Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json)
Hash identifier: GjOSN4ZeL14rnAsb57UHl9T9vwwpvYU4/ZdHp4WdtjQ=
Subject key identifier: A7:F8:0D:6A:A2:18:32:B9:B9:7C:83:3F:CF:8C:26:1D:5D:F3:CB:B1
Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Certificate serial: 019A51877F6FB60F4D6D7493630B3F88BF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
Manifest number: 0346
Signing time: Wed 05 Nov 2025 01:00:25 +0000
Manifest this update: Wed 05 Nov 2025 01:00:25 +0000
Manifest next update: Thu 06 Nov 2025 01:00:25 +0000
Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: gc9NFWugaSMbY2H7d4ZHV60MykDNH8wbcQWkPK83qX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:7f:6f:b6:0f:4d:6d:74:93:63:0b:3f:88:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Validity
Not Before: Nov 5 01:00:25 2025 GMT
Not After : Nov 6 01:00:25 2025 GMT
Subject: CN=a7f80d6aa21832b9b97c833fcf8c261d5df3cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:a1:95:b6:f8:db:05:62:58:60:60:63:77:
94:5d:07:f7:d5:03:dd:57:4f:2f:5d:f7:5c:ac:06:
b1:29:dc:63:d0:09:c5:8f:9a:89:bd:59:ef:19:94:
fb:83:33:ee:9e:ed:75:75:b0:21:36:92:0a:d0:af:
a2:4d:b2:b7:75:a1:aa:37:3b:79:da:03:9d:51:18:
ea:6f:18:b2:aa:4a:d9:3b:7b:c6:8d:85:b5:81:a5:
7b:d7:b4:3c:e3:d9:bc:ec:b3:0f:35:a2:5b:91:27:
11:d3:10:c8:7e:4f:ae:cb:b8:9b:e1:cb:29:64:0c:
71:77:49:93:d0:e1:b5:2e:ba:fa:52:7a:fb:28:90:
bb:3a:91:d3:dd:90:fc:dc:94:2f:8d:a4:d0:aa:57:
0f:e3:30:c7:e9:55:e5:68:65:6b:70:e2:60:74:e6:
7b:1c:2d:4a:15:3d:fe:5a:0a:08:f7:54:af:50:15:
c9:e9:79:32:f1:82:59:b9:71:8d:b1:68:0f:76:2f:
a8:2f:29:34:5f:02:a0:55:53:9d:06:61:0e:fc:2a:
e7:f8:9e:09:a6:92:16:6c:5e:c0:d2:30:0e:3f:c9:
d2:d1:5d:ed:a9:6c:44:99:1c:9d:f5:e5:86:0e:a4:
e1:a7:46:ca:f5:0a:9b:ce:0a:10:db:bc:98:10:64:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F8:0D:6A:A2:18:32:B9:B9:7C:83:3F:CF:8C:26:1D:5D:F3:CB:B1
X509v3 Authority Key Identifier:
keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:c1:05:8e:4d:c7:3d:c7:83:23:1a:06:b7:a2:5e:66:10:
05:c6:47:66:8c:f9:42:9b:88:6a:cb:f3:ce:f6:c1:1c:be:a4:
90:c1:65:9b:3f:cb:4c:e6:34:5f:33:63:33:53:96:3c:0f:85:
f2:a0:80:81:66:47:0c:10:87:f4:68:ae:62:82:1b:1e:0b:84:
5f:91:3b:e5:20:7d:cb:2a:08:25:8b:f6:e3:b2:8e:0f:30:cb:
36:54:36:0c:e0:87:6a:4e:6c:ad:1c:42:3e:17:9f:15:d4:98:
56:df:43:e7:d5:c3:17:d7:59:f4:d4:13:90:77:a3:8c:91:d4:
33:e6:85:07:5c:17:78:d7:ba:81:0e:6d:71:ad:d3:de:13:48:
0a:d3:1c:58:cf:a2:4c:e5:2b:8b:db:05:93:7d:7d:fd:4c:27:
ed:14:5e:36:29:50:8e:4a:67:34:64:e6:b7:b2:b6:8c:7d:12:
01:73:cb:78:01:6d:a2:62:b8:8e:5e:5a:ac:7a:7b:16:a3:a5:
74:28:9a:b7:1f:bd:e4:a9:b8:97:38:01:ac:49:ff:9b:09:cf:
d3:bc:8d:7f:5c:a7:d9:0f:53:da:9e:ff:11:aa:53:a7:cd:20:
3c:87:7f:69:95:bb:34:1c:b0:c4:6a:fa:03:81:23:e2:b7:fc:
24:9d:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:46 2025 by rpki-client