Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: G+eEzOss8Fhui+Ctuospn89ieRc6ttQ80jK010XyCWg=
Subject key identifier: FA:43:3B:20:B6:46:7F:77:60:D6:D5:DA:CF:26:05:13:5F:AE:6C:72
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019A4E4F4C1D96C73D33B5C4C3EDC8C04878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 099C
Signing time: Tue 04 Nov 2025 10:00:10 +0000
Manifest this update: Tue 04 Nov 2025 10:00:10 +0000
Manifest next update: Wed 05 Nov 2025 10:00:10 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: mlwder9Z16R3oVgjHMTMfMRYT39k6Q2Col8Ts2/UqcA=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4c:1d:96:c7:3d:33:b5:c4:c3:ed:c8:c0:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Nov 4 10:00:10 2025 GMT
Not After : Nov 5 10:00:10 2025 GMT
Subject: CN=fa433b20b6467f7760d6d5dacf2605135fae6c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:0e:98:ea:1f:7f:62:d7:34:eb:1f:6c:d0:
89:11:bd:84:28:94:5b:ba:1c:42:9e:6c:a1:7a:bc:
69:f4:d8:02:32:06:a5:00:21:b0:6d:9f:e6:31:f7:
14:21:5b:44:9f:eb:fb:55:85:10:fd:04:c8:32:11:
5c:7d:7b:fa:3a:49:b8:d4:c9:c1:90:ee:3f:c6:6f:
eb:ba:b7:bf:7d:2f:14:4a:f5:94:3a:19:ce:11:68:
91:08:12:c2:7e:e1:eb:e5:d6:3d:60:31:e9:3f:46:
8b:c6:b1:3e:0d:a0:50:44:17:ce:97:59:e5:f1:29:
9d:47:78:7c:e3:a4:5d:79:c1:d0:9f:70:ab:13:4b:
67:7d:10:92:fa:1b:e7:b4:eb:91:37:73:32:07:44:
86:2b:0d:94:9f:ea:54:13:c2:56:c9:8e:6b:52:fd:
81:b0:4a:1c:49:fa:c0:fc:40:0f:6b:a2:1e:5e:47:
c3:63:a3:51:6f:26:9b:dd:2d:7b:ba:f2:fa:fa:61:
df:0f:94:56:24:eb:fa:fb:7c:a9:ea:92:41:02:43:
b8:ba:87:82:83:9e:b1:fb:13:f7:01:ec:d1:2a:f2:
60:6d:52:c3:38:d8:78:29:f3:89:58:38:e4:2c:77:
1a:4a:62:06:b1:64:ba:54:f5:22:8a:27:11:37:d8:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:43:3B:20:B6:46:7F:77:60:D6:D5:DA:CF:26:05:13:5F:AE:6C:72
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:c9:6d:e9:8a:20:6f:4c:35:90:d5:47:e6:be:5a:bd:b6:
4f:4a:5e:0e:67:b7:2e:58:69:7b:b9:94:f9:a8:8f:62:2a:38:
1e:3e:5b:c8:10:e5:ff:9d:ca:e2:41:cd:30:9f:4c:5b:8c:fc:
64:e0:cb:6c:24:85:c7:c0:fa:3e:08:ab:8b:41:89:4a:5e:7a:
2a:60:9a:3e:f6:0d:a2:e4:6f:7b:c7:27:9f:c0:b6:78:88:cf:
53:79:b0:df:c7:79:af:dc:cd:2c:e8:a0:d8:49:4d:65:4b:b2:
77:ea:e9:35:3d:0b:5b:b4:fe:12:fc:2b:1e:c5:83:4d:5d:f7:
ed:d1:ab:22:96:b6:af:b9:98:26:0d:03:1c:0b:bb:aa:df:61:
90:85:90:43:0f:99:5a:58:37:18:8f:34:96:6b:9f:c2:5d:7c:
28:03:04:ce:4d:70:2f:0b:74:04:f4:ce:30:24:88:97:51:3c:
8f:9b:a5:24:93:8f:74:6f:d2:cc:30:53:a5:65:be:97:c7:3b:
13:36:71:af:9a:9f:01:e5:13:17:b7:cb:23:0b:97:68:28:42:
02:28:be:98:d9:ea:60:3b:db:be:16:4d:39:2b:5a:0c:c6:e4:
d8:9a:6f:67:67:76:dc:29:fc:74:31:b9:b0:dd:e5:1a:57:ef:
58:b2:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:02 2025 by rpki-client