Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: Fo3Ik1TBcOw+crufBVZVES92o5Y4DYJ4KAU8nVBpC54=
Subject key identifier: B9:07:7F:BA:FB:F6:EC:02:51:98:83:0C:80:F8:5D:0C:29:1B:96:C0
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019A503E0315B37FF80E996073C46640AA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:32 +0000
Manifest this update: Tue 04 Nov 2025 19:00:32 +0000
Manifest next update: Wed 05 Nov 2025 19:00:32 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: 6ehwPDngCTck3hBmYbNBon4cKqntTx72KFnzC7jZgdQ=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:03:15:b3:7f:f8:0e:99:60:73:c4:66:40:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Nov 4 19:00:32 2025 GMT
Not After : Nov 5 19:00:32 2025 GMT
Subject: CN=b9077fbafbf6ec025198830c80f85d0c291b96c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:07:ff:52:da:aa:8a:b8:8b:b4:9f:05:50:c5:
52:56:4f:98:0c:97:ab:9f:89:80:66:3b:26:78:ba:
59:25:00:05:71:82:ba:31:2c:96:37:0d:08:d0:db:
21:bf:46:1a:05:82:25:1d:e0:d7:ae:58:d3:07:fb:
1a:93:67:1b:de:c5:ad:df:8b:19:be:a2:85:b9:25:
97:e2:31:94:fb:51:96:83:ed:fe:63:80:94:a8:0c:
17:a2:0c:8b:e6:2c:1f:c6:e9:97:75:31:18:93:d1:
41:b6:12:14:fb:6f:53:63:cb:88:23:a4:a3:c8:77:
d7:29:53:d9:8d:91:17:9c:60:7c:a2:9c:dd:86:62:
7e:9c:05:13:2e:85:c6:1e:49:3e:4e:2f:f5:40:c3:
c3:38:e6:b9:b8:5a:6d:70:95:db:9f:d2:a3:21:de:
c6:be:8e:c3:89:0c:27:fb:5f:07:b1:4a:95:11:7a:
76:0e:31:cd:32:e5:e6:42:9e:24:a6:bc:52:19:b8:
11:da:47:2a:00:d5:dd:30:8b:a4:fd:17:10:d2:55:
b6:fa:f8:3f:45:24:81:63:4e:3a:5a:32:f5:05:35:
24:d3:f1:6f:f8:85:c0:9f:80:6e:4f:8d:1b:16:3b:
d3:3c:36:ba:ef:37:68:17:c8:ae:31:5d:88:81:a1:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:7F:BA:FB:F6:EC:02:51:98:83:0C:80:F8:5D:0C:29:1B:96:C0
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:df:fa:8d:80:0d:69:de:bb:71:1d:7d:91:23:6a:73:fb:8d:
b7:b0:81:c7:da:81:d2:de:4c:dd:7c:c6:0d:0a:84:ff:08:5c:
d6:6e:18:51:c8:b2:e8:c7:8c:4a:a0:6e:f4:a8:87:80:2c:d1:
d9:59:04:04:52:73:d5:95:30:c5:9d:af:32:54:16:11:5b:9a:
fe:3f:40:86:4a:92:ad:90:dc:e8:04:d0:9b:c8:cc:04:59:f8:
1a:ba:51:e6:7b:3c:8b:05:8b:b1:f0:7c:95:80:18:8a:eb:46:
08:d4:7f:c7:42:35:a3:49:c6:fe:d8:0e:94:1d:62:18:28:4c:
9d:19:8e:1a:cb:2f:cd:31:02:02:0d:de:86:a2:47:e0:b4:ed:
79:f1:5e:94:56:09:4a:93:9d:d3:96:97:92:85:8a:48:ee:11:
46:f1:76:5f:91:47:02:3d:74:9d:55:6f:05:25:ee:f8:4d:88:
2d:99:1f:d8:61:25:44:ff:3a:81:12:3c:26:87:64:cf:a5:1f:
e0:c2:cd:f9:8a:a1:05:68:27:f1:74:ad:c1:14:4e:ab:36:c9:
68:f3:fc:25:e2:c4:42:20:03:8d:20:61:6f:4d:d1:da:7e:66:
7a:66:bf:29:1b:76:37:af:f9:cd:06:9f:c3:1e:26:76:41:cd:
3f:20:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:53 2025 by rpki-client