Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File: b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier: 60S56J5LfzLH1htSKEv3805x2Rccav2vOI7/35OJZho=
Subject key identifier: 52:66:DF:70:5B:D6:58:74:69:22:1D:7B:1C:82:F0:49:7A:99:B9:DE
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer: /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial: 019A4F2B8B637B2C1045AFB0DC5E250999A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number: 0F09
Signing time: Tue 04 Nov 2025 14:00:45 +0000
Manifest this update: Tue 04 Nov 2025 14:00:45 +0000
Manifest next update: Wed 05 Nov 2025 14:00:45 +0000
Files and hashes: 1: F1clSCHfCrBchpNItB3_ECdQ4G0.roa (hash: UEaaY9HoQsqjcDAMUvi86kguZEF+pqvnu6gxjIkAd84=)
2: UvaL6VYsICABr4f2mztYJpGnmok.roa (hash: sDs2WTxe4PeqzEe78b/roJLSHAUp5tH9OZKXA5ved2I=)
3: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: 60bcSa8Wy/mRXwWDaBG7JXVEAz1v+Y/T2aik3MF0gls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8b:63:7b:2c:10:45:af:b0:dc:5e:25:09:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
Validity
Not Before: Nov 4 14:00:45 2025 GMT
Not After : Nov 5 14:00:45 2025 GMT
Subject: CN=5266df705bd6587469221d7b1c82f0497a99b9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:c4:45:8d:ad:9c:72:3f:ee:12:1e:6f:57:
39:bc:ab:e1:83:66:8d:46:26:cc:27:65:a5:90:08:
b1:39:4b:c0:1f:db:1f:ef:d4:cd:62:2f:9d:ae:36:
39:3f:32:72:49:a4:32:2d:62:f3:65:6a:53:54:86:
95:bf:bd:81:b0:62:e7:2c:66:c1:03:39:23:32:dd:
33:53:77:97:f7:59:21:1f:a0:62:3b:7a:3e:54:3c:
ed:80:2c:73:79:c6:7b:a4:ca:83:2c:7a:51:0c:15:
d6:50:bd:ad:7d:9a:24:fa:a2:e6:87:23:6f:8f:8e:
1b:36:aa:1d:10:cb:96:cd:a9:f0:86:19:84:6c:df:
a1:bf:ba:f9:cf:5e:92:1c:8d:97:ae:9e:81:56:01:
2e:5f:74:fb:c0:c5:d5:36:fc:c0:5c:fa:53:99:7c:
6a:d0:89:d9:39:bd:0a:23:aa:1b:e3:d9:32:98:c5:
bc:2b:91:27:7a:7f:6e:42:99:db:d7:77:5e:c3:92:
59:7c:64:8e:a4:79:b6:c2:07:1c:a9:ec:58:1e:85:
0d:d4:0c:43:f7:9f:38:f1:22:8a:c5:98:b8:ce:4c:
8d:04:15:39:72:23:62:a6:a6:d7:a8:60:b1:ba:3b:
a3:9a:af:bd:e3:fd:fa:c8:88:49:b6:71:c6:78:e8:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:DF:70:5B:D6:58:74:69:22:1D:7B:1C:82:F0:49:7A:99:B9:DE
X509v3 Authority Key Identifier:
keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:28:16:70:dc:ab:1a:fa:02:65:f6:f7:34:33:cf:43:e1:44:
af:9c:f0:9f:97:02:13:38:4e:42:91:b3:5a:75:8b:33:96:22:
e4:73:c8:61:17:ea:3f:33:56:97:b3:e7:f1:5b:56:16:f8:93:
09:6d:70:c7:5a:ca:d9:72:2b:c7:09:fe:65:e0:8a:07:90:a8:
6b:1f:63:b1:49:5f:8b:1c:22:e4:e8:ce:59:25:35:79:f4:1d:
c6:40:12:e7:47:06:ae:43:3a:d3:da:f4:58:c8:6d:54:8f:21:
b5:24:99:15:e6:59:c8:59:d5:62:e8:79:b8:7e:c2:e4:b2:61:
55:b8:e4:e2:77:37:67:a5:c6:b2:91:e6:6b:20:ab:08:e2:12:
6d:fb:1d:09:1f:37:58:0f:95:d5:99:db:90:df:ba:31:3e:3c:
48:a1:73:76:4f:06:5e:16:26:f4:12:34:f2:ec:7f:ea:a8:4c:
7a:5c:1b:41:2e:6b:3c:4b:4e:19:fc:1b:a5:2c:d3:4d:63:2b:
15:4d:be:bc:a3:15:89:73:69:1a:c3:a3:bc:63:f8:30:14:35:
d7:d5:23:49:b8:02:b3:e8:8a:2b:4e:b7:12:98:30:62:be:9c:
47:65:3b:a5:09:2e:2b:06:33:27:a7:cc:a4:97:9d:0c:06:16:
f3:15:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:58 2025 by rpki-client