Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: BUdPJq726CtQPWsHgrdrJwC3mQ+6kAvhHV86AKYtrB0=
Subject key identifier: F2:FF:86:80:99:0D:74:17:C2:73:FB:52:EB:D4:66:35:33:6D:E7:B1
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019A4F62A224EE2E77B7999C7C81590A1583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 07E4
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: rScma5oe+2rgKAHZoBDP84uouiU1x9Hz2HD0vuldk6M=)
2: c3kj5e0FQs-aGeI_pqvpG_P5-CI.roa (hash: L6r7oVdYR79NuIrRw2uuwM285lWZ3pFFGBMiBbZqMWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a2:24:ee:2e:77:b7:99:9c:7c:81:59:0a:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=f2ff8680990d7417c273fb52ebd46635336de7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:a9:ce:28:95:52:0a:6f:f6:a3:b6:ac:cc:
c5:1f:fb:de:ba:ab:ba:96:89:b5:a0:64:eb:8a:f1:
47:47:1e:f6:2e:b2:33:a0:4e:d8:c7:ca:41:f8:a7:
d2:c9:bd:a6:6e:c4:ce:d0:f2:99:19:50:8c:7d:1c:
f8:4d:c8:1b:27:73:4e:3d:12:dc:c7:f1:fa:a7:bb:
88:c4:36:cb:0b:37:80:0c:09:90:a0:0c:a3:c7:2a:
87:ae:62:2f:c6:27:97:5b:c5:a4:a3:ff:2d:d3:4f:
4c:b4:91:8c:9a:22:d7:d0:e7:cb:82:b9:93:cd:7f:
c9:20:02:fb:27:05:20:a6:a9:e8:ac:ee:4d:62:31:
87:42:3f:e3:e7:c2:b0:87:8a:82:83:ae:57:0a:55:
ec:2c:a7:d7:3f:67:30:2a:8e:75:06:69:ac:83:3e:
24:c4:7d:e5:f2:ea:3c:79:26:40:53:0b:93:80:34:
ab:d9:36:a5:f2:04:5e:19:25:36:3a:a5:99:55:ed:
55:15:5b:7c:e3:e7:40:ed:56:21:c8:91:5d:8a:73:
29:49:b2:7e:13:f9:ae:51:b7:e0:c6:af:fb:5d:39:
3c:f4:76:4b:c9:67:c6:f4:a5:c9:8e:a1:a1:af:ac:
5e:7c:d7:0a:56:51:c7:b7:de:1e:b5:1a:3c:e0:72:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:86:80:99:0D:74:17:C2:73:FB:52:EB:D4:66:35:33:6D:E7:B1
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:05:e3:41:c7:b9:1d:2c:77:f3:cd:b2:3c:db:14:0b:96:
8e:39:fe:9f:34:7f:26:20:15:d9:d3:d2:48:7c:cf:a4:51:f8:
7f:e8:79:02:2e:be:91:c5:bf:a1:c2:54:77:87:5e:66:95:c8:
48:20:40:bb:1e:39:5d:ca:f6:6a:56:1e:ac:f4:2f:94:06:dc:
10:ea:c3:03:4c:d6:11:31:53:c1:c6:c6:c1:88:f2:c8:fe:97:
c8:61:83:dd:2c:f4:67:8e:34:f7:49:63:39:b3:b4:f4:e7:ce:
19:6e:8a:af:38:41:43:1c:53:f9:8b:df:ff:7f:7b:03:18:b8:
44:9d:a8:66:d7:93:fe:8b:2b:43:d2:62:ee:2e:89:29:e4:9b:
d1:bc:69:8c:76:41:f5:bd:75:64:e3:4a:5d:32:69:11:94:85:
f6:34:08:93:af:93:00:ef:e4:7f:89:c7:ce:13:96:1c:3a:28:
66:4e:cb:96:37:1d:35:05:f3:cd:3a:fe:df:2c:43:9d:83:f3:
30:56:eb:ff:0f:d5:bf:63:38:71:76:74:f9:2e:4d:20:e0:ec:
61:c5:15:07:ee:2f:9b:40:66:cc:9c:00:98:7d:65:89:23:b0:
2e:52:03:bc:85:cd:0a:b9:00:ee:cf:20:84:f9:cd:11:27:a5:
d3:a2:10:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:07 2025 by rpki-client