Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: pTAJLdWIvqp8p3H8UqnynAgcI2ECmTfj9/X42+QNScI=
Subject key identifier: 16:B5:BF:14:A5:21:65:47:24:B2:73:BC:89:50:9B:8F:1F:37:06:04
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 019A52D118A48F6A95FBD88448DB7C6C24AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 012A
Signing time: Wed 05 Nov 2025 07:00:26 +0000
Manifest this update: Wed 05 Nov 2025 07:00:26 +0000
Manifest next update: Thu 06 Nov 2025 07:00:26 +0000
Files and hashes: 1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=)
2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: lygCQRj20lRenXtJYU02FwuJ3z1iVUFGeCQs/1Laac0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:18:a4:8f:6a:95:fb:d8:84:48:db:7c:6c:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Nov 5 07:00:26 2025 GMT
Not After : Nov 6 07:00:26 2025 GMT
Subject: CN=16b5bf14a521654724b273bc89509b8f1f370604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:89:65:36:ae:42:66:16:fe:af:dc:b4:68:
01:ed:bd:f8:b6:90:2e:4b:68:4f:d0:78:8a:cb:ef:
41:ee:76:7e:50:c6:4d:d4:29:b2:f4:cd:3b:5e:09:
42:1c:90:e2:23:04:c5:69:90:63:61:54:20:c7:83:
c7:82:dd:fb:0a:a0:23:6a:c8:24:cf:6a:a2:61:41:
4a:5d:8b:5a:74:fb:2b:f2:f4:9b:06:0d:8e:2b:e0:
e6:b2:5b:94:40:ee:bf:1a:f6:44:1c:2c:63:34:1c:
75:5f:78:30:d7:b1:f9:7a:cb:15:8c:4e:18:1d:09:
79:12:18:ab:85:87:9e:19:96:6c:69:cd:96:16:49:
bc:f0:ab:31:06:57:9a:b4:8a:3b:a5:ed:97:a8:90:
a8:97:6b:e6:90:84:b8:83:ae:ae:6b:44:28:74:f1:
97:26:a0:ca:5c:4c:b0:0b:2a:ad:5a:10:ff:e0:99:
29:6d:43:e2:f3:fa:a8:fc:ee:18:1c:d7:ff:6e:75:
72:d7:af:5f:04:0f:4a:e5:eb:e5:cb:c6:8d:c2:34:
07:67:1c:75:8c:b2:70:8f:54:4d:16:2e:83:3a:ae:
92:7b:12:38:1c:41:02:2a:cf:b9:ec:6b:53:92:d2:
af:28:ae:89:40:ea:3b:d9:54:84:90:ab:b9:b2:63:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B5:BF:14:A5:21:65:47:24:B2:73:BC:89:50:9B:8F:1F:37:06:04
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0f:8a:49:28:82:94:a8:da:19:5b:1c:8b:32:a5:3f:ad:7d:
0c:6c:2c:54:93:27:cf:bc:cb:f4:84:41:06:43:c9:05:e4:51:
ad:22:0f:aa:56:58:a7:20:11:a6:71:97:43:e1:84:4f:a4:92:
4f:84:bb:b8:cb:36:7d:95:fa:9b:7c:db:eb:cd:0b:1b:92:c9:
5d:e0:fd:66:a7:7a:cf:ad:0b:e2:de:87:42:89:f7:b1:f0:ee:
c1:2e:5f:c0:29:56:9e:2e:98:5c:e1:46:db:01:5b:3e:99:bf:
07:ce:b9:36:50:67:a4:d7:cc:b7:f9:00:50:a9:0b:e3:ba:e5:
81:3b:eb:15:76:15:fb:ff:21:74:79:bb:35:37:78:6b:85:68:
74:be:82:09:b5:50:f7:67:e9:08:33:59:92:cb:54:ad:2c:cb:
06:51:c8:f3:25:d6:9c:11:24:65:b7:e3:df:15:1c:a6:e1:78:
82:dd:97:56:10:8d:6e:3a:16:ce:7f:49:89:c8:23:ce:de:35:
9b:9a:a8:e3:b9:1e:d5:a4:31:75:7e:47:da:2d:38:d2:25:32:
b1:82:fb:a9:d9:4b:2a:6e:07:e2:31:bf:23:68:1e:b5:71:4d:
d7:81:b0:61:57:8e:6e:dd:3f:d5:6a:2d:22:4d:af:ef:29:ea:
c0:f2:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:56 2025 by rpki-client