Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: JQ0Ms4l9TZOt4WOxz/jotJG7OcqTwS0QcyhHNqg7hPo=
Subject key identifier: B3:A0:E2:89:98:9D:96:13:77:37:20:19:E5:55:E4:B3:F0:88:28:8C
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019A4EF5E4C3D60F9540CBF8B425E948124A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0A51
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: 84at/yi8Qy9mS2mSb+/mKAlRh1gbHv7kBJvD4JDFIc8=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e4:c3:d6:0f:95:40:cb:f8:b4:25:e9:48:12:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=b3a0e289989d961377372019e555e4b3f088288c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e7:a2:54:cf:21:3a:d4:c8:54:b9:16:4e:73:
b6:13:04:86:a6:9b:1a:45:d2:f6:64:b0:73:2f:09:
b9:dd:89:6b:b1:a0:e5:fc:26:06:60:da:d8:d1:ce:
f4:c0:6f:f9:75:8b:f2:04:cb:2f:f1:fd:b5:b6:38:
cf:91:b2:9e:da:ea:eb:49:f0:ea:13:8d:db:a8:77:
53:c1:9a:59:e2:28:74:3d:a6:97:d4:9a:b5:5d:36:
eb:1b:7b:ad:f3:cf:9b:82:63:ef:c6:ce:67:4b:83:
63:19:3f:02:4d:d8:3f:53:c9:79:14:7b:9a:b4:ea:
86:a8:87:a5:05:35:2b:3a:26:9e:0a:b9:cf:4b:8f:
22:89:70:24:a7:f4:9d:b2:93:e9:fa:2f:e5:c2:c1:
4b:06:a6:2f:c4:68:a5:15:09:b3:90:02:21:ad:d3:
29:40:f1:0e:2d:31:15:21:ef:52:90:b5:ad:fe:57:
59:cb:40:8e:7c:af:e5:f1:d1:ef:19:3c:10:63:29:
cc:d5:75:c2:8b:bc:c4:b7:c5:6f:13:3b:7b:d1:18:
3a:ba:83:56:78:40:02:ea:7f:6d:eb:8a:8c:8a:a5:
99:66:ad:c4:ba:5f:70:2f:0e:df:a2:73:77:91:57:
9b:0c:1d:00:c5:4d:6d:3c:41:56:1d:2e:d3:4b:5e:
14:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:E2:89:98:9D:96:13:77:37:20:19:E5:55:E4:B3:F0:88:28:8C
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:08:65:5e:9d:8e:f1:0b:01:fd:c6:cf:19:c5:bb:ce:b7:11:
0b:10:a0:92:96:8e:8a:b8:f3:51:90:a7:aa:a9:8a:a6:a1:7e:
b3:5b:8b:30:1c:53:9b:3e:d6:6a:11:65:b8:fe:1a:cc:ee:5d:
17:de:58:b2:ea:2c:09:f6:fe:d2:9f:34:b5:66:62:03:a2:73:
c1:9e:85:25:d5:0c:ed:76:43:17:9f:e3:8d:25:e1:d8:5a:47:
ed:dc:d6:40:dd:71:3d:f3:c8:5e:77:15:f0:15:79:7a:4a:b8:
eb:59:ba:9c:36:4a:29:34:e7:35:1a:ab:c5:cf:b3:97:a7:f4:
f8:85:f3:60:8d:c6:92:ed:f0:24:53:92:e5:ce:17:4a:51:1d:
e0:08:72:16:16:98:ae:54:2f:b1:ce:60:86:75:6e:50:de:b7:
7f:73:a4:7b:d0:31:43:d1:f8:61:73:dc:7b:1e:86:89:84:15:
80:5e:40:14:e7:e9:dc:f5:4e:61:12:be:20:bd:7b:90:6c:61:
51:e2:35:e3:fe:a3:d5:c8:68:d3:c5:1c:b2:5b:07:24:c6:10:
e7:f8:d1:ed:c4:07:e2:91:42:f9:f5:94:9e:10:ec:8d:7a:a6:
c2:dc:be:55:94:1a:ea:8d:8f:7a:ea:b0:9a:50:dd:ca:51:ee:
e8:b7:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:23 2025 by rpki-client