:03:45:6a:b5:97:fe:ec:ec:b1:a5:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=82555db030a83f4ee1b5f8399b20040e93e0f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:d8:2f:5f:57:18:61:ed:91:e6:4c:2a:24:
16:ec:3f:d6:e8:90:ee:be:c7:8e:e5:3d:87:38:07:
57:8d:f6:8d:99:78:96:94:40:35:75:16:bc:b0:d5:
c9:dc:d6:8b:ad:9b:7c:25:08:ca:b0:93:f8:5b:2d:
8e:fc:21:ee:e3:5b:c5:d6:c4:2e:15:5e:2c:ef:47:
08:5d:f2:45:6f:83:d1:d9:05:f0:32:3f:91:85:06:
6a:51:5b:35:91:d5:19:1c:f3:39:44:81:5b:5f:09:
55:4a:81:d4:36:a3:10:9b:05:fe:43:7d:25:98:66:
b6:1f:2e:56:8e:e0:4d:33:77:d8:ef:c7:04:56:e9:
b3:ff:96:3d:b7:23:9c:13:0b:30:0a:40:89:91:fd:
f8:ee:61:a8:04:50:bd:1a:76:57:87:35:bc:8f:5f:
b0:22:e6:81:26:c2:cf:b8:84:7c:00:93:f9:68:f0:
23:3c:f6:7b:31:cc:f1:9f:60:d1:2a:94:8f:1e:73:
a2:e5:ae:05:65:77:13:71:53:9b:3a:a0:2c:d2:83:
78:7c:04:48:bd:98:fe:4b:e2:46:68:00:e7:20:85:
05:a4:0f:e1:0e:d1:68:82:15:87:c8:2f:fc:7c:c9:
25:5b:36:c7:9f:72:f2:36:31:68:09:d7:83:7a:7b:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:5D:B0:30:A8:3F:4E:E1:B5:F8:39:9B:20:04:0E:93:E0:F9:0C
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:b3:b4:31:96:2c:96:87:87:79:85:1a:bb:35:b8:3d:31:
0f:5b:23:4b:ed:31:ab:a0:ac:c9:66:f6:27:cb:28:e2:f0:89:
2a:cd:57:8e:97:80:0a:5c:35:4b:0c:e8:a1:cf:a4:43:ab:d1:
c8:2f:07:c6:31:60:db:54:9a:1b:ef:a4:3d:5a:e2:32:0a:49:
63:53:90:87:9a:4f:15:c9:1b:bd:ea:ac:97:c8:be:6a:f5:62:
a4:63:69:76:e7:09:82:99:74:fe:07:8c:9d:2c:29:86:e4:e0:
6a:cf:ef:e0:5f:2f:27:f5:a0:79:37:35:a3:4e:f2:46:38:36:
96:13:05:b3:8c:27:14:a4:3e:7c:c4:93:64:b0:c6:bb:a0:a1:
0d:bc:26:f0:e8:85:25:f1:58:40:de:ff:61:7f:4f:07:a7:6e:
0a:cb:7e:5f:fc:41:a9:72:36:54:4a:b7:72:67:00:d2:4c:67:
87:4f:28:f7:df:85:2f:65:55:2d:32:2b:57:b1:fc:8e:9b:6c:
62:fb:f4:37:fd:01:49:f0:e3:6a:5a:e0:73:f1:1f:a5:ba:33:
bf:fa:8d:d9:31:fb:6f:c6:ad:6d:28:e9:ad:b3:88:2e:7e:7d:
d3:02:8a:d0:1d:7a:4c:27:f7:5a:95:3f:35:7f:66:e6:6e:da:
05:89:ee:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbo8A0VqtZf+7OyxpRPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0
ODg2ZjcwHhcNMjUxMTExMDkwMTA2WhcNMjUxMTEyMDkwMTA2WjAzMTEwLwYDVQQD
Eyg4MjU1NWRiMDMwYTgzZjRlZTFiNWY4Mzk5YjIwMDQwZTkzZTBmOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPDYL19XGGHtkeZMKiQW7D/W6JDu
vseO5T2HOAdXjfaNmXiWlEA1dRa8sNXJ3NaLrZt8JQjKsJP4Wy2O/CHu41vF1sQu
FV4s70cIXfJFb4PR2QXwMj+RhQZqUVs1kdUZHPM5RIFbXwlVSoHUNqMQmwX+Q30l
mGa2Hy5WjuBNM3fY78cEVumz/5Y9tyOcEwswCkCJkf347mGoBFC9GnZXhzW8j1+w
IuaBJsLPuIR8AJP5aPAjPPZ7Mczxn2DRKpSPHnOi5a4FZXcTcVObOqAs0oN4fARI
vZj+S+JGaADnIIUFpA/hDtFoghWHyC/8fMklWzbHn3LyNjFoCdeDensvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJVXbAwqD9O4bX4OZsgBA6T4PkMMB8GA1UdIwQY
MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt
NzUzNzQxYTgwZTk0LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0
LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf2ztDGW
LJaHh3mFGrs1uD0xD1sjS+0xq6CsyWb2J8so4vCJKs1XjpeAClw1Swzooc+kQ6vR
yC8HxjFg21SaG++kPVriMgpJY1OQh5pPFckbveqsl8i+avVipGNpducJgpl0/geM
nSwphuTgas/v4F8vJ/WgeTc1o07yRjg2lhMFs4wnFKQ+fMSTZLDGu6ChDbwm8OiF
JfFYQN7/YX9PB6duCst+X/xBqXI2VEq3cmcA0kxnh08o99+FL2VVLTIrV7H8jpts
Yvv0N/0BSfDjalrgc/Efpbozv/qN2TH7b8atbSjprbOILn590wKK0B16TCf3WpU/
NX9m5m7aBYnu/w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:58 2025 by rpki-client