Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: TrHZB4o9AjeYnM+UufVyzcesx5kIehhRYUhCiVHOqP4=
Subject key identifier: EE:AB:27:A5:8A:D7:1C:28:47:35:94:9B:F2:80:17:9E:46:76:FA:87
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019A4D73AA9007603056B3D0305F6D65A41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: GXD6EbD6kjzsisiM36BCh6gcANdcNFq2HAyLB3MzLEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:aa:90:07:60:30:56:b3:d0:30:5f:6d:65:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=eeab27a58ad71c284735949bf280179e4676fa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:66:ef:fe:26:ec:55:da:a4:45:70:71:55:
ba:3d:c3:d8:21:aa:c5:03:91:98:c1:64:53:95:17:
d8:a4:e1:15:7c:0f:34:19:ed:6c:45:9c:40:13:3a:
eb:56:d4:31:72:90:bf:bd:d2:0e:07:b3:c4:6f:41:
7f:f5:9c:af:ea:fa:66:95:6c:2d:94:89:d4:55:00:
3e:26:04:f4:af:5e:50:ce:1e:79:74:16:eb:a1:8b:
cd:53:60:6f:86:fa:db:83:9b:cc:0a:5f:48:fe:5f:
18:c8:3b:93:a8:e3:50:75:f5:40:e1:fa:95:8e:87:
14:97:60:c3:7d:93:02:c1:4e:74:23:a6:69:d6:f0:
24:c3:ea:e8:5d:2f:07:9c:b2:c4:d7:c8:0e:42:1f:
ee:f1:a2:fb:58:b1:50:d5:9a:cb:17:cf:b9:9d:23:
94:e7:16:c4:f0:a9:aa:b4:15:53:7a:fe:9c:70:29:
66:8f:d0:3e:85:6f:c0:f2:4c:af:f0:57:fb:a7:5a:
be:84:4a:b6:78:29:13:b7:c6:b4:6b:b4:fe:e3:3d:
38:d2:46:33:fb:2f:52:8c:de:e3:8d:e9:d1:ec:3f:
5c:64:28:b5:44:3b:99:f4:a4:d5:fa:34:ce:f1:4a:
fa:94:10:f1:f4:9a:68:78:4b:0e:82:dc:83:64:61:
58:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:27:A5:8A:D7:1C:28:47:35:94:9B:F2:80:17:9E:46:76:FA:87
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:ff:1d:ab:ef:07:9c:68:78:59:0b:a8:71:ac:53:6e:3c:
5c:3d:1c:8a:b7:f3:a2:4b:21:35:81:7c:a7:72:18:17:9d:b3:
02:97:43:a9:22:31:9c:8b:68:82:b0:75:7b:f4:9f:5c:2b:f8:
cf:54:8f:b7:fe:0e:32:bf:35:34:81:64:af:d2:5e:9a:ed:8c:
e6:b8:f3:3b:52:24:97:75:1e:87:2a:80:09:ae:ee:80:2d:11:
7a:f1:5d:c2:e5:f3:c5:f0:a4:de:1f:41:e0:4b:17:1e:64:05:
fa:d2:a0:13:33:0b:bd:39:93:0e:9f:8d:4c:62:03:3d:42:1f:
77:dc:d0:3b:ad:0c:0b:b7:38:92:d1:9d:c9:38:05:35:22:21:
ff:3e:ea:b4:20:9b:7e:c6:08:60:37:b6:fe:63:ed:72:f1:6f:
19:3b:f9:aa:ac:2c:f1:d8:07:cd:16:d3:4f:39:2d:de:88:89:
eb:c1:08:31:bb:64:5b:96:9f:04:c9:a9:3c:47:d7:90:c5:11:
42:dc:a6:c9:0e:2f:11:d5:80:21:93:b5:2c:d2:9b:a1:0d:cf:
37:a7:1c:e4:88:9a:32:d3:5d:40:73:85:89:2d:99:99:9b:91:
18:26:18:2b:9a:9a:ff:37:86:30:29:75:47:69:23:38:e5:82:
57:f6:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:28 2025 by rpki-client