Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
File: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft (raw, json)
Hash identifier: RtkXvSW/Nhl0zWSpPcLwQ//F4x1q0SrggelTRjznxus=
Subject key identifier: B2:D4:FC:FB:AE:13:A0:E1:38:A5:64:02:43:45:D8:BB:2C:0E:46:C9
Authority key identifier: 04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
Certificate issuer: /CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Certificate serial: 019A4F6296AE46357C186752F7BE7C3BDD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: 1-pP64K4_i8qDb-3-mkpkdoUvpwQ.roa (hash: Kl3hSPrxfLsP3eL4mz9H4sGXJibptXkIeof0KRDPENU=)
2: BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl (hash: lRZmLhtPRIqEZ6yI5TN9b2MDPcGrENP9uNbGGNOdyBU=)
3: RLvDrK9Icwtsn0-UEJyGztaVYr4.roa (hash: sOv+1479fgLJ5PTa3FjO5dyIsDN63KZWKnOL+8WQdFo=)
4: _4XBnUgfkXLCDNw3CzmT18WUZVM.roa (hash: giU+x9zSm/fPNyU8L4h9ehUNb3Bz8rg57NNz6941FeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:96:ae:46:35:7c:18:67:52:f7:be:7c:3b:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048eefb5b26483561711c990f20ff552ac4e2c9c
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=b2d4fcfbae13a0e138a564024345d8bb2c0e46c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:b3:db:71:55:c8:83:ee:33:4b:26:a1:10:
79:ec:e0:22:94:2f:2c:44:87:03:06:cf:e4:94:31:
d5:4a:4e:d3:98:c4:61:52:e7:e6:14:2f:e7:3e:39:
77:78:ac:aa:48:b8:41:d8:d9:e9:23:b9:8e:05:94:
a9:c0:94:fb:ce:37:a0:c6:97:06:48:d7:d7:42:bf:
4e:9d:d8:14:36:9a:58:30:03:13:4b:87:db:be:81:
7c:13:1a:83:70:2e:5c:37:cc:ee:9f:44:47:7f:30:
d4:f2:83:b3:b3:b2:3b:0a:ad:5b:fa:f3:2f:dc:42:
61:4d:aa:c3:61:55:17:9a:11:3d:07:e3:94:8b:5e:
73:51:93:f8:4e:f5:d5:6f:b3:18:29:68:b6:a3:bd:
ed:0b:02:8e:10:6a:3c:3e:eb:6d:fb:34:84:83:d3:
46:34:0e:63:e9:a6:bd:a6:94:5e:c8:41:f4:a5:16:
03:9e:4e:59:03:5b:43:ed:b0:8c:dd:20:01:a9:81:
95:57:f9:af:82:39:33:45:d0:6c:63:28:ce:67:58:
c4:35:c9:ef:34:5f:36:f4:24:cc:80:2b:2a:d5:80:
1a:93:76:a3:e6:71:e4:4f:c8:2f:e4:9c:89:0c:1f:
1b:5e:dd:08:22:fc:b6:98:82:6f:2b:15:62:6a:d2:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:FC:FB:AE:13:A0:E1:38:A5:64:02:43:45:D8:BB:2C:0E:46:C9
X509v3 Authority Key Identifier:
keyid:04:8E:EF:B5:B2:64:83:56:17:11:C9:90:F2:0F:F5:52:AC:4E:2C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4b6354-a7a3-4351-a7de-aeac5d9cdc7b/1/BI7vtbJkg1YXEcmQ8g_1UqxOLJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:aa:fb:0b:66:bb:ff:02:13:c4:6e:82:b6:d9:2f:61:ac:88:
d9:68:92:c3:ae:ed:4c:c6:00:1b:f9:c8:91:37:9f:7a:21:4d:
a8:89:0c:12:79:57:d8:84:f4:fa:ed:07:24:6a:b6:3b:34:1a:
76:31:49:d3:2f:87:b3:95:18:bf:39:2b:7d:c6:5b:1b:fa:e2:
90:58:7d:d9:a9:5d:07:c5:95:6e:74:2c:b0:09:36:36:03:34:
98:63:02:f5:00:4a:37:da:9e:d2:12:9f:94:8f:81:1a:a7:57:
80:9c:aa:50:c2:0e:53:6e:22:99:b2:73:e2:06:ea:10:bc:a9:
d4:6e:9e:da:ef:63:7a:38:da:14:06:50:c5:85:29:0a:18:d8:
4b:78:c9:f6:99:85:f9:f9:dc:08:a8:b0:24:28:7a:ed:33:f5:
c4:9a:16:76:04:7b:88:70:f7:3f:46:4c:61:a4:2c:cf:12:59:
10:35:b1:a9:06:c3:30:a7:6e:7c:c2:c7:ea:3f:97:d9:3d:b9:
34:37:5f:7b:7e:06:2d:99:1f:2b:d5:8f:87:6b:88:d3:59:a2:
fc:d0:72:8c:13:73:75:01:0d:a0:7c:b7:8a:f8:8b:b9:39:93:
6a:d7:e7:d4:88:e4:0a:83:e1:8d:5c:81:e5:82:c5:bc:ec:65:
c9:89:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:43 2025 by rpki-client