Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: LfSimH/ZNppgB/ljNvPbx1D6JsBz5Zbf7iXF+2zaPTI=
Subject key identifier: DF:20:0F:11:75:FD:C3:7A:F5:9E:00:6E:7F:DD:81:A6:C7:7A:84:37
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019A50E402BAA41F9B41B94C79D3E747370F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:51 +0000
Manifest this update: Tue 04 Nov 2025 22:01:51 +0000
Manifest next update: Wed 05 Nov 2025 22:01:51 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: 3H3y+3TtT5b8diXoMRMU1PVm8TYi3DqTdFy2lMu8rqI=)
2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:02:ba:a4:1f:9b:41:b9:4c:79:d3:e7:47:37:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Nov 4 22:01:51 2025 GMT
Not After : Nov 5 22:01:51 2025 GMT
Subject: CN=df200f1175fdc37af59e006e7fdd81a6c77a8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:2d:4d:19:19:b0:f6:f1:72:62:ad:2b:90:
17:7f:b1:06:dc:7c:33:17:79:27:d0:a5:a1:1e:70:
cf:a8:bc:84:34:09:9a:38:42:be:c7:f3:a4:9f:3c:
8b:c8:d9:f0:17:37:05:aa:23:c7:34:b4:67:9c:f6:
49:10:6a:41:2e:b9:91:d3:6e:65:47:cc:56:94:37:
c3:1f:80:07:9c:ca:12:1f:5b:1d:80:da:a4:73:64:
8d:b0:39:fc:18:42:d5:19:23:27:5c:2e:8e:f9:9b:
4f:5b:d5:ff:08:ea:3d:be:a6:97:b3:06:36:6c:18:
f0:18:53:f3:97:82:5d:38:87:03:45:15:8d:1d:15:
bd:f0:99:2f:88:35:f7:60:eb:6d:e7:6d:36:77:d5:
05:cb:4e:ea:f5:d7:c0:71:1e:d3:60:ba:84:8f:8a:
e6:a7:10:50:42:bc:20:a4:5b:f2:61:26:3b:38:0e:
2c:ac:ec:05:df:32:8e:c1:a9:39:7a:c9:85:c5:20:
fe:8a:11:f2:fe:84:e1:cf:1a:51:d4:a8:e6:9b:19:
c8:44:cb:f3:5e:02:44:c7:51:4a:e7:ba:58:be:d3:
82:49:01:91:b3:ad:05:ba:44:ac:25:2a:31:23:ce:
5a:05:d3:80:eb:93:b5:5a:d0:de:fa:5c:d0:3f:37:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:0F:11:75:FD:C3:7A:F5:9E:00:6E:7F:DD:81:A6:C7:7A:84:37
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:14:a2:16:3c:92:d1:4c:39:63:0a:1c:9b:4d:3a:68:eb:04:
68:e5:ea:09:6e:59:b9:4f:50:a2:27:cf:d5:4a:1a:4a:de:48:
2c:fa:f4:ab:d3:d2:9d:38:14:7e:c0:d0:c2:fd:13:61:a0:bf:
7c:d8:a6:b9:44:4e:35:eb:57:c7:4c:a6:98:c2:31:e6:7d:3d:
b0:93:04:28:a7:24:35:c1:e1:e4:c3:0d:1e:27:bd:c4:0b:2a:
2d:99:fa:fe:4c:e6:ac:4c:69:de:66:2b:5b:0c:81:e1:ea:60:
d6:64:d3:47:39:19:33:08:05:5d:35:f9:de:c7:1c:1e:93:17:
00:a4:a6:5a:81:2d:b5:4e:d4:ca:6c:8f:c9:a1:be:ed:ca:bd:
33:0c:87:7d:1c:6c:b3:89:bd:4a:ee:06:d7:d8:23:29:23:ec:
5e:69:59:d0:b1:29:54:2a:48:a1:89:67:68:65:99:39:b5:e2:
3e:25:07:31:9c:d4:bf:9b:1d:d6:a0:5f:de:d3:85:f3:a8:2a:
f6:b1:fe:18:dc:5d:e3:6d:f9:b2:9b:56:ce:f9:54:fb:00:0d:
88:83:09:6f:95:8d:42:e3:72:78:c4:6f:66:11:6b:c1:aa:ee:
06:07:07:b6:83:3b:ff:42:5f:fd:eb:fc:e9:b7:b1:db:e1:47:
ca:a3:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:37 2025 by rpki-client