Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: eN7E4dMW9p4x6+q8rFqYlkQ46n3HCqNvvvm7e/ayBnw=
Subject key identifier: 09:87:5F:11:BE:9D:9F:A0:43:9D:9B:2A:AA:B2:D8:29:45:51:12:2A
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 0199FB45D5D665654FBB3DAD18E51BC8639E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: eLnvyUh3x1vXe4ww4vAJZ6AmW8SupqIvDt5Q44ZVM4M=)
2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d5:d6:65:65:4f:bb:3d:ad:18:e5:1b:c8:63:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=09875f11be9d9fa0439d9b2aaab2d8294551122a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:28:eb:f6:7b:56:3f:f7:2b:d7:36:ad:ed:
d6:6b:09:6a:45:e7:ad:9b:10:9f:35:7e:77:13:a3:
7f:8a:97:d4:93:f9:6d:9f:77:b4:c8:3d:88:50:36:
38:b6:cc:45:3c:09:04:64:ba:f1:2b:4c:39:7d:55:
25:5a:89:37:82:30:ea:2a:4f:e4:57:fb:7e:31:73:
53:ac:bf:b3:f7:45:fd:90:a7:21:18:41:2d:a1:17:
a4:20:6a:71:2a:06:1f:2b:ef:29:8b:27:df:a5:d9:
7f:a4:88:8c:67:d7:3c:33:71:fe:ee:72:41:ab:3f:
20:34:9b:ed:34:af:f6:6e:f6:c2:e7:e1:c4:af:b9:
77:a1:da:bd:38:a7:6f:94:6b:b9:ee:02:73:26:76:
12:b8:2e:31:d2:b8:23:a6:37:ea:1b:c2:d5:3e:f6:
dd:28:6d:ba:e1:bc:fb:81:9b:56:0b:a1:af:9f:38:
cf:0e:ba:b1:97:e2:67:95:60:49:5d:a0:fc:c7:c5:
ce:92:02:a4:8e:41:87:67:da:d2:ff:d8:19:65:d2:
cd:90:91:43:f5:25:2b:88:97:3f:bf:16:b2:2a:02:
ee:7a:03:bc:c4:4c:52:9c:85:78:04:2c:57:7a:b2:
18:60:20:13:a9:b9:0f:6f:d9:90:6e:a9:d4:b0:63:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:5F:11:BE:9D:9F:A0:43:9D:9B:2A:AA:B2:D8:29:45:51:12:2A
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:46:6e:0b:13:4c:b1:a9:9b:a8:dd:50:b9:30:9d:77:91:5c:
ce:e0:7c:8a:07:1b:14:57:eb:86:b6:05:2f:c9:90:5c:af:c8:
3e:c4:a8:6a:d6:d9:16:c2:e6:2c:64:6d:6d:ba:0c:4b:17:d5:
26:93:81:7a:91:21:fb:35:fd:c5:64:8f:6a:7f:f2:d7:13:09:
5b:06:bd:89:a9:45:b2:e1:d9:40:87:bc:f8:fb:ee:e0:85:17:
df:8d:59:31:ee:99:b7:15:e7:d5:1a:ce:52:47:48:d6:0c:34:
5d:4d:69:24:96:13:7d:5b:e9:86:4f:42:ce:c6:32:09:1c:c5:
24:e5:42:5a:a3:97:56:df:41:be:13:a2:03:58:4f:1e:7b:c5:
08:30:c0:58:f2:cf:66:24:9b:67:21:5a:07:df:af:c1:40:7d:
0c:25:ae:7b:36:fc:8a:2d:5d:a1:e5:ad:b2:b9:06:fa:85:d4:
4c:ff:30:94:7c:57:e5:ae:e7:10:5d:49:48:0b:43:ac:b6:b7:
86:03:ff:9d:a8:e3:30:d4:58:7b:b0:31:bb:59:c5:ed:31:4c:
55:dd:01:27:a5:66:2d:26:47:31:c4:4e:2e:88:06:6c:17:84:
18:ed:ad:1c:d9:07:e7:04:1f:37:85:63:20:46:e3:bd:1c:b6:
00:78:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client