Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier: gx2vY+U8awRvhUS3KemLHGD7FQkFtoPzTZJYvM2AhpM=
Subject key identifier: 4E:8C:F9:9B:27:89:0A:41:B6:80:41:BB:B8:18:DD:97:F9:31:BA:3F
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer: /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial: 019A50077035695CE9DEFBC983B5E8AB9404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number: 0564
Signing time: Tue 04 Nov 2025 18:00:56 +0000
Manifest this update: Tue 04 Nov 2025 18:00:56 +0000
Manifest next update: Wed 05 Nov 2025 18:00:56 +0000
Files and hashes: 1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: bGHbQzKOvyTXzoUidyhDmzqvNHJSYbQasneW4pcWNfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:70:35:69:5c:e9:de:fb:c9:83:b5:e8:ab:94:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Validity
Not Before: Nov 4 18:00:56 2025 GMT
Not After : Nov 5 18:00:56 2025 GMT
Subject: CN=4e8cf99b27890a41b68041bbb818dd97f931ba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:50:5f:5a:27:01:af:ac:3c:a6:cc:e4:90:
b0:1f:7b:ff:27:41:74:e2:f8:28:74:2c:54:03:5f:
36:7a:1b:46:a1:1a:d2:19:28:a3:e8:8e:32:fa:05:
95:a4:94:f3:9c:16:c7:67:ac:7e:4c:c0:c9:e1:6e:
50:4d:27:71:52:68:c0:1f:6e:d9:4b:31:e6:49:fe:
d7:d1:42:8a:6b:55:0f:ec:bd:f3:b1:0b:6f:5f:bb:
65:0c:a3:75:3c:fe:a3:ea:9d:7e:0f:19:b1:a9:52:
00:b4:51:7a:55:bd:cc:ac:b3:6f:79:8b:ef:f3:97:
79:05:33:9e:bb:4d:2c:b6:2f:42:7b:24:d1:63:e1:
34:9e:4d:d8:8a:66:57:e9:fe:5e:8c:c6:c4:14:cb:
46:f7:12:33:f9:ef:83:e8:01:7e:28:64:49:1b:fc:
e9:a8:17:49:f0:9d:91:c0:a5:1d:01:ab:94:92:8e:
b6:34:56:f8:24:4a:89:9e:63:aa:fc:21:53:d3:b1:
dd:66:5e:8c:e6:64:57:de:c5:6c:e4:42:9d:c4:6c:
89:2b:2e:f1:26:6c:6c:fd:50:75:82:c6:48:1d:00:
14:1c:41:de:25:f0:af:31:22:1a:fa:46:a5:9c:1d:
2a:88:09:26:8a:e9:4e:be:f1:32:48:bd:9f:76:9a:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8C:F9:9B:27:89:0A:41:B6:80:41:BB:B8:18:DD:97:F9:31:BA:3F
X509v3 Authority Key Identifier:
keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9a:15:e0:01:e0:c2:b1:24:41:ec:61:e4:23:7c:c6:88:c8:
09:99:71:7d:c3:63:e2:38:23:72:f6:60:b5:a9:e5:46:37:01:
8e:fe:ce:07:fc:6c:4e:cd:37:ee:ab:b8:d3:10:17:65:90:40:
75:f7:a1:2e:9b:28:c4:4a:c9:0a:d6:21:fa:0d:ae:5e:2f:73:
fa:75:33:88:95:23:0a:5c:8b:17:6b:7a:12:5e:27:94:c5:3b:
59:62:d5:55:2f:88:eb:75:91:e2:2f:69:4e:64:5c:88:91:50:
0d:df:0d:84:34:d4:45:07:b4:3c:7f:c7:13:b7:76:a3:4c:0f:
c2:47:40:cf:63:53:49:ed:ed:88:c8:2d:c4:b4:ac:38:12:48:
7a:52:6c:f3:b0:df:1d:be:63:b9:5d:48:58:2b:4e:50:84:35:
e4:95:c7:4e:67:d3:04:05:d4:da:b2:15:48:ab:b4:fd:65:19:
1f:97:dd:2b:16:a8:cb:be:fa:8a:49:42:8f:d9:61:66:58:c9:
4d:cb:53:49:f9:06:fd:ef:0d:39:66:3b:1c:4f:2c:2f:87:e5:
8c:a8:0b:fd:82:66:d4:29:22:e6:40:aa:2b:32:20:20:15:e2:
bf:35:ad:95:58:b3:f2:0f:c5:5c:db:a2:be:3e:7a:09:e3:ea:
17:b9:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:47 2025 by rpki-client