Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: nT/xhNqpEwGO7jO0FN+G1k6GxgVJZIgXAFbGRttKwi8=
Subject key identifier: E0:02:8F:A0:CB:19:AE:7D:9B:B9:F2:C5:49:D6:D3:13:66:86:F4:33
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 0199FC8FBC9776B2994F369800F4BAA2ED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0D9D
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: c6Qxo8y3Onkgt6OOz1TIUieAA2VnouSXWQnVl1d7cbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:97:76:b2:99:4f:36:98:00:f4:ba:a2:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=e0028fa0cb19ae7d9bb9f2c549d6d3136686f433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:7c:80:e2:ef:91:c7:92:df:c7:7f:ed:7e:
d8:27:9a:90:a1:44:4a:78:b4:d9:99:1c:82:f5:a0:
1f:d6:1b:03:08:c6:64:d0:42:5c:86:3a:78:a4:e9:
d4:a9:2c:b9:ee:3d:e9:df:7d:f2:5a:00:74:43:bc:
4b:f7:af:b1:a3:8e:7a:33:88:4c:a9:7d:91:bd:9c:
fa:1f:5f:32:6d:a2:3c:0c:9f:2e:57:5e:46:ff:19:
05:43:a9:73:1e:d9:5b:74:8d:7a:3a:f0:1d:d5:2f:
12:72:1a:ed:2a:bb:85:e2:d7:da:75:c7:99:91:33:
9f:d2:f0:40:bb:89:87:50:c4:34:19:49:57:05:a4:
0a:cf:c8:d9:09:88:2c:f8:fc:16:59:c8:56:bd:d4:
52:ce:90:6a:e5:89:b4:17:91:45:ef:08:c7:6d:dc:
c9:43:20:51:d4:6f:f9:40:d2:c2:bb:a7:2c:98:88:
ff:d0:4b:da:bb:60:f4:10:7f:17:53:6a:9d:a8:f7:
7c:bf:49:26:26:c9:0c:ee:a5:31:da:85:a2:1f:ff:
5a:f6:6d:1e:5d:62:43:24:ca:5e:b5:cd:d4:1b:1e:
c9:44:2c:b6:ef:09:eb:c2:51:39:17:7e:10:eb:3e:
93:7a:11:de:e6:8d:63:d8:6d:2c:d9:e8:f4:4c:d1:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:02:8F:A0:CB:19:AE:7D:9B:B9:F2:C5:49:D6:D3:13:66:86:F4:33
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:03:b8:4c:90:87:76:98:68:ae:55:4e:be:dc:52:d8:16:f7:
90:6f:85:72:ac:74:5a:6d:70:12:5a:85:49:b8:39:76:17:db:
ef:0b:51:33:aa:90:3d:fa:9b:9e:85:df:00:9f:3a:c9:eb:e8:
95:9d:ec:83:87:25:c9:b8:17:01:66:59:86:e3:d9:bc:47:d1:
8a:67:e2:51:71:3c:3e:d3:21:59:b9:d0:04:b8:4f:1e:30:6c:
e8:2d:47:5c:c0:71:56:2b:52:8f:ac:32:a7:55:5c:30:4c:fd:
b0:5a:8a:b2:94:f5:41:c2:2e:f2:8a:41:3e:c5:7c:bd:93:b2:
1c:17:88:ea:44:50:2b:1b:4a:74:f3:43:11:1d:c4:c3:10:ae:
2e:99:8f:9a:dc:19:24:1d:b8:cf:5b:5b:d4:b9:c4:1e:15:e8:
b0:46:f2:e2:4e:bb:b9:fd:1d:88:71:9b:72:e2:a9:17:30:de:
60:54:0e:92:4c:51:ea:71:cf:cb:22:b0:f1:c1:3f:e0:16:f2:
dd:0e:ff:d4:cc:18:ca:bf:c2:a7:86:65:d7:4a:b7:aa:2a:8c:
cd:17:47:0c:81:e3:be:27:78:40:ce:02:08:0e:7a:b6:e8:05:
01:5a:08:52:4e:4e:90:f5:4e:29:1a:7f:60:cb:b0:7c:b4:bf:
b1:95:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:15 2025 by rpki-client