Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File: b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier: XJlxdT2fvLJI0TBhINxyAZxU5RxAS/Ee5EYd2d62HQQ=
Subject key identifier: 84:14:42:57:FC:F7:1F:68:1A:CC:79:1D:B3:A5:E5:9F:06:F9:7E:D3
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer: /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial: 019A4F62B8479E3E0DE2A204851E8281C08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 15:01:01 +0000
Manifest this update: Tue 04 Nov 2025 15:01:01 +0000
Manifest next update: Wed 05 Nov 2025 15:01:01 +0000
Files and hashes: 1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: FoWXTsHXJIAsTgV8bc+eqr/wl3j50snDoB4l4IXyAso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b8:47:9e:3e:0d:e2:a2:04:85:1e:82:81:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Validity
Not Before: Nov 4 15:01:01 2025 GMT
Not After : Nov 5 15:01:01 2025 GMT
Subject: CN=84144257fcf71f681acc791db3a5e59f06f97ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:ce:b5:b3:b0:4f:b0:4c:fb:ba:10:c6:47:
91:0a:fd:1b:ed:54:9b:2c:49:7a:eb:a0:ce:b7:db:
c8:1f:54:cf:d8:ca:02:95:f3:61:a0:6f:32:2a:5e:
42:95:c0:d4:68:75:9f:92:f2:c2:40:c9:5a:2c:f9:
5f:87:8a:0d:55:6d:3c:0b:55:2c:c3:4e:12:78:ed:
d1:89:c3:e0:c7:71:3f:96:99:35:06:b1:84:59:6b:
bb:6d:85:e3:0a:a9:44:f3:b6:fd:ea:61:07:72:ab:
93:ef:8f:9c:b0:12:10:6b:8a:1e:ea:e5:cc:e3:36:
29:cd:1e:8a:1b:aa:98:76:c9:79:27:e7:df:64:79:
e8:ce:f7:a2:ae:f6:51:a8:5a:d5:fc:bc:14:0d:47:
41:fd:cb:e8:69:c4:f0:a4:af:64:97:8c:25:61:b8:
96:1b:71:8e:d4:6d:f1:2e:b8:16:45:64:55:3a:ab:
c0:8c:3d:ff:37:60:52:94:56:74:03:88:a5:a1:83:
c7:44:b4:e7:55:a7:64:19:e9:46:f9:70:8d:fb:e5:
f1:2b:15:33:b1:1e:b9:b5:e8:89:30:9f:d8:4f:82:
78:54:2f:b8:50:e3:ca:aa:71:d2:b7:75:82:c3:aa:
ff:6c:25:44:a7:41:1a:5f:12:e2:36:16:c3:6b:10:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:42:57:FC:F7:1F:68:1A:CC:79:1D:B3:A5:E5:9F:06:F9:7E:D3
X509v3 Authority Key Identifier:
keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:cf:ee:a5:79:f6:d8:77:dd:af:ce:25:3e:63:6f:f0:31:
56:d3:c9:f9:f8:c8:56:b5:ea:d9:90:4f:0f:c5:99:08:46:02:
ab:e1:df:2c:94:e8:b9:d6:57:05:82:f1:32:7b:0d:d5:25:99:
07:91:af:f9:5c:81:66:e0:ed:3e:5c:a1:a1:c9:78:bc:16:89:
3a:1e:30:43:d8:ea:57:63:a9:13:3c:b0:c3:e7:c3:56:f4:6e:
be:c0:3d:d8:6b:af:70:b8:5f:0b:7b:95:fa:42:f0:e3:a7:71:
e5:2c:63:ea:1b:1c:fc:08:81:e4:1b:10:2f:ec:b1:a4:12:db:
a5:12:85:40:44:7f:15:d6:f6:22:99:e0:ed:bd:61:d5:36:a0:
90:01:82:3e:4c:b5:2b:a4:5c:6e:d4:34:12:5d:0f:bd:17:89:
57:8a:b2:d3:e2:3f:5f:66:db:50:af:dd:c3:0c:9c:78:60:10:
08:57:05:3b:8d:f3:5a:b7:9f:e7:87:a2:d2:e4:27:70:b2:46:
f8:71:d8:f5:2f:bb:41:e3:75:bc:48:e5:67:0a:8f:13:85:99:
fd:6c:69:e8:7d:57:44:95:56:02:fa:60:47:33:01:92:0d:64:
91:d7:cb:d2:38:98:08:7c:de:3a:b1:4d:07:f7:da:da:76:bb:
05:c8:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:42 2025 by rpki-client