Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier: XrfoYUv02cGuh1ePtpApMh20lMijUxpl8YzOcbPHAxw=
Subject key identifier: FE:FA:55:9E:8A:C9:5F:C8:44:3F:35:81:9B:5F:28:40:05:7A:BE:56
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer: /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial: 0199FC589A6C246968A9BCE53FB4EB7E0481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number: 0D34
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: uHINMs+ilbS3mF4iqPSfmS/oUxP+g6ou7qq5wRGhsvk=)
2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9a:6c:24:69:68:a9:bc:e5:3f:b4:eb:7e:04:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=fefa559e8ac95fc8443f35819b5f2840057abe56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:5d:00:87:bc:5a:48:a1:22:16:04:a8:f2:
dd:fb:7c:4e:45:81:2b:19:69:5e:e4:43:10:62:d9:
3c:a0:46:3e:11:d9:1a:b7:11:bf:1e:c4:a4:a6:a1:
0e:dc:1a:c1:e7:9f:63:f4:83:0e:48:3d:f0:2a:ee:
c8:2f:d8:c8:5d:cd:79:7b:f9:80:51:7a:63:33:fa:
90:12:dd:29:bb:cf:3c:d4:66:ab:58:1e:6c:e1:b4:
06:94:d7:05:99:82:07:c4:e1:39:11:fd:94:5a:56:
e6:8e:2b:c3:23:09:f4:d1:3e:a7:f2:66:55:0c:ae:
4c:15:81:c1:8f:c7:b5:66:eb:49:cb:ec:48:cf:35:
fe:ce:b1:4e:a9:f0:83:69:44:9f:42:4b:83:ae:0c:
b7:72:ff:4b:e3:ec:7c:28:7e:33:d2:5b:c6:0e:d2:
a8:84:8e:aa:86:10:49:f9:97:be:95:fd:18:a4:d6:
33:2c:fc:43:49:2f:0c:c7:09:ca:16:4e:ed:3c:48:
cb:6b:5f:8b:86:83:29:1c:26:a4:47:05:e1:ef:1b:
51:61:81:e8:ce:9f:b0:7a:f8:81:1c:a2:a7:32:98:
e5:4a:44:46:f9:b8:c4:85:6b:4d:c7:3e:6c:5d:1e:
29:4b:26:ca:7d:16:56:fc:f5:d4:e9:13:ae:e9:05:
eb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:55:9E:8A:C9:5F:C8:44:3F:35:81:9B:5F:28:40:05:7A:BE:56
X509v3 Authority Key Identifier:
keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:02:a4:84:6a:ed:1c:b1:9e:58:9b:de:c9:56:1d:d6:d4:b2:
9f:c8:93:0c:47:0a:e3:39:a0:03:94:14:91:a6:33:60:28:46:
c2:27:f4:58:f4:de:09:22:10:70:5a:6b:3f:b7:95:97:e3:e7:
78:d2:aa:f6:71:18:e7:65:49:a0:e1:5a:ed:9e:dc:8b:d7:a8:
a2:6b:be:dc:9f:69:df:c1:6d:b4:d5:7b:ec:b6:07:5e:b6:78:
03:5f:60:af:79:35:a6:aa:e4:68:da:1c:6b:50:3a:8c:04:b3:
8a:c9:a8:2e:8e:f6:44:0e:7b:8b:0e:88:00:51:41:0c:12:58:
66:4a:b1:7e:4a:6a:56:67:fa:4c:7f:a4:ab:f9:7e:21:e4:de:
22:23:2e:93:23:d8:05:81:51:c5:33:bd:e9:7e:84:81:14:35:
30:bf:f8:c9:aa:e1:13:8b:fe:26:ae:62:e7:18:8e:e0:93:92:
ec:ed:59:22:3c:90:e9:b1:fd:94:f2:0a:5d:61:5a:1d:3e:27:
ef:2e:e9:ce:9f:a1:01:91:b0:2f:a7:db:8f:04:1a:77:9d:08:
36:ff:b8:83:ba:dc:ca:60:66:72:10:2a:8f:32:e0:bd:e3:86:
5e:d2:c7:7f:53:00:fc:ac:20:08:b5:86:e9:9c:6d:cd:a9:01:
5b:c5:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:04 2025 by rpki-client