Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: Yfz/Z45LIS5Liz76fELB8DBtVBR7E1GeY7nD/Z6WjBU=
Subject key identifier: F9:36:DF:B7:43:48:08:40:A3:9F:FF:76:CA:BE:F5:0E:85:7C:D2:F4
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019A50E31E5B6DED4D86A37AAED27A835F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:00:52 +0000
Manifest this update: Tue 04 Nov 2025 22:00:52 +0000
Manifest next update: Wed 05 Nov 2025 22:00:52 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: VW6zAZbauDYW7h7bGSyzosDvvKCMmV9ZRDSNoyjljro=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:1e:5b:6d:ed:4d:86:a3:7a:ae:d2:7a:83:5f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Nov 4 22:00:52 2025 GMT
Not After : Nov 5 22:00:52 2025 GMT
Subject: CN=f936dfb743480840a39fff76cabef50e857cd2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:cb:8d:b4:77:36:24:f8:80:be:d4:4d:f3:
e5:c8:2a:bb:63:d9:52:c7:22:8f:74:d0:16:86:40:
7a:fe:35:7e:38:e0:dc:e8:5c:f2:16:d0:21:c1:c8:
8e:ac:94:36:b6:90:ae:c7:32:bc:5f:f4:a4:19:f8:
14:6c:67:31:11:17:db:93:e9:42:d9:1f:14:2f:68:
4b:c7:7d:e0:bc:a2:28:46:c4:ff:8c:e4:09:c9:9c:
e7:cf:12:6b:4c:c7:9e:3a:f9:11:55:f1:20:fa:41:
fc:52:bb:12:1b:92:1d:2d:8b:27:d9:15:77:eb:b0:
24:45:7d:23:e0:4f:1f:01:ad:09:77:31:12:0e:e6:
a1:0a:72:c7:a4:d3:91:f4:83:91:1f:a2:db:42:dc:
64:25:63:2f:cc:f2:48:cd:20:1f:e6:9b:19:aa:b9:
a0:a0:c3:b3:c1:4d:9b:19:3e:d6:f9:da:07:c9:17:
4f:c9:b6:9a:9b:92:e6:bf:71:a7:8f:0c:ce:82:5e:
56:0d:f2:6b:8f:18:49:d0:d0:1d:76:6b:f1:c9:40:
1f:6c:29:42:d2:e8:b5:f8:a5:a3:7a:e3:01:6c:9b:
4d:50:30:0d:cc:9b:66:8e:3b:54:57:80:11:08:c8:
58:05:63:51:f9:80:da:f9:44:4e:a5:c5:9c:03:6d:
58:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:DF:B7:43:48:08:40:A3:9F:FF:76:CA:BE:F5:0E:85:7C:D2:F4
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:33:95:07:6c:f7:7c:04:0d:1a:8a:0c:78:10:8c:8c:53:b1:
cb:3f:be:76:08:94:03:07:53:56:92:2d:ce:2c:c7:2e:51:96:
d2:18:d8:97:d7:ed:a6:ee:dc:b1:a8:75:e5:6e:4d:17:c4:b6:
c6:ce:aa:78:ed:ea:aa:fa:61:d9:89:1b:97:d3:be:b9:3f:ae:
fc:34:31:ef:ce:96:c8:05:03:ef:17:52:5b:bb:54:f8:86:a4:
36:40:3e:1d:92:e2:86:bf:29:9e:1d:5f:b8:c6:b7:ed:7f:28:
21:8e:f3:2e:e9:7e:0d:22:3d:5f:5b:a4:ad:c4:ab:4d:9f:f8:
a3:e1:67:be:1c:b5:b8:18:9e:3f:69:16:d5:14:7d:99:bf:18:
d8:1b:e4:2e:b5:f9:91:a1:d1:34:36:3c:f7:86:6a:75:4d:77:
fa:b9:92:c1:f0:3d:9a:71:b5:29:09:ab:a0:5c:bd:bd:cc:c9:
8c:ca:13:5e:1d:53:31:9c:53:57:24:6c:2f:17:e8:b5:47:60:
3d:b6:eb:8d:08:02:07:a5:0a:3a:dd:5d:ca:e2:02:0f:62:65:
b1:67:97:19:79:66:1a:55:b1:ab:81:8a:6d:84:c5:a7:00:c8:
ab:20:6c:37:da:58:59:2a:37:b4:76:68:be:b6:67:21:cb:06:
de:45:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:41 2025 by rpki-client