Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: L3jUJMTbx1g0ZynePHadg5fMVgLxlCAlDRXjfs2Ctew=
Subject key identifier: 4D:11:63:EB:2B:9B:AD:1F:AD:ED:A0:26:AC:33:88:14:C0:08:B6:6A
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019A4F2B4900EA2610632DB115F9BE87CD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: 4LBBHQ2Y6+NePS+aEBSJg3YjiFGqnDVqvl/7XmhFXeo=)
2: npXHmGXZGuLcOHTCUM12CgHnXyg.roa (hash: 1gC/eDL6k6iHyWBQvbxBWaVuZWHOyh/0XMWrseRbP5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:49:00:ea:26:10:63:2d:b1:15:f9:be:87:cd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=4d1163eb2b9bad1fadeda026ac338814c008b66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:16:64:d6:e0:6d:fc:01:9b:7f:d4:5a:14:
e7:37:1d:c9:11:23:1f:d9:4c:04:e5:3b:ad:15:8e:
c8:25:cb:5f:cc:77:75:5e:63:30:ec:b9:7b:e3:f6:
aa:f6:85:e9:5b:ac:e3:aa:88:02:70:55:b5:57:b9:
9e:be:91:3d:56:b3:92:86:b6:0c:c0:5f:ec:e1:a3:
52:5d:d8:26:b7:02:14:ab:a2:03:4e:61:66:ec:47:
35:cc:5b:09:7a:f1:9f:e9:c5:ae:07:c0:f0:a2:43:
1f:92:24:ed:15:42:bd:b4:77:2a:61:8c:8b:06:c5:
a2:7f:c6:fc:e2:bb:13:e2:78:a8:72:02:5a:05:ff:
9b:bd:86:dc:68:fc:df:81:23:d5:55:73:02:08:55:
bf:12:e6:b0:03:64:75:69:93:35:80:ee:9c:e4:94:
ef:05:dc:42:3f:cc:d9:b8:76:c2:f0:ea:21:71:87:
96:60:6b:1c:11:e7:64:0a:86:29:ee:24:85:7e:f9:
68:13:fa:51:85:ef:6f:22:07:e5:e0:e1:cc:82:70:
b9:05:73:20:ec:30:25:b6:6a:42:da:89:18:50:26:
5e:a7:18:b1:4c:d5:ff:00:66:71:6d:64:d5:74:78:
0d:86:d3:da:10:bc:f6:e6:b5:1f:eb:9c:63:a5:e5:
13:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:63:EB:2B:9B:AD:1F:AD:ED:A0:26:AC:33:88:14:C0:08:B6:6A
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b3:8d:eb:1b:7c:69:b4:3d:93:b5:11:22:97:66:7a:a6:0f:
6e:27:4d:fd:61:ab:1c:65:58:dc:5d:21:ba:df:e1:19:f3:b4:
02:2e:a6:23:b2:24:db:98:26:a6:6c:9f:ab:95:25:df:9b:e0:
60:ae:a7:c4:42:b0:fb:b1:da:11:e5:0c:cc:b1:f6:1f:fe:33:
e1:3a:e3:4c:d9:d4:57:32:d8:df:a4:cc:cd:65:88:5a:f7:91:
a2:e4:b3:ed:81:5a:e0:a1:2b:5d:c9:04:e3:f0:48:25:60:8c:
e3:5d:8b:cf:40:e6:09:89:9a:d7:36:c7:b9:b3:fa:b5:92:eb:
b3:00:46:d1:ba:b6:54:6c:68:16:04:12:4b:1d:00:00:d2:f8:
91:10:7a:dd:6d:b5:38:8b:13:4a:64:61:85:57:07:b7:b4:f4:
16:f3:8d:6f:fe:a7:c3:b1:65:28:81:d0:66:14:b2:cd:38:3c:
39:f9:30:b2:d5:27:88:26:bf:d7:6e:8d:a8:c7:a2:cc:76:de:
16:bd:5f:ad:54:f3:4f:d2:74:17:be:b7:7f:24:6a:aa:c9:5f:
f3:62:ac:60:61:83:2e:15:45:11:7c:2e:bd:6e:95:70:a6:82:
4b:3a:01:4a:fa:bb:87:b5:0c:99:bc:c0:55:b5:3d:5f:37:8e:
19:5d:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:29 2025 by rpki-client