Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: QF2+8eOl0S3GX9KeCbhIa4Il92ZUGM9bOc/rIVDp4fs=
Subject key identifier: 3A:38:C0:A1:24:EE:29:30:FD:24:DA:B8:F0:0E:9E:14:3F:DA:8B:77
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019A72936878D08F7CA988B27040A8BE10BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0792
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: ii2hTRNKoohtmse42C0HOzlm6Nkoi0U6xD4LIt6GhEA=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:68:78:d0:8f:7c:a9:88:b2:70:40:a8:be:10:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=3a38c0a124ee2930fd24dab8f00e9e143fda8b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:1b:02:ed:58:8a:52:aa:a3:51:e3:f0:67:
81:4d:86:a1:48:28:5f:1a:70:3e:1c:41:6e:80:d7:
82:6d:d1:5a:d2:86:37:62:6e:8d:5f:46:9a:4f:41:
71:08:e5:ea:cf:c7:b9:af:15:82:75:d2:fb:19:c2:
00:50:a6:08:94:b0:cc:a1:17:a2:7b:ee:5c:4d:97:
e4:93:b8:0f:8c:2d:d6:65:70:9b:60:ee:7f:5e:94:
4c:f2:78:89:ea:c0:70:1b:42:bd:5e:29:19:90:f6:
1c:22:ed:ed:0f:4a:84:91:46:91:ae:b7:75:09:58:
80:df:32:55:1d:15:d9:00:90:8f:38:2a:3d:8a:36:
06:db:a9:e9:21:95:9a:ac:79:c6:8a:43:c7:9e:2c:
a0:b9:b8:57:1f:ce:0d:e6:cb:ef:32:b8:bc:4f:82:
eb:66:15:f5:5e:55:34:92:42:7e:2b:21:78:a4:46:
9d:25:ee:95:66:f6:6d:f1:72:17:49:dc:6b:8f:6b:
2e:c9:81:2f:06:b7:2b:a5:15:9d:34:fa:ed:5d:a5:
0b:c9:88:98:6b:56:96:62:f4:be:73:64:f0:e6:e2:
60:55:eb:94:ae:61:47:d7:9f:31:b9:70:80:77:e0:
1d:aa:9f:cd:ed:5e:c1:da:11:62:c0:7b:8a:05:7e:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:C0:A1:24:EE:29:30:FD:24:DA:B8:F0:0E:9E:14:3F:DA:8B:77
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8e:66:af:46:e9:ac:e1:51:14:f3:ba:75:dc:e9:f0:52:7d:
67:bb:f4:09:31:b6:7f:f4:f9:29:9f:c7:0a:72:3d:22:2f:40:
40:4c:07:25:6d:ab:8a:fd:29:ef:5b:0c:12:42:f2:0b:4f:bb:
a5:d8:2b:f1:01:89:bf:46:69:d3:16:10:b6:a5:83:b5:e4:c5:
ce:aa:4c:74:4a:8a:8f:8e:4b:7f:03:4f:80:d7:bc:ed:4f:66:
05:8c:6e:17:e6:2b:c5:fe:88:a3:c5:74:10:77:03:a2:71:87:
0c:40:75:67:f4:31:95:38:9c:47:a4:8c:d9:e5:44:ba:27:55:
0d:e0:a9:59:0a:14:4e:51:c3:d9:65:32:de:a1:ba:d2:fe:c0:
79:12:dd:5b:e6:11:fc:5c:5b:88:54:8c:7c:fa:df:0d:91:6b:
d3:3e:a5:be:13:06:d0:a8:c9:5e:72:fc:18:68:87:b0:a9:7a:
88:17:ea:67:67:bb:e4:f8:eb:e4:0d:b6:8a:49:9a:3c:59:40:
70:de:e8:38:95:9a:f4:68:b2:11:34:e5:f9:2b:30:b7:c9:d9:
b3:e1:69:76:ff:8f:77:61:02:2b:d7:89:89:5f:53:43:68:f8:
10:dd:65:31:1a:69:18:e6:4c:18:16:9c:24:7c:8a:af:9a:5e:
fc:ca:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:39 2025 by rpki-client