Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
File: b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft (raw, json)
Hash identifier: 0V7OJjDiM4RESfFWgTy0hKzJXDDaUAevrqReHsF9arQ=
Subject key identifier: C7:22:C5:64:EC:47:60:BD:E2:46:C0:72:5E:74:E7:18:72:70:81:F8
Authority key identifier: 6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
Certificate issuer: /CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Certificate serial: 019A4FD0581A63CAE4A1713AFA142CB6B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
Manifest number: 1105
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl (hash: Jw7FthzVt++i2CBQIUCOlS1oCTvR1KzmAv+D/cA9RUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:58:1a:63:ca:e4:a1:71:3a:fa:14:2c:b6:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f648e3cab609bd1483ca3e51911ceaa53f0c6a1
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=c722c564ec4760bde246c0725e74e718727081f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:a0:e0:8e:e9:b6:51:5f:c2:bb:3b:1f:71:
09:5b:4f:b9:71:f5:f1:4c:60:3a:58:5a:46:cf:d2:
80:2f:b4:67:76:5c:4a:94:50:1d:35:3e:3c:2f:56:
58:2c:a3:ad:d6:74:33:17:3c:f6:bb:43:00:bd:7b:
88:c7:46:fb:02:d3:5e:fb:db:d1:d8:0d:4c:8d:3a:
50:d1:91:e8:c1:21:d1:ec:d4:2a:a2:dd:1f:9a:e7:
bc:f1:a3:24:2a:a4:99:a0:1f:11:e4:46:2d:ad:58:
4e:cd:b0:1d:54:b5:20:93:9a:09:6e:bc:00:bc:a8:
4e:16:9e:31:a7:93:07:df:b3:c0:06:29:a6:36:78:
d0:76:1a:4e:a6:2b:0f:fe:ce:19:a6:5e:a9:a0:59:
c3:70:ca:16:f5:dc:50:22:00:49:4a:9f:47:16:1b:
e7:88:ce:aa:41:92:db:96:f9:6f:9e:99:c6:eb:48:
de:2e:a1:ac:ed:e1:d9:e3:75:03:0d:55:99:6d:19:
b1:b8:15:cb:65:6d:c7:47:f7:46:f1:f3:be:57:7c:
1a:1e:d1:fa:68:9f:20:98:3f:35:c4:71:c0:3f:43:
c1:16:64:5a:22:fb:3f:4c:57:f5:17:94:16:8f:a3:
64:d8:31:6a:e8:2c:66:5c:22:84:7d:2f:00:8b:e8:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:22:C5:64:EC:47:60:BD:E2:46:C0:72:5E:74:E7:18:72:70:81:F8
X509v3 Authority Key Identifier:
keyid:6F:64:8E:3C:AB:60:9B:D1:48:3C:A3:E5:19:11:CE:AA:53:F0:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2SOPKtgm9FIPKPlGRHOqlPwxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/eaa246-3304-49eb-aada-a069af854b05/1/b2SOPKtgm9FIPKPlGRHOqlPwxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f5:f2:57:7e:3b:e1:39:96:62:84:c4:32:45:c6:0e:27:01:
1c:89:e2:96:5e:96:5a:cf:c1:2e:aa:66:ce:ee:c6:e1:7e:45:
a4:c5:0e:08:69:27:b7:d3:23:8d:a7:31:fd:a9:fd:83:20:9b:
5a:b2:82:99:db:ee:19:06:47:4d:96:a5:80:7d:1b:87:40:ad:
4f:33:69:24:99:63:5f:83:bb:66:90:4c:9e:58:48:6d:fc:b0:
db:2e:24:40:a4:33:0d:50:65:7d:d9:e9:b9:5e:78:34:31:d8:
4f:4d:29:2b:4c:38:74:b8:15:ce:d1:92:5a:4f:69:3c:2b:b7:
2e:89:87:f5:16:12:7f:04:95:7a:58:ef:73:13:fd:f2:53:50:
1a:19:65:c6:19:92:56:15:4b:43:78:6a:2e:6b:67:ea:3f:fb:
55:ee:6e:0f:01:14:1f:89:3f:2d:88:41:42:9a:ce:fb:ee:3e:
b2:c5:d7:2f:47:31:9b:d8:1e:f5:fc:29:e0:23:28:65:4a:63:
42:87:e3:59:68:99:03:b5:bb:80:66:66:1b:0d:2f:38:14:3a:
32:ec:54:60:8c:f8:f7:9f:e5:28:a7:62:e0:c1:56:a5:79:31:
37:cc:74:e8:3d:36:93:17:6b:d2:3b:a2:30:8b:ff:63:55:91:
4d:a3:96:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0FgaY8rkoXE6+hQstrdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjQ4ZTNjYWI2MDliZDE0ODNjYTNlNTE5MTFjZWFhNTNm
MGM2YTEwHhcNMjUxMTA0MTcwMDQ1WhcNMjUxMTA1MTcwMDQ1WjAzMTEwLwYDVQQD
EyhjNzIyYzU2NGVjNDc2MGJkZTI0NmMwNzI1ZTc0ZTcxODcyNzA4MWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopqg4I7ptlFfwrs7H3EJW0+5cfXx
TGA6WFpGz9KAL7RndlxKlFAdNT48L1ZYLKOt1nQzFzz2u0MAvXuIx0b7AtNe+9vR
2A1MjTpQ0ZHowSHR7NQqot0fmue88aMkKqSZoB8R5EYtrVhOzbAdVLUgk5oJbrwA
vKhOFp4xp5MH37PABimmNnjQdhpOpisP/s4Zpl6poFnDcMoW9dxQIgBJSp9HFhvn
iM6qQZLblvlvnpnG60jeLqGs7eHZ43UDDVWZbRmxuBXLZW3HR/dG8fO+V3waHtH6
aJ8gmD81xHHAP0PBFmRaIvs/TFf1F5QWj6Nk2DFq6CxmXCKEfS8Ai+iO3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcixWTsR2C94kbAcl505xhycIH4MB8GA1UdIwQY
MBaAFG9kjjyrYJvRSDyj5RkRzqpT8MahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWEyNDYtMzMwNC00OWViLWFhZGEt
YTA2OWFmODU0YjA1LzEvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lYWEyNDYtMzMwNC00OWViLWFhZGEtYTA2OWFmODU0YjA1
LzEvYjJTT1BLdGdtOUZJUEtQbEdSSE9xbFB3eHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvXyV347
4TmWYoTEMkXGDicBHInill6WWs/BLqpmzu7G4X5FpMUOCGknt9Mjjacx/an9gyCb
WrKCmdvuGQZHTZalgH0bh0CtTzNpJJljX4O7ZpBMnlhIbfyw2y4kQKQzDVBlfdnp
uV54NDHYT00pK0w4dLgVztGSWk9pPCu3LomH9RYSfwSVeljvcxP98lNQGhllxhmS
VhVLQ3hqLmtn6j/7Ve5uDwEUH4k/LYhBQprO++4+ssXXL0cxm9ge9fwp4CMoZUpj
QofjWWiZA7W7gGZmGw0vOBQ6MuxUYIz495/lKKdi4MFWpXkxN8x06D02kxdr0jui
MIv/Y1WRTaOW6A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:55:19 2025 by rpki-client