Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: DciQLjP+9wiGiSciBuI9yHvGFm/TbaVH2W1ALbkiLZY=
Subject key identifier: A3:E5:66:9E:03:76:E6:A6:9F:C5:2F:1A:CF:2A:67:31:68:65:3F:9F
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019A4F2B71089727A54625EDF29198D569ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0D91
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: QNpY4puyROIepiRyyAZKgKIYPjLHn5fDBzt7nn7CcbY=)
2: vcl1p6ptmFRb-F4yTfpIsvctLc4.roa (hash: SMIEIwggcjVgdMkQCnp6J0Lo2kApnYhvBTOF0WKyJ58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:71:08:97:27:a5:46:25:ed:f2:91:98:d5:69:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=a3e5669e0376e6a69fc52f1acf2a673168653f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:0b:4e:d3:65:4d:8b:15:8b:aa:1a:76:cc:
e5:21:96:0b:57:60:95:b0:10:7a:9f:d2:93:99:c6:
ca:09:f7:34:96:b5:83:bf:a0:48:06:5c:b8:e8:10:
e7:35:d4:1f:87:4e:f9:5f:26:b6:e3:6a:ae:bd:a5:
81:2a:96:02:f7:83:47:f0:b9:c3:e3:e1:db:7c:10:
e8:d3:08:f8:5a:ad:18:78:28:ce:ee:60:01:4d:5c:
40:2d:f8:51:42:5e:6d:54:4c:2b:46:aa:a4:e9:ae:
5e:cc:8e:56:ea:5c:8b:a5:23:17:79:2f:d6:13:7e:
c9:9c:3b:53:24:e6:6d:61:93:48:c4:72:ac:c4:4c:
34:9c:a6:84:05:b2:89:3a:65:71:79:90:b2:1e:b0:
ac:85:38:46:53:75:3d:cc:0d:2b:aa:c7:4b:b6:67:
76:af:c1:25:b1:c7:72:50:2b:0b:f1:07:65:f3:00:
1f:b5:0b:a1:9c:eb:fd:a0:57:90:08:34:7e:ed:8d:
ea:f0:95:4b:21:ef:c6:dc:ca:45:7d:11:12:ea:e6:
b1:13:d2:6a:55:6e:c3:7b:70:10:ce:62:09:fe:66:
08:78:9b:0a:3b:f5:d3:4d:d9:50:0d:95:e1:e7:26:
f8:6a:02:43:e4:2f:47:d8:aa:0b:ee:25:e6:80:bf:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E5:66:9E:03:76:E6:A6:9F:C5:2F:1A:CF:2A:67:31:68:65:3F:9F
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0e:66:9d:cb:1a:b5:cd:63:8a:c8:3e:17:8c:0a:8f:63:6a:
1b:24:da:d7:0b:a6:48:2b:83:0c:85:44:0a:dd:57:36:39:1e:
fb:2c:a0:bb:ca:54:91:a1:05:00:8b:53:4b:73:8d:20:42:d1:
0c:d1:37:30:0b:11:7d:3f:26:b3:bd:a2:b9:fd:8a:5b:90:fb:
90:43:96:0e:b7:af:f8:0c:2b:50:92:08:bb:b0:79:23:40:68:
a9:c8:dc:2a:47:a6:1e:ba:29:bd:43:5e:6d:da:2d:d6:34:46:
71:6b:c1:45:e9:c0:d2:c7:33:de:a4:8a:8b:87:fb:2b:fe:ce:
45:b6:ff:4f:0b:a4:26:3f:d9:48:b7:33:7c:9f:06:2e:d9:d5:
bf:89:c6:15:ca:52:71:80:9b:bb:54:bb:2f:b6:b3:a7:33:37:
dc:26:2a:51:92:6c:7d:23:9c:96:6a:d2:7c:f3:51:6a:e6:01:
67:1a:d3:6d:8e:55:02:84:69:8c:01:74:59:32:4c:98:f0:20:
a2:57:47:bb:73:2a:da:0d:70:52:4e:58:f7:7b:77:af:e8:76:
d2:5b:01:b4:b6:2d:fa:2f:27:c1:2f:7c:b3:99:91:35:e6:6d:
60:87:0f:71:c3:32:61:67:da:70:dd:28:c1:f5:3b:c2:94:69:
1b:de:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:08 2025 by rpki-client