Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: 0IgG+CxzV9scwtK7qakwgCjUfViQfIh6+ga477kptyw=
Subject key identifier: A2:25:6A:FA:06:56:8B:81:79:C7:96:31:61:3E:A1:6E:2E:C7:27:6C
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 019A4DE2239339A5EE7405078267C04E1AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:57 +0000
Manifest this update: Tue 04 Nov 2025 08:00:57 +0000
Manifest next update: Wed 05 Nov 2025 08:00:57 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: 7tUGoi20g2yZvT0aWcw9S7xDisYBzoXliZMnMp/xO1o=)
2: UuUtfUqV-KgwhgFjzhSy5k-b5wQ.roa (hash: N1q9DTLPcvQy64VHKRJdfX47laqGR6sY8ENSz3JjEqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:23:93:39:a5:ee:74:05:07:82:67:c0:4e:1a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Nov 4 08:00:57 2025 GMT
Not After : Nov 5 08:00:57 2025 GMT
Subject: CN=a2256afa06568b8179c79631613ea16e2ec7276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:9c:3a:e4:cf:d4:3b:6b:64:d8:01:70:81:
a3:d9:db:66:18:db:70:b3:c7:bd:19:8b:b6:9b:2d:
5f:bb:73:a1:ed:7f:c6:1c:48:2e:38:fb:fb:71:54:
0e:19:1a:5a:7b:f6:68:4a:7c:8d:b3:97:85:ff:09:
1a:97:3b:0c:9f:57:56:ae:e4:09:1a:45:fc:80:53:
df:df:e4:62:95:05:f0:83:54:5a:b1:94:81:fb:d8:
32:00:31:6d:09:0c:5d:c8:e1:f6:a9:79:5e:99:f2:
f9:18:a9:41:68:33:da:23:e2:8a:39:48:55:fd:e8:
85:37:c3:10:d3:15:cd:c8:2f:0b:bc:fc:8c:19:4c:
d8:9b:43:1b:35:84:b5:3c:5a:9e:d8:17:cf:36:61:
8e:6b:00:37:b2:7e:e0:55:d1:74:0c:fc:f3:63:0a:
49:93:43:d7:3b:4e:fd:72:e5:ef:1b:74:8f:8e:b5:
18:d9:f0:8d:2d:7a:73:8f:c5:a2:22:f5:19:e5:a0:
56:50:cf:29:cd:e1:d0:74:40:a1:33:10:de:1a:df:
1d:51:0e:c2:f2:f0:18:ba:fc:cf:38:9f:de:8b:67:
9a:13:5e:c4:cd:96:66:82:25:59:3a:3f:c1:c3:89:
fc:e8:9b:45:65:b7:32:b0:22:ad:9a:de:e2:bd:af:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:6A:FA:06:56:8B:81:79:C7:96:31:61:3E:A1:6E:2E:C7:27:6C
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:f0:57:83:2a:52:d5:66:c3:8a:57:86:81:e2:cd:34:b5:
52:0f:44:b7:af:a7:55:cf:35:f2:cc:ef:97:63:d8:37:f6:34:
7d:d4:14:b4:4e:c4:4e:4c:62:6a:f3:56:26:ce:fe:fd:23:07:
cb:42:cf:3d:ae:52:d9:b1:1d:8d:f0:e5:e4:10:e5:42:0c:92:
ca:c7:8d:1e:29:67:5b:50:4e:8b:dd:cf:40:b6:a2:8e:3f:71:
47:f0:75:8e:50:78:cb:fe:f7:6b:c3:15:0a:77:f0:39:8f:04:
4b:61:da:4b:50:53:29:a2:dd:b1:ab:37:70:90:38:fa:24:b3:
da:74:15:63:77:5c:d3:e0:15:f7:2a:f5:b8:03:9e:e1:1f:20:
21:fa:c6:b4:1d:8c:f7:36:7b:de:59:43:6f:e0:1e:7c:d6:49:
9e:0e:30:62:2c:a8:06:9e:86:69:6e:64:cd:f2:dc:34:c1:47:
02:af:9e:fa:c6:b7:58:65:2d:c9:1d:51:68:b7:10:f3:b9:f3:
c4:7b:51:6d:35:e0:af:02:fd:f4:71:f0:85:5d:70:79:88:2c:
81:1d:87:3c:f1:29:c2:c6:7c:98:91:c2:95:f3:51:7f:fe:9f:
98:43:c6:e0:1f:65:62:0e:9f:82:cb:5c:a4:59:ad:e1:b2:1e:
b0:ea:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:42 2025 by rpki-client