
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: RwS6HW6EJtNlUankS1ZocvfPQp1hi5KW7qRuVNKjWB4=
Subject key identifier: CF:AC:93:C0:4F:1E:05:D0:45:39:15:34:9F:07:46:BF:A3:FF:17:94
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 0198D69827D254E02D925DD6A50B41FC5304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 03AA
Signing time: Sat 23 Aug 2025 11:02:32 +0000
Manifest this update: Sat 23 Aug 2025 11:02:32 +0000
Manifest next update: Sun 24 Aug 2025 11:02:32 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: v6bX2p3Q47AqNwVczVgqfnrL5rrxSXVPjci6qR6P1ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:27:d2:54:e0:2d:92:5d:d6:a5:0b:41:fc:53:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Aug 23 11:02:32 2025 GMT
Not After : Aug 24 11:02:32 2025 GMT
Subject: CN=cfac93c04f1e05d0453915349f0746bfa3ff1794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:47:51:ad:37:cb:ba:59:05:b7:8b:72:79:
cf:8e:ae:d1:c7:cc:8f:af:69:10:f6:e0:a3:f7:bf:
c9:fe:7b:15:18:71:97:90:d9:e5:80:ef:83:48:98:
b0:0e:be:80:87:c3:8c:1a:36:29:1e:6f:1f:96:1b:
b4:5f:12:2c:a4:08:2f:ce:6e:36:79:6a:09:ed:bb:
a1:af:22:54:eb:2e:7e:33:5e:3d:ab:1b:b4:71:f3:
7c:4b:d5:27:36:c2:ae:59:ee:40:1d:47:e7:17:2b:
28:47:d3:c1:da:cf:b0:01:6d:09:02:f8:8f:03:9e:
9f:42:2c:9b:e0:e7:69:17:2e:ab:ca:f1:79:71:3d:
f2:cf:96:e9:91:60:b5:16:10:a5:ec:d0:ea:27:fa:
9a:be:84:0e:26:f7:f9:c0:29:ae:05:d4:c9:09:3f:
88:e3:d1:35:f0:eb:63:08:94:56:23:8c:de:ba:ff:
ba:c5:63:60:8e:db:d4:cd:71:9f:18:49:28:eb:ff:
51:8c:88:11:cc:14:1c:f5:04:44:e1:bd:df:cd:f0:
aa:41:70:f5:04:3f:2b:eb:31:86:b5:0c:a3:90:11:
94:87:6b:4c:e9:9b:09:a0:8a:6b:dd:01:b2:c6:78:
82:95:33:cb:39:78:56:f3:ff:c8:ff:44:8b:ee:01:
7f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AC:93:C0:4F:1E:05:D0:45:39:15:34:9F:07:46:BF:A3:FF:17:94
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e6:2b:ac:1a:db:2a:44:02:b6:33:43:b9:ab:c8:7d:ed:89:
60:6e:16:1b:75:56:6d:97:fc:82:8a:91:fe:3a:d6:83:8f:08:
4f:97:02:a6:06:b9:76:07:20:b4:91:bc:33:26:3d:b7:2b:d1:
3a:ec:ca:ee:ed:a8:94:63:28:da:2f:fd:82:46:28:64:fc:08:
0f:1f:d3:8a:70:ed:b6:96:80:e2:4a:4b:69:1a:56:a2:24:fb:
f5:6e:27:4a:b2:ca:01:43:dd:ef:37:38:97:0c:b6:5b:ed:9c:
77:aa:6c:a5:60:9d:cd:85:d3:50:a8:42:37:f7:18:1d:d5:04:
b6:a2:46:d5:86:c4:03:03:11:f1:98:4c:43:ce:32:69:d2:f3:
96:13:46:bd:98:ac:9b:2a:d6:2b:a9:1e:64:b2:10:2b:ef:50:
7a:ef:55:79:2c:5f:d6:73:d1:db:8d:78:ed:2c:7f:ef:75:f3:
fa:35:66:aa:af:b8:03:5d:db:20:49:32:d7:3f:d1:39:e7:a6:
2d:2e:f2:c4:95:a4:39:58:d2:e9:a6:29:d4:14:df:73:a1:32:
85:6b:96:50:d4:b6:1c:f8:93:20:23:fe:6b:26:0b:1f:9d:ee:
b7:94:57:80:94:3a:50:9c:d6:64:92:dc:17:5b:d8:e5:c7:a3:
67:32:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:02 2025 by rpki-client