Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier: viaX68QLzsypSY9u4mq8Z5FMlAQjmVt7BivkFVvkv1g=
Subject key identifier: E3:27:22:CB:A1:16:BA:95:59:E0:A4:7D:B7:CC:3D:0B:4F:C3:9B:E9
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial: 019A522C68D2B524D6897801B215578DD6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number: 0DF0
Signing time: Wed 05 Nov 2025 04:00:33 +0000
Manifest this update: Wed 05 Nov 2025 04:00:33 +0000
Manifest next update: Thu 06 Nov 2025 04:00:33 +0000
Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: HYJKk3knetMKZxn9q3g8pcqna/ev5+kHinNV7E5XnSQ=)
2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:68:d2:b5:24:d6:89:78:01:b2:15:57:8d:d6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Validity
Not Before: Nov 5 04:00:33 2025 GMT
Not After : Nov 6 04:00:33 2025 GMT
Subject: CN=e32722cba116ba9559e0a47db7cc3d0b4fc39be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:21:a5:97:04:8a:43:19:38:0a:ae:cb:56:
d7:9a:30:28:d0:4a:b8:ba:40:1a:c4:cd:96:3c:41:
22:b2:fb:4d:94:4d:07:0d:eb:06:4e:de:5c:33:40:
64:5c:18:46:87:3f:6a:c4:5c:02:9a:80:61:d2:75:
66:d6:7c:d2:16:fe:a2:ae:47:bf:b2:c9:7e:66:d0:
1d:1c:b8:59:fe:96:45:ef:f8:97:43:af:65:8c:8e:
1b:ee:c5:40:c2:59:9b:26:64:1f:59:05:16:50:73:
84:33:78:9e:5a:41:69:f0:86:a3:32:0a:ca:4b:3c:
a4:19:76:ba:97:17:c4:ef:e6:83:6f:40:54:32:a4:
29:4e:fb:ef:f6:29:88:4a:f0:ff:a3:86:5b:5c:c6:
47:ca:c1:d1:51:15:86:ad:8d:6f:38:47:e2:25:8f:
bf:83:e7:ec:57:7b:34:68:51:57:9a:0a:25:52:19:
42:bf:5d:6c:7f:d6:25:7c:b4:d7:8a:61:42:ea:86:
fc:83:97:af:d4:f4:4e:00:db:a3:d2:e9:39:b8:d9:
e1:7b:fd:09:f4:d4:d8:65:d3:29:20:85:7b:3a:2c:
de:50:25:04:1f:e0:dc:72:53:7e:ec:da:51:f1:05:
59:25:37:84:b6:62:5d:47:f6:2b:17:10:d1:aa:bf:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:27:22:CB:A1:16:BA:95:59:E0:A4:7D:B7:CC:3D:0B:4F:C3:9B:E9
X509v3 Authority Key Identifier:
keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9a:cc:ea:9b:68:ca:78:34:4f:20:55:49:ea:93:f1:63:8e:
8d:ba:76:db:43:0c:18:d8:00:66:3a:40:a9:0c:f2:2d:b9:28:
65:1a:a1:ce:48:06:66:77:b0:ce:7f:7c:b1:47:f2:ab:3c:2a:
f3:75:b8:5d:a7:80:42:01:85:45:00:e5:9e:18:61:a1:12:dc:
48:3e:95:ba:14:f9:9a:77:8b:4b:ff:83:00:79:a8:3f:74:29:
d7:09:db:2d:a2:2d:18:5d:ae:5d:27:5a:95:e2:60:8b:32:3a:
2f:95:bd:d1:c2:44:45:0a:a6:ae:83:c8:8c:cb:21:f6:80:35:
fc:73:16:29:88:ea:8c:6e:68:bb:d7:25:01:fa:bf:2a:82:71:
02:22:3f:fa:78:75:6e:47:03:f7:25:d0:0d:03:bd:18:48:b0:
d8:3f:4b:0c:88:4d:23:ba:40:fb:2d:cd:3c:71:78:46:24:d7:
c9:ac:ed:43:32:ee:da:c8:9f:a7:c1:3c:f8:66:09:1c:39:a1:
a4:c4:2b:1f:b9:83:40:ce:54:4d:22:c3:05:90:41:7c:e8:1b:
28:ac:aa:ad:b3:9e:1c:af:09:02:43:6b:a9:45:f3:0e:4f:54:
c1:5a:43:ed:84:51:a5:70:f9:9f:c2:94:4a:ea:c7:ef:22:93:
6a:fe:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:39 2025 by rpki-client