Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: HwkjI58NOPioGh7BrPx3ECTA3KcJgOWbm//tx2OpEpU=
Subject key identifier: AC:81:45:E7:DE:E2:AE:30:B3:CA:FF:14:3E:DA:D9:69:7B:4B:22:CE
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 0199FE0FE3269E4AFADBC27258940003B3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0443
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: /KJdi/oMrvhnSfvz7PGmJEc4C7+0fcxRi/Hd9tTeWhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e3:26:9e:4a:fa:db:c2:72:58:94:00:03:b3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=ac8145e7dee2ae30b3caff143edad9697b4b22ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:a4:58:02:bb:82:21:c0:f0:cb:e1:5f:d4:
65:1f:78:f0:7d:46:8d:f8:7a:57:41:65:42:de:35:
7f:d2:58:33:c8:f9:87:04:fd:1a:b5:4e:6a:f6:32:
3a:90:2a:12:35:5a:c6:71:95:45:8f:66:e0:d3:f8:
7b:ed:27:fd:e9:2d:8c:44:6c:c0:c2:fe:dc:2b:f0:
23:f7:fb:6a:d6:bf:bf:06:bc:4e:89:6a:a0:d8:7f:
9c:88:cf:8c:ce:e0:34:18:e0:4b:31:b8:39:e5:e8:
a3:f3:e4:1e:6c:9f:be:03:6c:10:de:82:c7:52:8c:
ef:15:92:2e:86:78:f2:bc:cc:11:54:a5:20:f8:65:
1d:b6:80:65:5c:88:63:87:8a:26:6e:34:f1:1c:bb:
34:4b:56:20:4a:8c:34:69:ab:b0:74:44:0c:33:6e:
d2:ac:b8:2f:33:30:eb:8a:23:ca:55:6b:73:32:a3:
4a:0c:3b:3c:68:62:03:f6:b9:f3:8f:78:60:7a:81:
b1:02:1d:cf:cf:4a:0c:71:e7:fb:54:b6:bd:dd:86:
ed:c3:e0:e0:be:3e:f5:99:38:64:cc:42:3a:a4:95:
28:8e:3f:89:b7:84:5b:33:b2:59:76:cc:b0:5c:d1:
d2:0a:b0:71:ea:f1:0f:b5:60:a7:14:0c:f7:1c:bb:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:81:45:E7:DE:E2:AE:30:B3:CA:FF:14:3E:DA:D9:69:7B:4B:22:CE
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:41:7c:07:6e:4f:80:db:a0:90:69:0b:b0:9f:a3:59:97:
68:1e:2c:00:50:2c:af:f1:5e:97:15:ab:71:71:f1:b8:62:6d:
d7:c4:89:e3:e4:b6:7b:83:05:30:bd:60:ea:3b:16:e6:2f:8c:
1b:ff:ce:90:7b:d1:1e:b5:cf:b9:2a:90:73:13:c5:30:07:ec:
8f:ea:98:42:d0:ba:8f:8e:a9:88:f5:b5:55:ee:66:2f:54:36:
c8:f7:03:a9:0b:5c:c3:fd:51:13:05:46:8d:7f:76:44:3c:6b:
61:5b:bb:2b:6a:77:05:f1:d0:97:cd:88:58:83:94:5f:3a:ee:
8e:9b:f8:05:18:4f:47:bc:af:18:94:a3:2a:37:1e:b9:42:f9:
e9:2c:8b:7f:85:bc:07:93:1f:8d:97:4c:2e:1a:61:39:c3:f9:
f9:38:60:cf:99:c3:7a:62:48:1c:8b:96:44:b3:9c:d7:fd:c0:
9d:ef:ee:11:22:67:52:b7:84:a7:c2:f2:7a:50:6a:d2:c0:ec:
33:52:13:dd:16:24:d5:c0:0f:6a:a2:09:1a:a5:d8:1f:3d:88:
31:b2:3e:4c:d1:ae:69:8c:13:2d:7e:d3:55:2d:cd:a6:52:eb:
b3:bb:b0:8a:1b:0b:b8:87:a9:65:bc:07:09:6f:35:a6:61:ba:
a4:3e:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:27:08 2025 by rpki-client