Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
File: BD0sjag_XDyUrpQKDv0qdxT_kOI.mft (raw, json)
Hash identifier: Iq37IWBi8GBhdnamla7fzszEdxpgLinazMwjeIkbEZ8=
Subject key identifier: 65:E6:BE:28:A4:26:E1:00:21:FA:64:FE:D1:96:CA:FA:59:CD:4A:60
Authority key identifier: 04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
Certificate issuer: /CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Certificate serial: 0198D6986DA0F3BEF6861AEC6DE655221DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
Manifest number: 09
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: BD0sjag_XDyUrpQKDv0qdxT_kOI.crl (hash: aeyWTb9cM9o/N3qGNtgKUYK4+J4S97pwLralnHc2anI=)
2: wVyHdkJVhmRGMxJPVX4wfBhruSE.roa (hash: 9ZOfWoFrLfdn+mdr2Gtgim07acMv0zDx9WBwWt754aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6d:a0:f3:be:f6:86:1a:ec:6d:e6:55:22:1d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043d2c8da83f5c3c94ae940a0efd2a7714ff90e2
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=65e6be28a426e10021fa64fed196cafa59cd4a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:f6:88:15:1b:d3:31:6d:db:20:a3:25:20:
15:90:68:d2:5e:9d:13:85:b1:43:1c:37:79:fc:b6:
84:66:70:4e:00:d6:88:a6:7e:14:ed:40:b3:ee:32:
22:39:b0:27:06:51:e5:c6:f2:28:41:ac:5a:4d:77:
c0:38:7b:49:89:dd:05:4d:a9:ac:9a:5e:5d:ec:e8:
95:ce:37:43:e0:a3:68:49:b2:a2:9c:3b:a5:27:8e:
a2:2c:29:66:a1:3b:c9:44:f2:47:72:cc:2d:40:65:
7d:9d:57:5f:d4:a7:c5:1f:d6:14:9b:4c:b4:3c:53:
d0:24:ec:78:bd:b8:2b:29:7f:26:60:7f:32:49:96:
5b:38:b9:55:a1:df:5d:17:1a:9c:0d:92:d1:25:74:
ac:27:d4:9d:95:c3:1a:ae:7b:3b:67:d2:c0:cd:dd:
44:c0:07:c7:c1:bc:c3:bd:06:36:7d:56:e9:27:c7:
a3:04:9a:7c:b4:f9:27:b2:fe:0c:dd:23:74:c8:6e:
f6:df:ed:c9:77:d3:91:cd:b4:66:f3:d8:54:f6:c1:
69:57:ff:e6:63:74:ef:e9:44:d0:e5:b8:be:7a:fc:
25:76:08:5c:98:3a:06:ae:c1:98:d6:70:b9:53:71:
04:1e:19:ee:58:e2:17:05:20:34:df:d3:8f:fd:b8:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:BE:28:A4:26:E1:00:21:FA:64:FE:D1:96:CA:FA:59:CD:4A:60
X509v3 Authority Key Identifier:
keyid:04:3D:2C:8D:A8:3F:5C:3C:94:AE:94:0A:0E:FD:2A:77:14:FF:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BD0sjag_XDyUrpQKDv0qdxT_kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ec4c25-e552-4d0c-95ee-3bbc661b4cc5/1/BD0sjag_XDyUrpQKDv0qdxT_kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:01:cd:63:ad:d2:3e:dd:85:06:a6:ab:ca:95:e0:96:c3:85:
7f:80:b2:66:7e:52:e9:93:36:ef:43:9d:03:d6:97:9f:2a:c1:
3a:06:3e:e4:a1:23:55:a0:33:2e:15:c0:82:9e:8e:55:c8:14:
b5:6a:63:a9:eb:5e:7c:bd:7d:20:f0:47:d9:59:3f:b2:f1:7f:
59:36:a1:ea:51:dd:d5:9b:e2:f4:7d:05:d0:17:a7:e0:46:06:
26:88:10:69:2b:d4:a3:ff:e5:f6:0d:ba:37:ff:e8:4f:72:67:
47:3a:92:ea:8e:9b:4b:77:f1:71:dc:26:01:8f:40:bc:22:22:
cd:db:a3:66:35:cd:f7:41:85:c8:1a:fe:4a:c5:1e:9d:f5:49:
10:33:97:92:57:fb:5d:c7:5f:08:d3:48:de:d1:75:6c:75:80:
b3:d0:63:88:44:cf:15:d8:dc:f6:f8:32:ac:93:1c:76:8e:14:
8c:b4:dd:aa:fd:a4:d0:d3:50:ef:3c:a8:82:0a:d7:15:cb:a3:
bf:72:c3:8e:b7:8c:62:53:76:ff:6e:f8:23:51:6d:40:44:7a:
11:f4:0f:36:9c:33:1a:8a:c1:f3:18:5c:d6:e0:34:f8:82:37:
9d:16:e2:18:cd:cc:b5:8d:29:b8:65:15:60:55:48:35:4f:94:
b6:8a:26:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:45 2025 by rpki-client