Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: 3Xhgh/SKb8Pz9i7CGn4r0nMOFWRNB69OHxq9CiwyI28=
Subject key identifier: C4:FA:74:67:75:63:62:51:1F:20:43:1D:8C:FC:0C:80:96:AD:3F:35
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 0199FF59977C1AB3D9DB0F99F958D92E3144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: A4
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: ZYCeTB6qu0mAneR0HqNjkN8iMOaEJEU0wZcCx4OUTPk=)
2: F0I2of0atpvetTn6otcAa1FRJF0.roa (hash: JY9VjmC9P6KQBtlxAcmoRA4HCsgOVKGxeDdf5vhfcm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:97:7c:1a:b3:d9:db:0f:99:f9:58:d9:2e:31:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=c4fa7467756362511f20431d8cfc0c8096ad3f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:9e:39:19:04:e1:a5:bc:c0:6e:6f:c0:7a:
b8:00:92:84:5e:21:19:f9:9c:7f:d9:c0:86:65:cc:
b4:4e:c6:2d:87:5e:56:e2:19:c7:89:c2:31:f6:90:
e9:af:aa:9f:ba:98:e4:2e:6f:2a:f8:8d:8a:90:76:
1e:98:1d:db:d6:20:d9:96:8b:cc:67:3d:93:7e:b6:
ab:85:f5:bd:61:37:c2:84:b6:87:8e:98:b0:11:94:
74:2f:c0:d9:9b:ff:e9:d8:a2:72:d3:2b:33:ac:e4:
6c:25:ae:f6:5f:02:3e:ae:c3:f8:e5:1c:d1:0c:2b:
9d:6b:f8:a9:44:be:57:1f:95:ac:9a:b1:2e:42:2a:
73:54:70:57:1c:a6:c7:3b:b9:c6:5a:f2:24:84:48:
fb:7b:23:5f:0a:19:6c:89:a7:95:a5:5a:a6:7b:4a:
f2:d1:6a:7c:68:23:2c:94:3f:c5:b1:b3:65:d5:ca:
56:f4:21:89:c4:2e:5f:92:0f:46:c3:e9:72:5e:3f:
78:6c:0e:e5:b4:b6:f1:96:a1:de:bd:5d:be:cd:c6:
9b:06:3e:2b:04:ab:72:bc:a9:f7:2a:61:49:b9:9e:
8b:7d:b3:f6:74:59:0f:92:dc:73:40:07:9c:1a:f3:
46:c3:56:41:e5:06:51:82:77:8d:d8:62:29:d6:5a:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:74:67:75:63:62:51:1F:20:43:1D:8C:FC:0C:80:96:AD:3F:35
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:17:04:1b:31:27:ab:d0:c1:45:7c:57:5c:bf:09:81:c5:48:
c2:b7:d9:aa:a0:27:a5:31:64:69:a0:07:b2:b5:21:fc:46:30:
db:f5:5b:84:79:87:6b:48:34:a4:41:01:6e:f3:90:88:8b:f6:
3b:66:f4:d2:e3:20:61:d6:7c:1d:e6:6a:1f:0b:32:36:00:1e:
f6:b3:3d:4e:e5:0c:07:11:2a:ed:6f:76:22:16:df:ea:55:25:
e7:0c:56:f1:16:12:66:2d:80:5b:a1:8c:25:f9:ee:af:7d:72:
d3:17:a3:aa:8e:33:4e:4a:b8:b4:15:af:5f:58:39:83:4c:28:
46:a5:4b:5e:78:01:9f:69:f2:07:66:d7:e8:f8:6d:03:83:f6:
bb:b4:2d:13:f1:bd:23:e9:d4:99:73:f9:59:d8:24:a0:e9:11:
ff:58:21:d5:bd:a0:55:f6:b3:5a:da:6e:6d:fe:ff:7b:1e:17:
c2:7f:af:17:4f:2a:c3:ab:6a:18:07:70:ae:22:63:fa:b3:f8:
49:23:b3:40:a6:f9:74:d0:08:cb:db:40:1a:de:00:68:ac:b3:
09:1a:3c:4d:2b:e1:c7:07:5b:90:01:89:6a:6d:1c:f6:cf:3e:
72:90:6b:6b:ec:8d:40:f0:6c:c7:f6:0e:12:16:5d:24:8c:3b:
fb:44:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:56 2025 by rpki-client