Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File: v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier: vBeCcJ2a0lplwJ9bdn3rozXMKqFSVZEapPOcPaDnLsU=
Subject key identifier: C4:65:54:EE:59:04:6B:4A:69:FD:CA:4A:60:2A:60:1A:B0:EB:D4:01
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 019A4DAA663E119F009766E77370F50139E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number: 0B51
Signing time: Tue 04 Nov 2025 07:00:04 +0000
Manifest this update: Tue 04 Nov 2025 07:00:04 +0000
Manifest next update: Wed 05 Nov 2025 07:00:04 +0000
Files and hashes: 1: Pbu77IMqgBIggCHuoPCgPeA-JYI.roa (hash: MfbYLWDGe0vBfVw8/15weNnWm0f+1AXVR3Lu2ooMJ2Q=)
2: SJ31osOZq8GAkUzTcgDMle6L-Ko.roa (hash: OpBd6e9+J397K48R0gJPVRSyhgNBftdRPHKKbxpf8EI=)
3: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (hash: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=)
4: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: mEcKBLvlnn1yTTY7OhIqT3pbLe0PBk6fqNd2PaO64mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:66:3e:11:9f:00:97:66:e7:73:70:f5:01:39:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Nov 4 07:00:04 2025 GMT
Not After : Nov 5 07:00:04 2025 GMT
Subject: CN=c46554ee59046b4a69fdca4a602a601ab0ebd401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:46:40:88:72:79:92:7e:57:78:76:bd:52:
67:31:79:44:9a:f9:f1:ba:a0:23:34:22:38:08:9f:
fd:56:68:fe:70:dc:0c:1b:0b:9e:4b:e6:25:cd:0d:
aa:75:bc:b1:ee:7a:a6:32:01:48:0e:76:20:f1:fc:
44:e7:fa:39:b2:18:29:b6:58:7b:fb:af:fa:a1:3a:
26:4e:1b:96:c5:b4:81:b1:32:98:92:b9:6a:a3:a1:
66:80:85:d0:2b:dd:f9:40:2d:7c:fb:35:36:7e:8c:
d1:bf:92:5f:93:c1:d2:00:97:d5:b1:ac:2e:07:92:
35:d2:bc:ce:45:0f:e3:51:8e:3e:b5:01:0a:ca:8d:
08:5f:01:f2:d2:4e:2e:36:1b:a8:aa:d9:e7:f6:84:
02:d2:db:78:c9:d6:65:54:0d:89:b8:19:8c:94:83:
42:b3:91:e7:0e:d0:04:64:e4:a9:70:11:2c:d0:66:
ab:fc:8f:7f:0c:59:b6:1b:df:2c:9a:47:03:1e:d6:
26:ef:cf:7f:04:10:0f:6f:22:1b:46:0d:0c:70:2b:
95:f4:a0:bc:2d:b2:de:46:dd:77:18:8e:dc:3f:a1:
cb:c6:52:61:df:ab:bb:f9:66:e2:22:11:a4:76:9d:
25:16:46:17:d6:e9:66:a3:e9:2b:16:c4:9d:c8:f6:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:54:EE:59:04:6B:4A:69:FD:CA:4A:60:2A:60:1A:B0:EB:D4:01
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:73:9a:00:e6:de:68:12:62:58:f6:1c:ce:cd:99:1a:fd:e6:
9f:81:f1:6e:15:d8:a5:ba:09:fa:65:b3:f3:6b:b7:b3:b9:26:
c6:d1:62:c8:a7:99:92:13:f8:04:cc:04:d4:53:5a:68:03:12:
7a:39:1b:6d:f0:32:14:26:3e:63:96:64:1a:5e:0b:b2:92:b1:
77:27:99:fc:f0:be:4a:81:27:fe:74:f7:f3:dc:36:f6:52:a7:
91:6b:15:da:cc:bb:51:40:08:24:33:b6:a3:48:a6:99:13:0f:
5d:86:f9:76:13:95:54:46:c5:0b:b1:ed:c1:6f:82:68:bc:8a:
e5:00:17:c2:99:bb:67:d6:3c:a6:6f:d8:60:41:7f:d3:ec:b8:
f0:58:3d:43:12:ab:45:8e:a7:15:e6:3d:6c:ab:0d:89:9c:e7:
35:49:5c:ae:20:74:1f:e1:d9:de:38:c8:1c:51:d2:28:15:30:
96:98:06:6e:78:47:ff:4d:e6:4a:22:b1:0d:b7:c9:45:6f:93:
0c:cb:2b:69:5f:72:39:a9:ed:d1:bf:a9:97:a0:db:a3:d6:0f:
60:8a:6d:47:a2:36:7d:54:4d:00:ae:f5:3f:68:a6:d4:94:93:
cc:e7:eb:a6:86:54:de:ef:fd:ba:11:34:66:e5:dc:4b:db:30:
c5:28:8a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:32 2025 by rpki-client