Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
File: dB4rNVUHc-BTeX92TS4h1l5kKMc.mft (raw, json)
Hash identifier: MOEhg9n4QN+Fx57QX7KCVDXaA9PWwPdVrkYvhz8CdHA=
Subject key identifier: 7B:B0:1B:B6:31:F1:21:D0:06:C6:B0:6F:1C:F9:C0:31:14:4E:6F:93
Authority key identifier: 74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
Certificate issuer: /CN=741e2b35550773e053797f764d2e21d65e6428c7
Certificate serial: 019A71EEF241F532C500AFE8FEBE3A127CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
Manifest number: 027F
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: F9mCTEFo2VHLyLNCvGdkZm7NM54.roa (hash: 0GDWpQx7XDKg8YLSvTng54oqtSqIqPi0Fb+po6xzWT8=)
2: dB4rNVUHc-BTeX92TS4h1l5kKMc.crl (hash: akfbDkuWJmDLT+evJ80Zx0L3qADT+bzQcQr1N7348LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f2:41:f5:32:c5:00:af:e8:fe:be:3a:12:7c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741e2b35550773e053797f764d2e21d65e6428c7
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=7bb01bb631f121d006c6b06f1cf9c031144e6f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9f:b8:d0:da:9b:a6:aa:df:53:65:f5:8d:99:
c9:1c:b2:98:b4:3a:ab:7d:57:6c:e9:72:4e:83:4b:
29:60:cb:5a:cf:4e:cb:09:63:c6:90:de:07:d2:9a:
82:80:3c:d7:f3:e1:c6:0c:71:87:cf:02:fd:7d:58:
31:b7:ec:af:4f:e3:d2:74:e1:16:b3:a1:d2:0b:37:
e4:86:71:f2:8c:97:3b:9d:6a:a3:d6:15:be:d7:d5:
1c:06:f3:88:63:db:a4:50:59:46:3d:8c:a1:69:d4:
fc:29:56:84:4c:be:1a:cd:27:1c:d4:d9:28:c9:5c:
27:5f:62:25:db:51:e7:85:84:33:9d:81:e0:8d:2a:
b6:8f:85:a9:22:21:9d:d8:b5:f9:93:00:f8:22:18:
1f:20:d0:13:20:06:8c:22:f6:93:92:88:c3:ba:55:
10:93:d5:99:ee:2f:8b:f4:a9:8d:1e:7a:e8:f7:82:
29:e7:a1:b4:33:78:37:ea:c1:40:67:55:5a:f3:2f:
e9:d8:c3:91:64:ff:b3:0d:e0:97:ab:21:09:3c:26:
04:a8:b6:29:e4:39:0c:fc:e0:57:04:fd:0a:a7:c5:
a2:84:43:46:0d:26:fa:0c:b2:6b:dd:cf:3c:0e:dc:
cf:ea:f5:a7:80:6e:01:de:2a:b9:59:99:c5:88:ee:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:1B:B6:31:F1:21:D0:06:C6:B0:6F:1C:F9:C0:31:14:4E:6F:93
X509v3 Authority Key Identifier:
keyid:74:1E:2B:35:55:07:73:E0:53:79:7F:76:4D:2E:21:D6:5E:64:28:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dB4rNVUHc-BTeX92TS4h1l5kKMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6b41f5-b7c5-4334-9fbf-b38a6f220e63/1/dB4rNVUHc-BTeX92TS4h1l5kKMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:ff:74:3b:b6:14:7b:49:5c:b8:81:f4:88:a3:b5:f7:c7:
23:6a:5d:be:65:96:71:5f:0a:54:4b:1e:57:64:d0:7b:5d:26:
bc:83:06:80:1c:1f:67:0f:3d:82:d2:d9:10:41:43:59:f7:db:
75:da:b8:15:f3:5f:5f:c7:6d:02:cc:d9:bf:f1:cd:51:48:e3:
9c:4a:7b:34:1e:84:16:0d:4f:d4:49:b9:13:f8:66:fd:18:7c:
6c:b0:84:0a:ea:77:11:72:35:51:35:d3:1d:3d:e6:d0:67:46:
9a:09:dc:25:98:d4:54:46:b9:98:ea:ba:76:f9:93:4c:a5:4f:
7a:5b:48:01:d9:82:3a:f4:84:b3:1b:16:c5:9b:48:94:de:ed:
16:5f:96:09:ea:47:10:2d:b4:90:6a:cb:7e:3d:9a:f5:7b:35:
b2:6a:4f:92:af:4a:01:58:6c:64:ab:f2:0f:56:f8:09:c7:57:
fc:aa:71:8b:b0:54:d4:2e:32:71:f4:d6:07:e9:e3:ac:25:72:
69:8f:af:62:23:12:41:c9:ac:e1:98:08:39:2d:18:a2:0d:6d:
73:bd:68:8d:c7:10:f3:67:54:86:83:f3:20:a4:db:0d:e5:b1:
e9:24:91:14:47:4a:ab:e3:e0:a3:4d:30:04:b8:b5:98:59:33:
4e:81:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:47 2025 by rpki-client