Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: Z+urRkS30w4A3WiUvEyZeBHm7JbQM7qtjIl57jMS/ks=
Subject key identifier: F9:5B:81:2D:A9:B2:40:C5:2D:B6:9D:77:78:8B:7F:AC:92:81:17:58
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019A53759A471B3F1F6019FE6E3E534551A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 05D6
Signing time: Wed 05 Nov 2025 10:00:07 +0000
Manifest this update: Wed 05 Nov 2025 10:00:07 +0000
Manifest next update: Thu 06 Nov 2025 10:00:07 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: VO6v2C4LLv61gR6ryQZ7YFBr2QJf1HNyJ/BOO4Uu58E=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:9a:47:1b:3f:1f:60:19:fe:6e:3e:53:45:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Nov 5 10:00:07 2025 GMT
Not After : Nov 6 10:00:07 2025 GMT
Subject: CN=f95b812da9b240c52db69d77788b7fac92811758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:e8:ad:e6:b8:75:40:5b:a4:89:10:05:2c:
3d:e9:fa:8f:a9:84:81:61:73:9d:ee:1d:e7:1e:1c:
e0:74:75:e8:d3:ef:40:49:ca:a2:20:54:96:17:19:
63:87:7f:30:bb:e8:ff:9f:d0:40:a2:10:35:52:6f:
96:bf:c4:0b:4c:2f:7f:d3:3d:71:d2:c2:ab:b7:1a:
1c:25:65:1a:fc:ef:bc:64:a5:bc:96:5d:63:2b:ca:
f9:6f:b4:0a:e7:3c:52:cf:86:a5:20:d3:97:ba:0e:
92:49:6c:8b:8c:b4:5a:8f:cc:ae:04:2f:64:de:43:
24:e8:6e:06:0d:57:d3:54:1d:bf:d4:de:5e:ca:e5:
69:98:b9:a5:0d:1d:06:d2:bc:f7:0c:36:b4:82:65:
b3:5b:30:9c:85:42:d5:7f:e3:ec:5d:d1:c2:ec:5d:
52:f9:03:3e:c9:6e:ac:35:59:4a:4e:12:bb:d9:83:
13:47:4e:f1:3a:79:64:b2:06:d1:96:f9:f3:43:6f:
2b:2c:59:28:91:a5:3d:57:c4:43:5f:0d:4f:56:e2:
e3:eb:99:94:af:5b:bc:67:ff:cb:42:30:b0:e9:85:
d3:01:1f:7e:a6:8c:d4:a5:7b:82:7b:17:7c:51:cc:
9d:20:07:c7:1c:25:0d:d3:7d:60:6c:09:97:06:8a:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:81:2D:A9:B2:40:C5:2D:B6:9D:77:78:8B:7F:AC:92:81:17:58
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2d:15:62:b2:8b:ab:86:88:39:46:ba:cf:d1:28:12:de:43:
e5:84:ed:23:d9:8b:2f:14:bd:dd:cd:b9:2c:d1:15:42:64:54:
d5:07:fd:a1:da:71:51:bf:05:95:2f:c2:73:d4:9b:d5:05:cb:
45:8a:a9:e6:32:b6:0e:72:9a:8a:d8:28:cf:b8:df:9c:3d:fd:
7a:9a:8e:23:77:cb:82:ee:15:24:24:3e:a1:0f:67:f2:88:c6:
8d:9e:c6:f1:19:be:7a:1b:34:eb:04:42:20:e1:45:c3:35:62:
58:16:db:36:a0:97:bc:72:46:8b:42:e5:1d:54:51:27:8a:26:
d9:49:87:4c:fb:5c:97:62:c3:83:41:ec:26:7d:38:27:4e:2e:
da:bf:07:d4:7c:50:2e:a8:30:c8:a2:03:fa:d5:ef:e1:6d:91:
65:c8:1e:09:80:5e:ca:53:70:09:06:28:62:3a:3c:e4:d4:3d:
cd:05:6d:35:36:4c:b7:d4:43:f3:65:e0:6e:d0:75:1f:e0:44:
b0:17:23:4f:3b:82:d2:52:a3:1b:30:70:3a:05:6a:f4:61:64:
72:a1:fa:8b:72:71:1d:e1:f1:23:4b:10:79:c9:d5:66:da:55:
8f:73:62:40:1a:cc:ab:21:94:e1:8b:e8:99:e2:b0:b8:77:c2:
1d:d6:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:32:55 2025 by rpki-client