Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
File: B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft (raw, json)
Hash identifier: 0XyHIq4keV5gYGEbpErlda0KB9pRmU1TidSnWmu3nsE=
Subject key identifier: A4:08:E7:AD:B2:51:EF:45:EA:AD:7A:5D:F9:88:8F:4E:A5:FE:52:CA
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 019A4F2B73829DD1E1CDBB24C0C6DFAED375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
Manifest number: 137D
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl (hash: V3PmnacMi+SRZTkCJRg8N6gAWNv9wdPBAxOWwbk9hjw=)
2: U-t6muEZr7pNFroiZDAmj1SwdlM.roa (hash: Q/H0JPhez1qYtzjdS0HazxdGlKUwOr6kovdCBLCRjsA=)
3: US2iZbOrWCL2cayiZwxakKtP05c.roa (hash: 52YhQk2tAw/4PeSZdk7kK5Ee58QSFkl7S17es1QKE9c=)
4: aobLXTmPd_6Ukp1ManNdqX-3DQA.roa (hash: pfQSQLiXOyjEu0hp6NuVLx8Gd5m02zdqAnm2pyHFZ88=)
5: g7F_Fvh3ZgbyaeuUtwVluPjR9fc.roa (hash: SoRDaEmpe54M6I618oM5fpeVkP6ZI2X6WhkQ5L0HHos=)
6: oqk7vyXZrC-D5_5cpZHpWjEfCJw.roa (hash: Iyl0VEv5gWpgZiq6xlIMrOhBw5qUY0Z75JnVHakz9ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:73:82:9d:d1:e1:cd:bb:24:c0:c6:df:ae:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=a408e7adb251ef45eaad7a5df9888f4ea5fe52ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:30:3b:18:4f:4d:01:d5:90:ec:84:60:d4:
c0:16:b0:9e:0e:d7:ce:f7:04:74:df:96:29:80:f7:
70:a7:dc:1d:29:c8:b1:a5:6e:06:81:74:fc:16:a0:
26:d2:d1:01:8e:48:b1:ab:05:55:e7:8b:11:56:13:
75:d5:ec:3a:44:33:1b:a6:dc:4d:f5:2a:02:e8:5f:
a2:38:72:e2:af:ee:ee:78:0f:bf:b7:f8:86:fe:41:
06:4c:f7:97:ae:2a:b4:15:f9:67:55:56:f4:03:b3:
3e:17:cd:59:53:66:ca:1c:2b:d4:cf:74:9b:b8:f8:
e5:b2:b5:10:2a:72:c3:17:a2:10:a3:d8:09:7e:45:
9d:c5:7c:23:1a:52:18:04:0f:50:2e:76:a9:94:63:
00:77:d2:ae:92:12:33:6d:3c:bd:80:b6:8d:be:c8:
60:92:04:4b:d5:fb:65:75:9a:65:cb:d5:00:ee:71:
66:6a:70:02:ad:a5:a3:02:c7:ee:41:bb:70:e4:55:
29:9c:24:da:8e:84:34:f7:f7:ae:df:1d:53:44:6a:
27:77:d0:98:c2:27:49:66:00:cd:e1:96:6c:ea:ce:
f9:51:b4:e0:32:97:09:95:4f:22:ac:7e:aa:89:64:
e0:a1:20:fa:85:3d:08:09:3f:99:5d:64:42:9a:d6:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:E7:AD:B2:51:EF:45:EA:AD:7A:5D:F9:88:8F:4E:A5:FE:52:CA
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:76:7a:e3:a2:c9:d5:f9:b6:0c:99:fe:31:28:7a:bf:59:ca:
6b:ef:1a:0d:3c:58:de:20:37:4f:d2:59:13:cd:63:42:24:17:
8e:b3:61:9e:eb:93:bf:90:26:07:b5:1c:31:06:f4:a7:a7:5b:
2f:10:d2:6c:c0:9a:b5:5f:f7:2a:da:35:44:82:c2:7b:e6:23:
17:89:68:61:f0:0d:5c:cc:6c:9e:56:bc:da:ac:50:3d:d7:e2:
ab:ab:a6:56:07:cf:31:95:4d:d1:e5:c4:ce:e7:9a:c1:66:86:
4a:13:5d:22:44:25:9e:c0:d5:7f:ae:32:39:5d:e4:72:8f:2d:
b9:04:72:aa:51:76:9f:fd:ed:55:89:ff:65:ec:d7:f1:63:17:
78:e3:a1:e8:ac:88:b7:05:ab:05:51:ac:db:45:20:43:34:e5:
29:d4:8a:57:a7:3d:70:64:21:41:d9:62:92:7a:61:40:4f:bc:
6d:7b:52:bd:41:6f:7f:2e:a5:fd:fd:55:bc:9e:06:b4:ab:b1:
6a:2b:6d:a3:02:77:db:59:71:2a:dc:ea:58:74:0c:7a:70:1d:
8e:68:85:8c:d5:4e:13:c9:a5:62:48:2c:24:6e:a6:7b:fb:94:
9c:c2:23:19:b3:7c:df:0e:85:da:84:4f:b2:0e:91:c2:fa:aa:
9c:8b:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:14:46 2025 by rpki-client