Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: jQBnoMUjEF5B7ISDL+nEyo28/5buaZ/nbiUCEUv9phM=
Subject key identifier: 95:32:42:64:E6:E8:B3:1F:55:56:0B:ED:B9:6A:11:06:80:C4:F7:75
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019A4E18FE84754B0A1E43C6B3B9A9437FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0867
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: rVHX6f1c2ANHf11md8mgMY3HVjROhdT9kltsjq4A2j8=)
2: F_iiYpuJZsPXyVk42h-DOsF_bWI.roa (hash: dpN0U4f3O8Pd8GkBmRoC06G+AozmpMzmGpJELa79vM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fe:84:75:4b:0a:1e:43:c6:b3:b9:a9:43:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=95324264e6e8b31f55560bedb96a110680c4f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:07:09:37:37:ea:dd:0b:fc:9e:e3:f7:b3:
f4:1c:25:d8:a6:09:ce:d9:00:23:29:11:c7:a5:77:
84:52:c9:70:9a:30:ee:d2:50:aa:d4:b8:a0:e8:e7:
58:ba:2b:da:1b:27:82:a8:5f:26:08:72:95:ba:ca:
94:47:ee:65:d9:61:5e:1d:a2:e9:73:a2:bd:71:69:
d0:55:f4:72:ee:49:54:28:aa:1b:5f:87:b9:d0:37:
6f:70:b8:9e:8f:5e:04:f6:98:80:48:c9:e7:44:82:
14:04:e4:8b:83:44:4d:91:6b:0a:2c:15:ee:b8:9b:
a2:5c:f6:9c:f1:9e:af:b6:ff:3a:53:25:65:6c:7e:
b8:8d:10:c7:02:d8:40:55:53:50:9a:d4:b9:fc:3f:
b7:18:79:1c:1f:b1:22:44:19:19:63:c3:d1:24:94:
9a:1d:85:45:d1:61:0b:52:68:51:81:b8:47:b1:89:
55:df:96:40:b5:5f:cf:39:fb:ac:07:ff:de:d4:1b:
bc:5b:af:0b:55:ce:06:70:23:b5:55:46:5e:be:1b:
8f:8e:b2:dd:6c:46:fc:54:a0:52:f7:cc:55:8d:b1:
0c:37:6d:78:e6:f0:81:0c:4e:e3:13:52:d2:23:60:
29:fe:2e:2a:0e:7a:c8:75:c2:4c:10:c9:63:61:67:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:32:42:64:E6:E8:B3:1F:55:56:0B:ED:B9:6A:11:06:80:C4:F7:75
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:17:a8:d0:85:b2:b9:96:32:e0:d7:93:08:7d:d2:e7:a1:5e:
d6:b2:97:64:38:56:9f:5c:dc:2f:2e:89:a8:78:1e:e6:68:6c:
e3:9c:e9:c5:a8:2c:fb:1a:96:01:69:17:24:bf:b3:3a:63:aa:
77:ac:49:0e:89:86:7c:72:75:98:77:ad:cf:fd:7c:5e:d3:f6:
59:6c:f1:c6:66:70:1e:9b:7e:97:f2:3a:56:ca:f4:bb:45:86:
77:be:4a:42:81:a8:99:6e:09:16:cd:fb:f3:0e:92:9f:20:4e:
65:87:66:c5:fd:52:30:cb:29:83:2f:99:c2:82:fe:5f:cf:d8:
f7:da:21:95:f6:d3:59:63:44:94:eb:d2:d1:22:48:b5:5c:2e:
88:64:d9:c6:83:ce:f3:3e:53:33:78:1f:81:24:a9:bd:15:66:
58:8a:6d:af:d4:12:d1:b5:9a:b6:e1:fb:9c:4d:0c:ff:70:29:
cf:5f:66:dd:b6:5f:87:16:9f:91:b0:8f:04:31:20:4a:54:6c:
a3:a9:21:19:f4:45:0d:19:d3:5d:6d:2a:6c:af:9a:6f:f4:f0:
5b:ff:77:bb:a6:c2:23:fe:e0:4a:d6:cf:04:d4:95:88:73:f3:
14:09:16:dd:94:d7:f6:80:74:b6:fa:40:82:20:b4:a2:a4:53:
74:07:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:10 2025 by rpki-client