Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: 6WO1bK/qDPX54A9AJV4CGCKs59MtliskV/+LwxljgAU=
Subject key identifier: 3C:DA:19:C7:CB:71:89:7D:8D:AD:62:CA:F1:35:6F:C4:02:D6:E9:7A
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 019A4E18B836BDC0BC2139F2226958F88380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: EPNYvQtdBEm4iF8h/H0AsSXYzm0klN+pi5zsp108TP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b8:36:bd:c0:bc:21:39:f2:22:69:58:f8:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=3cda19c7cb71897d8dad62caf1356fc402d6e97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:d2:f8:3d:68:c6:8f:1a:17:9b:a2:e2:68:
65:93:a2:de:f3:a3:78:e0:67:06:23:b7:c9:ce:66:
26:db:39:dc:c6:c7:7a:f5:01:01:e6:1b:ce:36:4e:
63:6f:2d:3c:f0:31:91:44:67:c6:d2:3d:68:09:4b:
ce:18:77:09:68:c5:5a:fa:ad:6b:ef:5f:a7:38:ed:
c4:65:55:09:67:21:6e:bb:94:ef:54:55:06:1f:2d:
ae:e7:ed:c4:1e:2e:81:c7:68:28:0c:19:24:2f:dd:
63:0c:68:a9:fd:04:b2:05:c0:ec:e0:4c:1c:fe:ab:
c3:40:80:40:41:27:19:9b:bb:cd:69:d2:0c:c7:60:
74:14:85:21:e4:9c:f5:f5:62:f5:91:b7:fc:b3:20:
1f:31:6d:ce:0f:0e:ae:c7:6a:22:3b:34:e9:37:ec:
8a:97:f8:06:8c:2c:8a:44:8b:ad:28:f9:cc:1f:96:
20:37:4e:f3:67:ab:47:0b:ca:56:b2:0b:fe:6f:15:
d2:03:69:0a:8d:6d:56:1c:73:ca:80:8b:a2:92:e7:
26:de:d3:6a:be:05:72:50:3d:57:3a:74:c2:28:51:
1c:4f:00:86:5c:d4:75:de:7a:8d:41:6c:44:cd:95:
9f:32:ce:bc:ca:7d:87:e8:3d:2a:d5:cd:80:a9:cf:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DA:19:C7:CB:71:89:7D:8D:AD:62:CA:F1:35:6F:C4:02:D6:E9:7A
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a1:80:55:e2:c2:ed:24:0b:2a:5e:fd:3d:b1:40:46:cf:12:
ec:02:ae:7b:40:f9:b5:0d:34:84:98:a9:09:d5:9a:fa:2c:8c:
c0:db:95:d9:54:49:63:92:c6:fb:28:0a:d4:17:cc:01:61:c2:
cb:58:11:41:b3:a8:a5:27:33:61:f4:88:42:9e:38:5c:58:13:
71:bf:ba:da:ab:af:9e:d1:a3:14:80:15:01:27:08:c1:99:35:
e5:3e:57:15:04:0f:1c:f2:30:80:93:98:30:6c:ac:6b:a2:84:
60:fb:84:16:34:9e:62:99:e8:96:4e:4e:22:94:58:84:94:be:
29:35:bf:c1:30:12:05:6d:56:90:97:76:33:80:ce:f1:74:04:
bb:8c:0e:a3:c3:42:07:43:47:d1:ab:ad:73:22:8d:ed:88:da:
ec:70:17:64:50:a9:0a:6f:f1:fa:94:3c:39:2a:fa:de:9c:2a:
42:4a:ff:d6:80:3e:e5:11:58:68:f5:ec:60:31:3a:7d:3d:a3:
eb:cf:b7:0d:b7:31:ad:64:c7:cd:dd:59:96:af:2f:72:b6:43:
ac:23:46:1f:4e:8e:0c:c7:9f:3b:0c:f5:c7:dc:56:a0:90:01:
0d:11:69:bf:27:43:de:f5:64:7a:5a:c5:7d:c1:5a:13:d4:a8:
d7:d1:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:01 2025 by rpki-client