Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
File: srV8B2efEIcOxTs576fQiwhXqRE.mft (raw, json)
Hash identifier: 8r1F8oaZh86dTb4K+h5V/dAfwmvtCq3M2mD+On9ozEs=
Subject key identifier: 1F:F7:2A:BA:06:4C:D0:09:49:D1:04:5C:9C:1F:1A:44:E9:3F:45:DD
Authority key identifier: B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
Certificate issuer: /CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Certificate serial: 019A4E4F4645530C040111C930393DBA3385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
Manifest number: 0B42
Signing time: Tue 04 Nov 2025 10:00:09 +0000
Manifest this update: Tue 04 Nov 2025 10:00:09 +0000
Manifest next update: Wed 05 Nov 2025 10:00:09 +0000
Files and hashes: 1: ap6bPmgHUfAh5wuoqG1kdVuYoGU.roa (hash: FRWb8W/VjUKZi4bCa79dR9xehManyu8Gtrb5uK1Umc8=)
2: srV8B2efEIcOxTs576fQiwhXqRE.crl (hash: feO4ZA4g0IcjrM29yYLC6rcDTtYLP/g26uEoVRSNNBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:46:45:53:0c:04:01:11:c9:30:39:3d:ba:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2b57c07679f10870ec53b39efa7d08b0857a911
Validity
Not Before: Nov 4 10:00:09 2025 GMT
Not After : Nov 5 10:00:09 2025 GMT
Subject: CN=1ff72aba064cd00949d1045c9c1f1a44e93f45dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:10:f0:c8:70:2d:60:6b:bb:f1:48:8e:36:
11:37:57:2d:a4:8c:a8:38:47:b0:44:95:0d:de:59:
38:04:44:2d:07:7c:61:ed:ae:11:08:99:9f:dc:a7:
a1:8d:19:06:ad:10:20:9f:54:4a:98:7a:e7:83:21:
ba:37:49:5a:50:9c:b9:b8:73:9e:46:b9:3d:21:fc:
07:18:b5:7d:3f:bf:ae:f9:28:ce:c8:ae:ac:66:64:
40:72:ff:68:22:66:c6:93:b6:08:40:15:72:1a:49:
2a:da:47:2e:fa:6f:44:c9:ca:e2:57:6e:a9:e2:06:
e9:82:07:1f:4d:02:14:dd:14:74:d0:e5:08:78:01:
2b:67:a0:46:c4:11:22:ad:3a:1f:de:cc:36:62:bd:
4c:40:46:af:5e:64:3d:9b:c2:b0:f3:29:a1:e7:1f:
87:5a:aa:4e:2d:c0:90:69:f8:a5:dc:df:78:e6:19:
4d:20:b6:eb:94:9f:4e:e7:9e:31:5f:7d:c2:48:66:
b9:88:f3:eb:9e:18:09:9b:4a:29:a0:e7:ec:3e:54:
be:c5:b5:4a:b2:03:c6:e8:17:e1:a4:c6:be:71:34:
e8:0c:22:3d:03:b8:55:b6:17:01:d8:0f:c0:ce:cb:
e0:e3:2f:45:99:a3:87:f3:f1:36:f6:33:de:34:d2:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F7:2A:BA:06:4C:D0:09:49:D1:04:5C:9C:1F:1A:44:E9:3F:45:DD
X509v3 Authority Key Identifier:
keyid:B2:B5:7C:07:67:9F:10:87:0E:C5:3B:39:EF:A7:D0:8B:08:57:A9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srV8B2efEIcOxTs576fQiwhXqRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6a1c6e-039a-4b7d-9253-0a5e6a36801f/1/srV8B2efEIcOxTs576fQiwhXqRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:46:5b:54:8a:a9:df:10:ef:6d:92:35:91:2d:14:ba:cc:f3:
91:8f:90:73:4d:56:3d:79:95:df:16:34:b4:80:b5:81:bf:bb:
86:ed:16:e8:8d:c7:78:c5:54:bc:88:db:82:cc:0f:a0:be:ce:
80:b3:9e:34:56:d6:c5:e1:53:eb:2a:f0:f8:ae:79:7b:71:52:
a6:42:a7:78:b1:d9:5c:f6:bc:53:4a:26:f5:0e:b4:00:12:1e:
5f:06:af:45:0a:a9:39:dd:67:47:6b:00:df:ce:08:d5:6b:8e:
ab:78:ec:6d:0f:97:e7:f9:5d:c0:65:9d:11:12:12:b3:ba:88:
76:d4:53:38:13:a5:b3:1e:2f:f6:7f:a8:c0:42:57:0e:92:4b:
4c:fb:b5:7c:6f:c1:d1:b7:65:26:43:3e:10:7c:fd:a8:29:d4:
82:a3:a4:e9:1a:30:98:2f:74:c8:ad:c8:7a:de:26:d6:73:96:
7b:a1:10:5e:be:07:b0:99:73:ae:77:61:95:d8:31:d7:c7:7c:
57:09:e8:2f:3c:69:ac:04:5c:02:f4:f8:11:16:4f:f8:b8:08:
a5:cf:49:b7:83:03:a2:3a:47:d0:09:66:90:7b:94:66:99:c4:
c1:b8:44:28:c9:a2:7d:e4:b4:ce:6a:df:ea:5c:60:81:27:29:
d7:d3:cb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:08 2025 by rpki-client