Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: ZZUuktvpi1p34zhKYrQDm7taTXCeG2HWC6iHJFN9E3M=
Subject key identifier: C9:4E:54:15:57:41:BE:67:CB:1E:32:06:D2:A2:AD:A7:48:E4:AA:37
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 019A52D27D8E7BCE13A04140EC4255254BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:01:57 +0000
Manifest this update: Wed 05 Nov 2025 07:01:57 +0000
Manifest next update: Thu 06 Nov 2025 07:01:57 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: MgRQw6LhgB1uc1qcGQKqLJaFaTd4wPN7kKeaA9tw1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:7d:8e:7b:ce:13:a0:41:40:ec:42:55:25:4b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Nov 5 07:01:57 2025 GMT
Not After : Nov 6 07:01:57 2025 GMT
Subject: CN=c94e54155741be67cb1e3206d2a2ada748e4aa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:eb:13:5a:22:a3:08:64:cb:fe:0f:28:32:
3a:70:b1:61:87:27:d2:3c:f8:99:38:48:41:73:b7:
45:81:66:ab:21:4f:bf:ee:90:b0:2f:8e:92:c5:4c:
f9:2c:96:cb:9d:12:60:25:5d:ed:3d:e5:4b:8b:f4:
4b:49:d7:cd:12:51:66:a5:51:82:1f:a7:7f:74:d8:
1c:d4:73:0e:0e:52:f2:fe:14:45:d4:ca:e0:fc:0c:
21:d2:bc:7d:6c:27:a6:c2:2f:bb:8e:5c:ba:1b:80:
11:e3:d3:da:97:b2:da:10:ce:d0:d3:b5:08:9e:e9:
1b:69:50:df:5a:b1:ec:44:13:88:82:eb:74:a5:7b:
b4:6c:7a:58:7d:c0:d7:e1:b3:da:73:f1:8d:7f:09:
fe:e5:bd:de:b0:1e:f1:36:fa:39:64:6b:2f:6b:cf:
9d:71:41:e7:ae:06:92:ca:bf:07:ba:98:d9:ec:85:
1c:51:0f:36:25:4e:26:d3:7b:bf:54:9c:66:00:6f:
5e:97:f3:bb:01:f2:83:38:eb:3f:74:1f:3e:6a:f1:
39:73:a8:24:f3:3f:e2:48:88:32:81:bc:95:dc:4a:
99:d9:e5:fa:19:ae:bf:af:c5:0e:ed:df:b9:6b:19:
3e:18:6b:2a:df:14:14:ba:c1:e9:b1:f1:ff:86:49:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:54:15:57:41:BE:67:CB:1E:32:06:D2:A2:AD:A7:48:E4:AA:37
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f3:85:fe:e3:70:99:14:4e:e5:35:ff:c8:a9:69:16:42:37:
47:52:5c:20:df:4b:46:f8:a5:b8:40:a8:56:33:b7:82:69:fa:
3e:57:cb:1c:d5:13:fb:69:c3:4f:fa:e4:87:91:f1:03:ca:cb:
da:f8:0f:10:c8:97:bf:f3:4d:ad:44:2e:4b:be:0e:19:67:be:
3b:28:6d:30:c0:20:ed:70:40:71:a0:df:ec:4c:c7:1b:8b:a0:
b0:2f:e5:a9:19:22:1d:b5:5f:be:a6:9f:fc:17:74:93:b4:15:
35:a5:1d:0d:96:0a:2b:57:3f:ad:d1:f0:21:55:21:90:f5:0f:
1e:88:ee:88:77:18:b9:69:a0:8d:e0:a4:36:89:f6:a7:ab:60:
b3:f9:05:49:88:3b:27:55:88:c8:a3:2c:8f:f3:a8:d8:28:53:
8d:a7:42:e2:21:5c:c8:a7:ff:b5:62:f0:4e:eb:4b:71:0f:42:
cd:09:10:d0:7d:fc:07:c4:4e:3d:db:68:1c:4f:97:15:ec:1b:
47:1c:e2:3e:bc:de:b6:ce:6f:f5:af:5c:c2:7c:d9:e0:b4:b6:
ab:13:bc:d0:1e:6e:87:29:b9:18:2f:7d:2d:8c:43:13:a3:90:
f0:76:c1:3b:f2:f3:02:39:9a:22:a7:7c:b2:f4:d0:22:1e:8b:
3f:c6:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:58:27 2025 by rpki-client