Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 8hHNqkWsVHHAq/nXw2KMr4nU4moHpIApZgEdPA0aNoQ=
Subject key identifier: 94:05:C5:DE:4E:D3:A1:43:39:D1:5F:07:C2:BE:FA:A9:84:83:1D:20
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019A5074B1A6ED72734D89F85A4FD9D7DE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: rS153UXYxZmwsZf3BlRmHjx9OW4LT68C3kDJYZ2u6Nk=)
2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b1:a6:ed:72:73:4d:89:f8:5a:4f:d9:d7:de:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=9405c5de4ed3a14339d15f07c2befaa984831d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:88:9a:a5:fa:d1:2d:f1:26:f7:33:1b:64:
ac:04:01:91:8e:36:b1:bd:20:7b:e7:fb:4a:b6:70:
b9:03:35:30:aa:fc:98:4e:81:9e:99:56:82:d4:ae:
ce:97:d9:dd:99:f3:75:aa:9b:1a:88:a7:b5:40:f8:
18:87:f2:c3:34:68:5e:04:02:13:7b:80:5f:55:d9:
18:f7:da:71:a5:d6:70:c8:fa:02:ef:72:9c:7b:1e:
f0:cc:03:33:67:39:18:97:bd:0e:36:71:ff:f6:6d:
ed:7b:34:ca:05:b9:21:46:74:a6:44:53:ed:b4:73:
b8:f5:a8:e5:70:3a:60:a5:ae:8e:12:a6:ea:62:60:
1c:da:29:0d:75:8e:c4:1e:30:a9:d9:3d:6d:1f:7e:
5f:e4:17:0e:f1:7a:47:2f:4e:fe:19:b6:76:36:33:
d1:59:83:50:b3:a0:b3:85:e6:cb:2d:f8:8c:22:f5:
90:59:bb:8e:b1:c2:76:6c:3c:41:fa:4d:6b:b0:50:
f3:f3:94:d3:25:c7:04:6c:20:e3:23:44:cb:e2:6b:
a7:17:6c:a1:ea:d7:2e:06:d3:81:7e:ca:f1:f6:38:
64:69:a4:18:5e:13:b1:db:46:0f:79:a5:80:4a:48:
58:b3:0f:ae:3a:6e:f4:6d:ec:07:e6:92:da:49:c9:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:05:C5:DE:4E:D3:A1:43:39:D1:5F:07:C2:BE:FA:A9:84:83:1D:20
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4b:cc:bc:43:b9:bb:dc:c9:4a:0f:5c:d8:38:77:99:7d:4a:
00:7a:a3:71:c0:1d:97:76:ad:ee:f0:5a:bd:64:1c:1a:ec:d6:
31:dc:0b:a5:1f:a1:6c:4b:e5:ff:ee:c1:27:64:61:6f:49:61:
45:03:85:e8:fd:5c:4f:35:f2:ba:d7:90:20:b2:e6:0e:53:06:
08:04:19:ee:49:1c:2b:58:c9:6c:06:24:0f:f0:4a:91:e8:00:
aa:98:86:60:30:71:cf:f9:d8:82:6f:91:45:2d:ba:f7:8c:7c:
b0:94:5b:4a:e0:39:34:f3:fd:84:b1:68:b8:6f:19:ca:a3:b0:
1d:70:a8:6d:96:df:7a:ff:f2:d1:7a:33:a9:30:ac:e8:c3:04:
20:de:e5:05:75:be:46:f4:3f:e0:6c:27:6a:1f:80:c8:61:c3:
dd:94:10:c4:38:be:0c:c0:cc:e6:70:34:d1:14:e8:5f:d8:4a:
3d:2c:a2:a5:6e:7c:7e:d7:27:46:f4:e0:fc:bf:2b:9b:9e:b2:
97:34:f0:7e:45:c3:db:a5:87:3b:38:3a:f5:b6:b5:19:2d:17:
91:80:43:20:d8:34:5e:2f:65:bb:7b:57:6d:3b:ea:64:07:e2:
d8:06:3b:36:15:b3:71:e9:1c:24:71:c0:62:8a:df:2d:f6:a3:
07:f5:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:07 2025 by rpki-client