Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
File: sK0iZDwtl71x-LY0-40dT58B9Kc.mft (raw, json)
Hash identifier: msBazknKWBrtOFfs98BIjKLl8neQgIoHL3iNnLTCVFQ=
Subject key identifier: 0B:02:79:87:57:C9:A1:E9:EE:96:25:A8:8D:10:46:13:05:44:16:A6
Authority key identifier: B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
Certificate issuer: /CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Certificate serial: 019A4E869A338CED4D814D79ADF2C72C4CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
Manifest number: 116B
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: 89qbXuP3JJGKzWaNZO3dqnt1pdw.roa (hash: obr33L2CB/OVnTXprqPZCOQ9LeK6vQA821ilRu8qFT0=)
2: sK0iZDwtl71x-LY0-40dT58B9Kc.crl (hash: zyNDD9gxKSrxGIyOWNaJPbzOX6ygyT08wzgqdyHrwGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9a:33:8c:ed:4d:81:4d:79:ad:f2:c7:2c:4c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ad22643c2d97bd71f8b634fb8d1d4f9f01f4a7
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=0b02798757c9a1e9ee9625a88d104613054416a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:7e:a8:e9:89:c1:c9:09:c0:a9:2c:43:3f:
5b:b5:d6:f0:ab:ae:1b:e5:b7:e0:0a:e3:0b:d8:9c:
a0:3e:6c:93:7a:a3:8b:e0:d1:90:25:ba:01:da:bd:
1c:d1:d6:14:7f:14:77:1a:75:d8:95:d8:5c:65:6b:
ae:9e:d4:d3:19:83:4c:be:08:b4:09:65:1c:28:6f:
98:b6:fe:0c:93:b6:df:4c:d5:36:bd:df:02:f5:f1:
55:ec:6f:51:66:72:98:c1:cc:93:7a:6d:4e:3b:24:
81:5d:16:bc:fd:3a:c1:48:e9:44:62:97:e8:05:38:
1d:2e:1d:d5:b2:d2:3f:29:76:2d:6a:cb:f8:1f:52:
1e:1a:b8:95:1e:4e:fb:b1:a6:5e:22:8c:5d:55:c9:
2f:9b:d7:9e:18:84:f4:60:00:2f:67:d0:da:4c:98:
61:67:87:8d:19:03:a4:e2:3e:c9:2e:0e:49:b8:05:
58:00:57:d7:67:4d:46:67:19:0a:f6:50:67:7d:d9:
e6:62:f1:12:80:b1:da:0e:c7:b7:f4:e1:81:39:78:
03:95:66:3e:76:fe:37:31:75:30:1f:d1:f7:8a:70:
08:c5:9c:6a:12:0b:51:b1:9a:03:cb:24:29:08:ba:
9b:8b:b3:e1:f1:1a:aa:25:e5:47:d1:32:76:bd:71:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:02:79:87:57:C9:A1:E9:EE:96:25:A8:8D:10:46:13:05:44:16:A6
X509v3 Authority Key Identifier:
keyid:B0:AD:22:64:3C:2D:97:BD:71:F8:B6:34:FB:8D:1D:4F:9F:01:F4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK0iZDwtl71x-LY0-40dT58B9Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/30b3ff-7036-4a2e-8eb5-074ffb423c13/1/sK0iZDwtl71x-LY0-40dT58B9Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e7:08:52:5f:37:3b:24:49:4f:29:21:66:8d:27:27:bb:cb:
0b:88:fb:5f:2b:1e:be:05:db:d9:65:58:ef:b9:bc:3a:92:2f:
75:f6:b2:2d:e7:e5:4d:59:f0:75:4d:0b:76:f0:f8:8e:48:39:
59:75:ee:41:10:c0:ba:cd:03:f9:ca:79:be:a5:56:39:73:86:
41:0d:83:1d:84:16:21:b4:5f:81:9c:8e:92:45:ad:16:32:80:
64:0f:3f:80:db:e3:61:6c:d6:82:1a:7d:39:47:1d:30:84:0f:
ca:4d:48:a6:e2:83:9b:eb:6f:08:88:43:06:37:86:b7:63:9c:
42:de:8d:0f:50:99:17:7b:a5:e5:ba:a5:01:da:11:35:4d:78:
b7:c7:6f:4b:a4:c5:f8:dd:18:54:87:5c:85:8a:4c:62:63:60:
fb:da:82:f7:79:eb:23:6e:b3:8e:3c:f2:b3:4b:30:41:cd:dc:
76:93:3c:3f:4c:9c:a6:65:90:c7:0b:40:1e:1d:ba:66:ef:e0:
c0:5d:56:c4:1e:f5:45:9a:0a:a2:32:74:e3:66:f1:f0:26:1a:
b2:15:9e:4f:31:7d:5a:81:05:4a:a9:5b:b9:95:fd:1e:5b:14:
39:7d:3d:be:34:ca:47:05:5b:2c:19:b6:3a:6a:af:a9:2f:a8:
b2:ea:8d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:52 2025 by rpki-client