Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
File: 23uiovC_o6dvXJkaR82YaMbR674.mft (raw, json)
Hash identifier: B3unx74YWpH9zTBasjBxEVsDGpui6Vum6K8MaT+V2iM=
Subject key identifier: 65:E2:0E:2B:93:6E:8B:0F:40:46:23:22:E4:3D:E5:4B:30:77:DF:BE
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 019A4F98ED43E5649802F853F363F211792B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
Manifest number: 13BF
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: 23uiovC_o6dvXJkaR82YaMbR674.crl (hash: NC+w+f11HX41vq50T4ZPAzHA4EXINyJ/jheuGs56iwc=)
2: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (hash: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:ed:43:e5:64:98:02:f8:53:f3:63:f2:11:79:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=65e20e2b936e8b0f40462322e43de54b3077dfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:50:90:e7:e0:e4:0d:68:5e:16:3c:96:67:
17:83:7b:98:76:61:8b:03:9d:35:52:ef:c8:8f:5a:
a1:ba:bf:3b:12:60:84:e1:19:11:89:2a:66:2e:c7:
6f:a4:16:ac:ef:10:56:87:b9:8e:14:8c:32:ad:3a:
45:ff:46:23:e0:c4:e6:f8:b5:96:45:82:72:55:ae:
cc:e2:0e:4d:15:7e:82:60:40:91:89:07:9e:9f:73:
93:21:30:76:3f:0c:f1:01:34:ac:fe:b3:b1:95:2f:
67:71:87:77:24:7c:92:b2:6d:f3:9b:eb:5f:23:93:
91:ab:ee:9b:f9:2e:ea:20:32:0a:e1:92:8c:1f:c2:
3d:ad:33:e9:f3:44:01:20:ea:ce:0e:fb:69:45:04:
f0:d0:63:92:e5:02:05:59:7d:4b:17:c2:b8:97:c2:
69:ce:88:84:4c:67:f8:4f:61:75:d5:41:83:27:e8:
7a:79:7b:dc:01:5e:a8:c4:5f:c0:ff:32:23:65:56:
c6:7c:d4:e1:43:95:b6:16:06:43:00:06:7c:20:2a:
4d:4c:fe:96:7c:30:96:9e:d9:9b:2d:9c:66:99:bd:
75:99:76:a5:a3:e9:eb:0f:29:bb:c0:2b:ff:9f:87:
49:31:31:8c:18:4e:9e:ce:99:ee:d3:ee:71:28:e6:
1d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:0E:2B:93:6E:8B:0F:40:46:23:22:E4:3D:E5:4B:30:77:DF:BE
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e7:fe:02:f5:fd:8b:6e:67:17:4a:05:7c:33:34:f2:68:b0:
67:27:b8:b9:b1:a5:51:77:4d:7e:ce:ac:9c:22:45:34:40:92:
d8:63:7a:f4:61:b2:20:ac:aa:af:6d:29:31:b5:46:c5:d3:13:
a6:68:40:fd:33:bf:2f:02:7c:2b:52:cc:64:7d:ad:81:24:dc:
3a:dc:c0:ff:61:6e:c1:27:4a:a1:f1:35:2e:d0:7a:23:4b:59:
1b:11:55:0a:dd:58:2d:44:a1:32:d1:1f:b3:85:f2:16:b5:35:
fc:da:96:e2:21:fa:73:35:70:25:76:d9:cf:87:0a:a8:6f:81:
c8:6f:68:02:c4:93:6f:98:77:0c:d0:61:f4:81:78:dd:a1:dc:
ed:d8:be:46:38:d9:c2:f1:87:8c:d5:0d:83:8b:e9:67:9c:30:
47:d4:fe:d3:69:8c:16:a7:ff:08:d6:4c:64:94:f2:c8:12:84:
19:b6:96:dc:75:f7:f6:2d:cd:0f:33:fe:1e:3c:64:96:3a:86:
bd:7d:00:be:f9:b2:1c:fb:4f:32:38:86:e2:51:79:59:c9:28:
8c:59:cd:79:1f:52:5c:45:c6:b0:e5:cb:af:fa:a2:81:ab:f7:
ef:fc:e7:e5:83:92:5f:95:ec:f3:7a:96:90:26:08:1a:3d:7f:
9b:d2:cb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:26 2025 by rpki-client