Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: GPzZnjeM1HpCh9zlZCs5TWk3JOXeLAphTDvNONRTwbs=
Subject key identifier: BB:04:88:04:6C:BC:47:AD:B7:5D:46:EE:C4:F8:1F:61:35:94:0B:6A
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019A4FCFE76F729D811254AD999E11A4DF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0B06
Signing time: Tue 04 Nov 2025 17:00:16 +0000
Manifest this update: Tue 04 Nov 2025 17:00:16 +0000
Manifest next update: Wed 05 Nov 2025 17:00:16 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: XqdU9DGqOrMbLCGGAB4b/0eBRQtI6Lddg6HkKR7VXfM=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e7:6f:72:9d:81:12:54:ad:99:9e:11:a4:df:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Nov 4 17:00:16 2025 GMT
Not After : Nov 5 17:00:16 2025 GMT
Subject: CN=bb0488046cbc47adb75d46eec4f81f6135940b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:e3:43:25:3d:45:a8:5e:e1:e6:64:d0:e0:
2a:62:4e:cb:f1:7d:3f:de:1d:d3:97:87:46:40:93:
8a:29:98:15:09:e6:f6:fd:da:76:8c:d7:cf:f1:40:
6f:21:e5:04:bf:fb:95:f5:e5:1e:35:86:8d:29:55:
5b:61:25:11:23:45:55:75:88:32:0b:04:1f:b3:fb:
dd:07:07:9c:a4:e7:86:91:53:72:13:0b:24:99:7d:
ac:0b:a6:f5:d5:71:75:90:59:1f:94:14:42:09:1d:
ac:8a:0b:f9:1c:ba:0e:2f:bf:9e:0b:d7:6a:8c:ad:
39:dd:b4:32:04:c1:2c:ed:8e:eb:93:19:22:97:26:
43:4b:57:2b:ca:35:5e:f9:42:c9:e2:46:9c:11:df:
2d:36:01:98:e8:de:e1:ad:88:62:7e:e9:f5:6d:84:
9b:ec:a2:26:fc:19:67:b5:86:d7:be:c1:66:9f:35:
9a:03:35:b0:ba:20:a3:43:1e:d0:6c:dc:1d:e2:47:
41:2e:33:a9:9f:e6:a4:5c:06:03:df:dd:93:e7:1b:
46:b1:2c:75:da:34:07:f4:c9:9f:40:22:d4:6b:16:
5a:49:4a:41:8d:a3:dd:c9:9b:b8:33:fb:2a:00:f3:
41:54:95:46:26:8d:ae:b6:4a:3e:86:b1:ce:7f:48:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:04:88:04:6C:BC:47:AD:B7:5D:46:EE:C4:F8:1F:61:35:94:0B:6A
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:58:de:2f:bc:e0:f8:1e:a8:e0:57:8a:40:4c:b1:98:33:
0c:14:f6:62:b7:05:2a:ae:ce:3e:56:cf:c4:4b:19:df:58:1a:
4c:6f:cd:c8:cc:57:8e:12:58:32:33:02:66:37:82:e4:9e:36:
10:70:93:b6:1f:77:d3:70:8f:24:69:a7:25:d5:d0:fe:1f:33:
f1:af:5d:6b:33:90:0e:c1:88:fa:3d:6b:d9:80:88:39:bf:86:
ca:b0:63:13:2f:64:19:55:7e:c0:3c:6a:3a:77:3f:81:7b:d6:
e5:d0:49:b9:74:b6:26:67:b5:8b:3a:b4:de:34:97:b7:bf:07:
4e:a8:7f:46:09:6f:ef:b0:21:33:81:6c:a1:3d:b8:1d:bc:6a:
49:16:d7:f6:15:09:13:90:ed:10:2b:6c:2a:df:07:b3:e1:3d:
3b:5c:97:cf:6a:ce:50:c2:b1:cb:db:40:99:cc:5a:0d:62:99:
f9:09:19:da:ad:6c:81:07:ab:ce:9a:8d:76:74:8f:12:5b:56:
3c:39:31:61:28:1c:53:47:ec:58:f6:32:7e:f4:06:ac:b1:3e:
e5:3a:98:35:61:c2:c3:d7:55:5b:1e:c3:58:bb:84:f6:b9:33:
4e:9e:91:ec:19:4f:42:22:a3:8d:8d:a1:f7:bc:48:92:5a:f8:
3f:5e:e1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:44 2025 by rpki-client