Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: act/tSWbnlfAof/nptTmQcRODjjenn5fD6vKdPBk2xg=
Subject key identifier: 9E:A6:00:94:6B:A6:1C:A8:E4:8C:A6:34:7B:AD:91:9E:C4:5D:A8:C5
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019A4F9902DD6EB0DEED0D4A5373B04171CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: AwQ9l0c8yHc0aesvXGYfv1o4h/xB1T92HE5zLIesk7Q=)
3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:02:dd:6e:b0:de:ed:0d:4a:53:73:b0:41:71:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=9ea600946ba61ca8e48ca6347bad919ec45da8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:c6:3a:f8:4b:f6:71:7d:fe:3a:ae:a3:09:
64:b7:1f:36:ea:31:29:a8:3e:49:14:2a:05:f4:37:
e0:40:dd:5b:8b:1b:da:61:f6:47:44:2c:05:9e:e4:
d1:01:a7:6e:b4:29:d5:f4:5c:35:08:ea:e1:9b:c0:
47:a9:df:ca:ef:07:7f:9d:00:b6:cc:14:8a:65:a6:
b6:b4:a9:3b:3a:b1:92:79:79:49:0d:98:b7:ef:f3:
6c:7d:e3:89:84:6e:4f:ce:7d:3c:7a:e6:08:bb:ef:
5a:94:d5:18:9d:c8:a9:ca:8c:29:81:4c:2d:48:1b:
f8:0a:1f:33:62:b9:fe:6e:0b:50:64:43:cd:2b:8f:
9b:e5:99:41:a2:65:73:e7:18:49:25:84:1d:34:ef:
74:dc:3e:df:97:20:9c:72:4f:c4:b1:e6:30:6f:3e:
f7:e6:2b:fc:08:b2:05:85:cd:38:4e:0a:1f:02:21:
5f:3e:ac:97:95:76:5a:24:26:15:26:9b:26:e5:7e:
16:e9:44:64:d5:01:00:75:0a:3d:35:46:a2:e7:c6:
7c:15:0c:8b:45:14:c8:cb:d7:bf:4d:54:2b:51:d5:
0f:c0:79:39:d3:ba:6b:ad:da:07:39:84:c9:88:8e:
53:f5:ca:53:4a:46:e2:07:72:0f:7a:b6:35:85:db:
c7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:00:94:6B:A6:1C:A8:E4:8C:A6:34:7B:AD:91:9E:C4:5D:A8:C5
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e2:32:48:93:db:c1:d2:39:fa:06:1e:d0:92:6b:fc:70:ab:
c6:43:e0:c6:d9:ac:db:a2:d4:8d:a9:3c:8d:20:eb:42:2c:8d:
35:a3:86:77:7a:de:5a:22:da:58:c3:61:2c:a6:60:2e:14:60:
5b:ac:ec:57:c4:a3:ed:86:a9:d7:60:d2:2e:e4:c3:d1:eb:b0:
41:30:01:f5:f6:69:57:c4:cd:74:68:c5:87:de:77:bb:e9:e8:
f0:a5:02:72:33:e4:5b:12:c9:c4:aa:21:64:b6:57:db:e3:22:
05:9e:38:db:4a:9f:fe:a8:3c:df:9a:d9:bb:f8:9d:10:3b:bc:
48:e6:1c:7a:60:6f:01:58:33:01:cf:f3:a7:46:b4:b8:5d:ba:
63:e6:23:c6:57:17:6b:20:cb:30:8c:b6:f4:0d:ff:a3:59:56:
5d:e7:9f:aa:3f:e4:94:6c:d2:96:2c:d4:75:f9:7c:f5:f9:61:
42:77:30:a1:d4:9f:0c:3d:6c:ec:1f:54:aa:14:ec:80:e5:20:
0d:bd:e9:ae:22:50:b9:2e:fe:71:34:5c:67:01:55:17:4e:5a:
55:4d:4f:9b:ba:cf:6e:d3:69:fe:b8:79:3b:19:7c:eb:bf:8c:
db:f0:e6:07:40:e9:17:70:4a:b6:33:b9:37:af:b6:56:77:a5:
03:7f:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:33 2025 by rpki-client