Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: izXI11q/XjYuA4tTWBeAXYHSZT1YbdrL9Rbsvqa4xH4=
Subject key identifier: E9:DE:3E:40:0A:4F:AA:A9:86:A4:68:C5:C8:46:6F:4E:67:4B:B6:0E
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019A4F2B83E0363DF4E3CF1964F9BE951FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: upsC6f+rYhIOfiDU0qfAC5RpPlWnQje76EHDpuEiLNc=)
2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:83:e0:36:3d:f4:e3:cf:19:64:f9:be:95:1f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=e9de3e400a4faaa986a468c5c8466f4e674bb60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:11:9e:9e:01:b6:4a:e7:34:ae:45:a9:ec:
9f:b0:57:c5:75:7b:e8:f5:00:22:8d:ad:24:9a:5a:
3e:1c:3f:56:15:34:7f:33:15:37:3c:9f:90:3d:4d:
ab:dc:36:88:43:09:84:fe:35:ba:31:bd:91:5d:15:
78:30:a3:de:ae:16:83:0c:4c:34:70:ff:0d:2e:94:
3b:13:a4:91:93:30:d2:ad:77:bf:9e:82:de:97:43:
8d:83:9a:3e:4d:d4:60:94:37:ad:f1:95:4d:3d:72:
11:2f:d3:7e:60:a9:dd:2b:b3:c9:0e:2c:62:6e:84:
f4:f3:b8:81:3f:11:2f:36:d4:55:11:ca:f7:f2:fd:
8b:87:29:ff:08:cf:17:35:94:db:5c:41:35:c4:cd:
64:20:79:97:ce:e2:7d:d3:5f:33:e3:5a:01:a3:e9:
4a:27:ff:fc:19:fe:7e:b6:26:b6:f7:db:9c:d1:68:
c3:c9:f9:a4:7a:bc:25:1e:89:bf:64:40:7d:40:68:
30:e0:01:3b:8c:c9:7f:ab:6b:29:d9:df:14:a4:5f:
c9:44:5a:c5:dd:97:18:6d:f2:92:81:18:da:67:bc:
84:ab:36:7c:34:16:b1:ec:d3:2c:bb:6b:a4:b7:82:
3a:83:97:9c:0f:42:bd:1f:b7:97:5e:ac:38:38:af:
52:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DE:3E:40:0A:4F:AA:A9:86:A4:68:C5:C8:46:6F:4E:67:4B:B6:0E
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:51:c1:54:f0:e9:2c:c1:2e:2f:76:fc:f6:50:ba:6a:77:
14:2c:35:3c:72:d8:81:c4:35:c1:54:4b:3d:ac:3b:68:8a:be:
86:49:d2:f5:5d:a4:2e:fa:d5:13:03:fa:38:0b:b1:10:a1:24:
3a:f1:d0:c2:4e:cc:24:9b:33:2b:b2:d0:9a:33:2f:6c:27:7f:
6a:b3:83:fe:30:90:20:fc:67:56:c2:b5:52:05:03:7b:10:91:
a4:f3:4a:d2:18:e2:63:01:25:45:6a:b1:b2:dd:c6:86:98:b7:
fc:c9:84:66:fc:0c:ed:82:22:c3:50:02:52:5e:f1:1c:c6:3b:
fb:72:07:47:fb:a0:02:79:8e:8c:34:1e:27:7b:2c:7d:14:d9:
97:7d:2d:95:8c:a6:3b:c9:68:f9:f4:2d:c1:8b:fc:45:44:6b:
ee:f9:85:44:f5:c8:a4:61:65:db:87:b9:94:c7:51:5f:d6:3a:
d1:5f:c2:b1:0c:4e:48:39:c5:eb:65:f8:39:fa:d5:30:b5:ae:
db:50:c1:b1:00:3a:85:fe:0b:e0:a8:04:f2:3d:58:73:76:4f:
c3:bf:88:bf:7e:20:1a:d1:5f:a5:98:94:74:47:20:4b:ba:9b:
4f:34:c6:91:c5:22:93:48:1c:f5:8c:19:22:ad:b2:74:09:1c:
f7:a3:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:51 2025 by rpki-client