Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File: B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier: +XTlpLgvufwH8Mmlnk5p+EKeS8GRP4sn3QSHKPsHa7w=
Subject key identifier: 1B:03:3B:65:29:C6:43:95:B2:AC:B2:12:5B:69:2B:4F:50:B9:BC:E2
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 019A4E4FFE6235039662328C86ED90CA46E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: TfrZWoeKB35QHwyfJvYJOsU45ZDDkSpmckcHnCWAkEA=)
2: RXO07Z0iIdMtU9258ApTW4Px3Zo.roa (hash: J36vRsxAiG9Dz9sEjScgTwQF6Mkf3SG6RhhQrbW+LNs=)
3: lH54WcJ4G__eVzqEleg29M5qTHs.roa (hash: /pzgt/Z/mQu+YDPs+XFHauFmf5QI5OT38y+GYqX//ns=)
4: oPQCotSBonBTphEnNzZUC8WTKuA.roa (hash: /cJ8DFMUKwkX5N8PRfv6spa6h2JElojL6dR/JttjunM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fe:62:35:03:96:62:32:8c:86:ed:90:ca:46:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=1b033b6529c64395b2acb2125b692b4f50b9bce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:77:18:64:f4:07:a9:53:0d:f3:36:76:f9:07:
d9:09:e0:48:b9:1c:fe:e1:30:24:1c:fc:29:67:d7:
e2:db:aa:06:b8:40:6f:e1:fe:63:fc:1d:98:ea:bd:
ca:4f:b2:d2:22:77:75:6c:3f:7f:7d:dd:19:75:f6:
99:ce:3f:9b:ab:db:9d:81:61:18:3e:1f:bc:90:86:
e4:c6:d8:3d:a9:1d:0b:ef:73:e3:39:d4:bf:81:14:
bf:a7:c8:35:77:b0:8a:ae:7b:07:ed:ce:a6:17:26:
02:61:f9:69:f2:7a:9a:26:9b:06:24:7c:fa:86:f1:
8c:48:83:04:2e:b0:6b:d9:5c:6d:b0:22:31:47:f2:
86:95:27:f4:45:f8:b4:d6:dd:5b:fb:2b:15:9c:53:
28:d9:16:ac:64:12:3d:db:30:6b:5b:fd:da:ff:25:
4e:db:93:5c:5b:5c:c3:f0:46:d5:78:21:ca:21:ab:
bb:e4:43:dd:10:b0:b3:b7:38:73:83:dd:69:0d:ad:
a5:9a:34:c9:ce:a9:89:6a:bf:4d:95:b7:f2:55:44:
a7:9c:8d:f5:1a:b0:3b:19:d7:95:45:a1:3f:e8:7c:
db:b6:b5:ad:59:be:26:2f:06:79:be:d0:32:af:45:
a9:38:e0:59:6d:f3:f4:30:63:b8:8d:af:0c:2a:ce:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:03:3B:65:29:C6:43:95:B2:AC:B2:12:5B:69:2B:4F:50:B9:BC:E2
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:06:5b:2d:26:e4:77:32:14:5a:06:0e:b6:e3:03:9b:d6:41:
1e:a3:23:a5:d9:7f:e5:a6:a1:64:37:20:53:de:2a:87:ed:7a:
61:5c:7a:78:12:5c:9d:9a:7d:c5:d0:0c:60:a8:91:ec:1d:42:
ec:5d:29:5a:54:8a:0e:6a:8d:de:24:5b:ff:e6:7e:c1:61:f6:
34:ef:6e:4e:ca:23:69:67:e8:5f:5a:52:57:18:6f:b8:38:76:
fe:71:03:8f:76:4d:aa:1a:57:37:b0:88:c2:65:11:29:03:e8:
6c:60:cd:bb:81:db:fb:4b:dd:61:bf:b5:65:9a:31:bc:a4:a6:
ca:16:5e:91:d2:53:a6:ef:76:48:cd:5d:30:43:dd:15:30:82:
4a:73:c0:e8:ab:71:bd:5f:d0:73:f3:f1:44:1d:c7:f2:cb:55:
d6:5a:a6:67:51:52:3b:14:0f:41:c4:b7:7b:2b:c8:de:44:9f:
7e:65:63:d8:2e:fe:68:2b:b6:28:a2:a5:d8:1c:e2:19:89:e1:
a9:86:87:bd:bf:4f:11:cd:bf:31:bc:63:17:e8:e0:ae:9d:4c:
e1:42:3a:a4:31:e1:f6:fd:39:07:9c:db:cf:c6:18:00:0f:b3:
ac:ff:6d:e0:f6:f3:73:d5:c1:f5:1b:3a:0e:08:67:00:53:18:
79:3d:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:41 2025 by rpki-client