Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: MgIC6JFcVBsIk08ImlERd/ezFc7OvFUuNie+rTRMylQ=
Subject key identifier: D1:58:9A:38:DD:09:BE:96:2E:E6:A5:82:A7:67:2D:17:65:A8:A8:A7
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019A4DE236BDA87E812E45C6245AF9434926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 077F
Signing time: Tue 04 Nov 2025 08:01:02 +0000
Manifest this update: Tue 04 Nov 2025 08:01:02 +0000
Manifest next update: Wed 05 Nov 2025 08:01:02 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: 8ZxUV0uc7WYwkCIcvALPRB9x5C14dnvGJ79gGAueEyI=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:36:bd:a8:7e:81:2e:45:c6:24:5a:f9:43:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Nov 4 08:01:02 2025 GMT
Not After : Nov 5 08:01:02 2025 GMT
Subject: CN=d1589a38dd09be962ee6a582a7672d1765a8a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:9b:3d:ef:fb:a2:9f:85:f3:47:b6:e1:f0:
be:36:ec:a9:37:67:99:e0:d2:b3:01:2c:d9:ea:bf:
ea:c8:68:16:f2:37:f0:ba:f8:34:c3:60:92:11:62:
17:aa:64:10:af:56:ca:70:8c:3c:5f:13:f5:bc:a6:
e6:7e:74:18:9c:ee:df:cd:e0:94:8f:07:36:65:ab:
23:62:bd:5b:bb:e7:10:32:c4:ff:a0:5e:28:f1:92:
07:f5:9b:f6:5e:64:0f:a8:f1:21:ad:e4:d1:1b:ed:
2a:3b:47:45:a3:15:ad:c4:40:a3:b1:20:70:74:9d:
fe:24:3f:62:93:d9:e4:4f:de:b8:a8:5c:1c:8f:11:
2d:77:03:52:fa:4f:05:0d:16:87:13:6d:b7:d8:10:
03:e8:3f:55:5f:89:28:f9:6f:ac:fb:43:2b:2c:34:
2e:9a:f0:9e:08:5f:3f:e4:c2:b6:13:5d:6c:de:fa:
78:01:c5:e4:22:50:93:62:a0:e2:d3:4c:6f:32:29:
64:92:07:84:53:5f:11:1b:80:7f:79:d7:6c:69:cb:
5c:06:b2:14:1e:da:ac:da:c0:54:65:b8:27:0a:94:
a8:93:43:5b:04:5e:a7:2e:0c:fe:7b:72:46:c7:3c:
b9:d0:ec:7c:65:1f:53:13:0a:5b:b6:93:5f:e0:ed:
69:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:9A:38:DD:09:BE:96:2E:E6:A5:82:A7:67:2D:17:65:A8:A8:A7
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:35:bd:ed:61:25:9b:10:f1:7d:f3:3d:a7:09:b5:d2:59:
92:ce:6a:c0:85:19:70:96:81:4f:33:dd:83:ab:0b:f7:81:65:
53:f4:5a:50:3e:b7:04:c2:43:01:4b:1e:3d:08:e0:46:a7:e6:
3b:21:ac:0c:a8:fc:27:33:f0:c7:e1:99:a4:30:9a:f8:6f:6a:
9b:dd:c7:fa:d6:25:e3:6a:20:cb:fd:a9:8d:af:b2:3c:ba:a3:
08:35:d1:b5:ce:d1:c8:b2:ea:42:a2:a6:51:96:93:e7:1a:10:
58:ad:38:50:a4:c7:b6:4f:d0:87:b7:5c:f1:8c:b8:d4:c9:8c:
31:65:ee:1c:c1:72:0a:07:83:20:cd:b5:ca:a8:8d:06:06:4c:
6e:0e:41:5a:44:c2:75:c5:e2:29:c6:82:1f:92:f0:76:91:41:
a4:11:21:18:ae:19:67:8a:ab:fc:65:2b:5a:e2:50:f5:f0:e8:
3a:87:60:c7:a8:9c:a3:b3:30:ba:1e:55:6c:cf:db:91:9f:9f:
7e:5b:f6:5e:9d:9d:45:ff:f2:40:40:91:59:8a:c5:94:ab:8e:
ce:9c:87:bc:a9:a5:27:51:8f:2c:7c:04:cf:1f:de:4e:64:cd:
36:f0:d4:df:42:42:6c:65:8d:7e:a1:35:a6:c3:f5:f1:15:ca:
8f:a2:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:50 2025 by rpki-client