Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: AW1O2hIQ2cDWBJ8cblPt2I6NApseaj2y8j54Hg4OhB4=
Subject key identifier: 99:6F:91:E8:8A:64:22:73:5D:71:81:46:16:89:4D:6E:D8:67:FF:2B
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019A4F621596BD6FFF0F80F4EE7A37532B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:19 +0000
Manifest this update: Tue 04 Nov 2025 15:00:19 +0000
Manifest next update: Wed 05 Nov 2025 15:00:19 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: XyAWQj3102AVj2HB5IzB82SkZFK7Li5aWr2B0lj0QWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:15:96:bd:6f:ff:0f:80:f4:ee:7a:37:53:2b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Nov 4 15:00:19 2025 GMT
Not After : Nov 5 15:00:19 2025 GMT
Subject: CN=996f91e88a6422735d71814616894d6ed867ff2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:ef:3b:68:45:7f:57:ee:27:8f:76:fa:a1:
4e:1a:3e:80:71:5f:53:e2:8c:b8:fd:44:61:d4:bb:
f3:fe:dc:16:7a:f2:ed:ab:6d:fb:3c:cc:3a:a2:4f:
02:ba:86:8d:99:0a:d8:4a:fc:cc:29:a9:4c:96:92:
18:ce:59:7d:6e:00:c9:f8:9f:cc:fc:c4:2b:f6:48:
87:51:8d:61:36:87:fa:7a:0a:91:4c:fd:4e:97:c2:
47:bb:83:98:6c:7b:cb:21:6c:42:ae:96:6f:14:b9:
f8:fd:5f:ce:70:c6:33:63:1a:9c:8a:0f:3c:2f:ef:
68:2c:7c:41:d3:14:80:43:38:b4:92:1b:3f:9c:98:
ac:6c:95:fc:64:e4:2e:8c:4b:06:bf:86:47:57:b5:
2d:42:1f:5c:c6:df:67:d5:f9:d8:1c:ad:e5:e1:65:
ab:61:76:af:0f:2b:51:3a:cc:2d:91:7b:3d:f2:ae:
d3:ba:c5:06:de:65:77:ca:48:3e:7c:d6:84:36:a6:
a2:c2:32:b2:05:b2:68:8f:63:06:24:bd:a0:24:fd:
06:67:5a:5b:60:f4:cd:e0:5e:d5:c2:df:40:b0:eb:
4d:c0:ba:61:1a:2a:7f:e3:56:a4:e0:99:ec:be:ed:
d2:30:65:be:77:34:a1:3f:37:bd:38:c4:13:e4:9f:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:91:E8:8A:64:22:73:5D:71:81:46:16:89:4D:6E:D8:67:FF:2B
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:2c:95:b3:2c:e2:8f:87:f4:e0:92:38:f2:84:b7:88:52:
67:e5:bf:54:63:27:df:46:ac:b3:82:85:74:8e:33:c5:e1:9f:
6d:8f:6b:db:e6:d0:a2:f8:51:cd:b5:12:15:1a:87:53:ce:da:
12:8b:d7:ca:d9:9c:aa:1c:11:6f:ba:64:56:0e:4c:df:16:8e:
75:b2:a0:dc:12:52:71:e2:f6:48:f0:ba:66:5a:f8:ad:be:2f:
2a:3e:65:fd:50:9c:61:bb:b1:d4:b9:73:a2:84:78:25:f8:1c:
51:06:7e:3e:72:bb:ad:29:d9:6b:d1:6b:98:9e:2e:0f:23:c0:
3a:3e:64:5b:97:db:01:88:74:c4:bb:30:dc:01:43:18:1d:a0:
9f:c7:ba:29:4c:f9:d7:fc:71:bd:83:50:de:59:2b:f2:ba:91:
5f:32:14:e4:84:44:e3:9c:98:6f:f6:16:45:74:14:6a:78:c8:
9f:49:01:5d:c7:be:2e:fa:be:9b:8d:89:2b:0e:79:fd:46:0e:
26:48:4c:58:74:20:be:11:1a:0c:4d:90:a3:4c:2c:60:a4:0a:
26:40:63:b9:8b:92:a6:e8:e2:4a:83:e3:22:d2:70:91:aa:91:
05:9a:d0:5b:27:4d:5e:29:8d:b7:31:41:01:b7:11:ff:42:67:
4d:58:6a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:13 2025 by rpki-client