Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: IgRnhOqrEcU9Yh2wDxuVpFEf3m4K8i+XvBqGfZk8Whs=
Subject key identifier: F5:84:99:3E:C9:D1:0C:1A:22:F4:21:83:93:28:F9:E2:74:C7:17:0A
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 0199FC58F516B520E3E2176F6083B56DF132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 1252
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: j2xmQeo9fJHm8LcbH/TVdir+1DO9LpH320HPMnui1vY=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f5:16:b5:20:e3:e2:17:6f:60:83:b5:6d:f1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=f584993ec9d10c1a22f421839328f9e274c7170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:78:d7:0f:a2:f7:24:81:d6:fe:97:6a:e6:74:
f0:f2:bf:4f:14:c5:93:a5:97:23:a8:8f:7b:67:dc:
ad:aa:a8:54:55:f4:90:54:80:19:b6:3c:50:11:e4:
70:31:85:05:f6:07:52:f0:47:8e:6b:f4:b4:75:f9:
f3:fe:99:b7:c6:9d:15:30:21:e6:ff:2e:4c:fe:31:
8c:7a:f7:df:f1:9b:7e:df:7f:e8:ad:74:c8:b4:7a:
99:c5:aa:22:47:56:fb:bc:9d:82:7d:f8:f7:ad:65:
e1:54:81:1a:07:61:38:d7:05:70:3d:03:cc:4b:66:
e5:96:67:1d:d7:74:27:18:7e:d4:d1:17:f0:e7:cc:
ff:4a:e0:98:6d:be:a3:b2:cf:b4:b6:64:0b:62:35:
0e:5f:ca:74:3d:9e:9d:7c:63:88:3c:14:48:d2:b4:
f4:5a:f1:47:fc:6b:53:d2:17:68:7a:f1:67:28:f3:
c8:86:de:29:6b:69:7d:7d:bd:a2:34:c2:a8:34:af:
43:99:97:07:ea:a2:aa:cb:d8:fe:93:df:b4:8e:4f:
b0:7e:73:97:32:63:6e:f1:a4:d0:b6:2f:04:dc:6f:
5e:1c:e4:ca:4b:4f:e9:60:8f:6c:6b:4e:51:8b:6f:
84:92:d2:14:d7:b3:8c:5b:4f:05:66:10:7a:39:02:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:84:99:3E:C9:D1:0C:1A:22:F4:21:83:93:28:F9:E2:74:C7:17:0A
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:76:b2:bd:d1:17:ca:f5:88:8f:73:21:e6:e5:10:ea:18:
07:8a:13:1d:1f:37:97:8c:5b:8b:92:9c:aa:d3:9a:2a:63:d2:
51:56:bd:17:06:28:96:30:a2:fd:9f:15:4e:50:11:55:3d:1a:
4a:1b:14:05:46:93:de:d8:96:6b:ad:32:47:9e:6f:8b:18:b4:
f1:37:ed:db:4e:6c:03:d2:c5:d8:ef:f9:56:e7:e6:0e:f0:bd:
77:21:88:ca:d6:ee:21:cc:02:6a:ab:4e:6e:88:94:fc:7d:c7:
75:d9:12:97:c0:60:fd:e6:01:d8:d4:12:1e:55:a0:92:cb:80:
a8:5b:49:4a:5f:fd:4b:c8:78:4b:04:1b:3f:00:cc:b6:0f:96:
aa:33:44:f3:49:ff:ab:d8:f2:e8:9c:af:40:7f:28:cf:b6:7a:
56:3b:d4:07:f0:c6:9f:a3:ba:0e:87:42:d6:34:48:20:40:23:
19:d9:d1:7a:a4:6f:2a:35:0d:73:f5:eb:b1:f6:c4:c4:b3:35:
13:36:72:5a:96:a8:16:47:d5:5b:04:f1:e9:cd:e1:d7:05:78:
73:32:0b:f0:49:85:f2:0c:97:bc:07:48:5b:7f:9a:03:09:1b:
a8:26:ac:6e:c1:08:ca:fc:20:d7:05:03:c4:b8:fd:12:6a:7a:
42:f4:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:28 2025 by rpki-client