Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: zqkM9MIrNvzbA1YRj9jsn7D9uBdvnKXR68Z5lMCIHPY=
Subject key identifier: 19:F6:1B:C9:94:34:1B:60:E6:74:08:82:00:3B:37:81:17:C3:0F:3F
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019A4F62DE49E5AE3F823FB0AC235651EB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: oHwGESLAM3Iw8FbG9VGAf0uHqkr3Cg1+ICXubzT903E=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:de:49:e5:ae:3f:82:3f:b0:ac:23:56:51:eb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=19f61bc994341b60e6740882003b378117c30f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:9c:7c:c3:4d:23:03:c2:8c:cf:98:88:2b:
43:5e:2f:d2:b1:0e:2a:bc:7c:ef:b6:38:84:f4:d8:
09:c2:b3:3d:12:15:7f:90:9c:a8:28:bf:0c:4c:83:
0f:81:8a:75:60:6b:f8:02:05:9c:7e:5d:39:38:6e:
97:14:27:30:65:53:06:6b:5f:ed:eb:00:be:ea:2b:
82:a6:48:10:09:53:a5:c7:4b:84:df:5c:c3:0c:5e:
56:d8:0f:15:ad:dd:6a:12:7f:12:5f:8b:f0:62:77:
f7:4e:7f:8f:6b:a1:6a:c6:27:2f:de:3c:93:69:a4:
76:28:07:2c:f4:03:fc:ef:be:74:9e:df:63:cf:a0:
17:92:e9:9d:07:b0:5a:44:25:d6:63:bf:a8:0d:bd:
cf:f3:8d:3a:45:e5:df:07:dd:a2:e8:09:55:c8:b3:
1b:24:48:44:81:63:f7:df:fd:d9:64:2b:1b:b2:ca:
e0:cb:ce:41:34:0f:81:16:4a:32:d6:5f:ee:98:c5:
b7:19:e4:6d:56:77:21:ee:8b:ea:67:a1:68:cd:99:
75:4b:a0:46:f9:c2:91:56:9d:e1:34:78:82:0b:c2:
ae:22:17:1f:cc:2f:78:20:44:e1:b8:01:30:ce:fa:
7d:2c:27:cf:6f:a3:8e:cd:6b:ba:d3:20:5b:6f:a1:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:1B:C9:94:34:1B:60:E6:74:08:82:00:3B:37:81:17:C3:0F:3F
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:70:f3:a5:ca:ee:1e:10:08:49:40:23:ee:56:8e:97:5e:
83:0e:7a:69:1a:3a:06:e9:7a:76:40:9f:c0:ab:aa:bf:52:de:
18:31:80:4a:a1:df:2b:85:61:f8:d8:02:6e:c4:b5:9c:ea:9c:
af:ca:af:2c:09:10:92:0f:09:fe:46:8a:97:c9:82:ef:19:00:
31:34:0f:3c:a3:3b:00:74:64:fb:5e:ea:2e:08:97:f0:08:b1:
a0:99:64:f1:1c:d6:c5:66:0f:85:fc:e7:60:40:e8:1e:25:26:
3b:5c:6e:8a:7f:9a:1a:58:c7:b6:89:dd:a3:78:a7:63:b8:ad:
1d:d4:ac:66:12:18:b4:fa:f0:bf:2a:41:f8:37:0a:f0:8e:78:
13:10:8b:57:7c:fb:17:6a:a3:ba:c9:62:e8:d4:81:1f:c4:4f:
97:49:fb:fd:68:1e:e3:87:9d:59:00:1d:ef:77:ad:c0:15:43:
70:cb:0b:ff:5f:78:06:ff:ee:f4:07:f1:80:57:fc:39:c3:71:
6d:54:8b:c7:dd:2a:07:f1:11:14:fa:3f:ab:ee:bc:67:28:7b:
01:10:1c:e7:84:f3:a1:23:dc:fd:de:56:9d:e7:4d:2c:80:b3:
2c:cf:e7:26:6d:24:d7:2e:b3:fe:2f:f1:2d:5a:49:9d:c1:ee:
78:3b:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:12 2025 by rpki-client