Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: XYqu0hYGqT60HLrcJ59vhuYDvYsi1fvux3TP85befLw=
Subject key identifier: B0:AC:62:D7:A2:73:B5:09:24:A1:39:39:97:30:1E:AE:86:CB:7D:13
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 019A4D079B4E81149EB7E6B757195AA8D7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 0ED3
Signing time: Tue 04 Nov 2025 04:02:15 +0000
Manifest this update: Tue 04 Nov 2025 04:02:15 +0000
Manifest next update: Wed 05 Nov 2025 04:02:15 +0000
Files and hashes: 1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: tOP3RjIdE8pSHQ9iUrzOsNlrZIsLRILk5xYlkBahkmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:9b:4e:81:14:9e:b7:e6:b7:57:19:5a:a8:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Nov 4 04:02:15 2025 GMT
Not After : Nov 5 04:02:15 2025 GMT
Subject: CN=b0ac62d7a273b50924a1393997301eae86cb7d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:a0:6f:c8:a9:42:1a:0b:d2:90:ed:ff:57:
e9:60:46:53:2a:28:0f:9e:44:24:12:df:a9:95:98:
14:6c:f0:bd:7f:71:6b:6b:5c:94:90:99:8d:39:4c:
e4:1f:6d:b8:14:54:29:d8:0c:57:e4:e6:34:3e:4a:
4d:7c:06:6c:41:37:eb:aa:53:c5:7b:20:72:50:6a:
a4:14:70:c2:0e:2a:86:17:c6:a4:95:a1:f5:c5:30:
b3:13:af:74:3a:c4:71:e0:f2:06:67:9a:f7:ac:6c:
28:44:f4:3c:b1:2d:db:a5:bf:fb:c6:cf:ee:36:81:
20:65:5c:f1:5c:b4:71:3c:63:9f:ed:d7:be:3e:40:
56:a0:a8:8f:73:e3:60:d0:d7:f4:69:60:c2:9c:b1:
6a:33:cd:37:3c:a4:9d:98:50:e9:3f:09:ef:39:46:
c3:31:7c:65:01:f4:8a:6d:7d:b0:62:e4:fd:10:f9:
49:44:17:14:b2:81:bd:5c:e9:a3:0c:29:a4:6c:1c:
f3:ee:89:af:1d:cc:8e:23:52:4b:9c:1b:63:fb:38:
ea:0a:9f:45:9b:93:b4:2e:0a:fe:b8:b0:0c:46:dd:
5f:a4:b8:52:5f:5e:ab:4f:4c:ac:d1:d7:15:29:2b:
a8:95:af:fc:ff:a0:d0:25:66:10:d1:03:bf:32:6d:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:62:D7:A2:73:B5:09:24:A1:39:39:97:30:1E:AE:86:CB:7D:13
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:9e:1a:82:aa:72:3a:ba:be:7a:a3:28:ee:58:f1:ca:5f:
0a:5e:68:24:ca:91:db:1a:0b:34:68:94:f1:f7:f5:f4:3a:1e:
c5:e1:36:f1:da:3e:4e:95:a9:3f:16:23:a4:31:fc:49:31:3d:
a5:3f:ca:37:eb:05:e9:3a:10:c0:3a:9c:43:e7:0e:c4:5a:25:
33:d4:e3:71:27:1d:68:9f:4f:a2:69:11:d7:7f:e9:58:1f:b6:
68:b4:35:14:89:df:04:f6:95:d9:bb:57:47:96:f9:ca:ef:b1:
c9:8d:d3:dd:f9:c8:d4:e5:8a:35:ea:60:5f:c3:fc:1e:81:6a:
ec:4e:71:38:f1:56:6a:86:25:4c:4b:23:c4:28:88:0f:0f:fd:
5d:f8:fa:29:83:ef:ce:d9:59:e6:7b:3b:db:11:20:72:ae:35:
eb:8d:96:9b:bd:b9:c7:8b:fc:58:fe:56:e6:03:41:3d:d6:ed:
a5:05:a8:04:84:f7:55:7c:73:20:37:62:d4:1b:69:14:57:65:
c5:bf:df:7d:24:77:cb:ca:70:4d:eb:04:cc:22:fb:fb:aa:bd:
73:93:65:5b:da:26:a1:3d:3e:07:0c:f9:40:4a:1b:75:e0:31:
17:b9:42:64:e1:c8:3c:d6:c5:2d:da:cc:b8:4a:0d:ca:5d:93:
fc:d9:ae:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:02 2025 by rpki-client