Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: WuKHTipNo/Dlg47mYN5qgcR29eIoXzAcOAssNvNIP4Q=
Subject key identifier: C3:FB:C6:E6:42:A1:58:4F:7E:F1:33:03:65:AE:59:A8:E7:9A:61:5F
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 0199FC58CFF4FAA95706AFD751C2F77FA2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 0713
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: tXqZ3VbQKVy5/rJe7B2NNYE4M6JBij+pznK1zArzCmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:f4:fa:a9:57:06:af:d7:51:c2:f7:7f:a2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=c3fbc6e642a1584f7ef1330365ae59a8e79a615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:c2:2d:1f:d3:84:d0:cf:73:e6:31:48:13:
4e:a1:c5:df:63:bb:91:5b:b0:b8:d6:f7:e0:a1:50:
1e:01:22:1d:f7:90:93:fd:3b:d0:33:d1:7a:18:c9:
b3:1c:af:10:14:8a:2b:d7:df:00:ff:a7:3e:bd:01:
a1:b4:3a:f0:fe:c8:09:4c:8b:4c:f1:db:30:6d:be:
cd:cf:4d:61:47:65:4b:47:6d:c2:c8:c0:3a:39:8a:
b3:45:e3:27:63:89:2b:f3:84:d8:e3:02:f6:16:56:
2e:72:3e:42:ef:56:63:e0:5c:1b:b1:70:cd:dd:c0:
55:95:43:d3:f7:2e:bb:72:59:de:4a:46:c7:f0:ac:
ce:c3:12:19:f0:87:23:69:a7:b6:ee:be:33:84:f3:
68:9d:f9:67:f7:3a:3f:c8:0c:08:17:37:67:d1:44:
97:a6:00:a7:f9:a5:04:bd:89:44:3a:00:c3:6e:84:
7e:6a:43:17:ba:a7:6e:d7:be:eb:dd:67:d9:9a:49:
fa:bc:0d:27:6b:21:c9:6e:94:09:5a:6a:1c:79:0c:
cd:8f:81:cc:e4:87:aa:85:46:c5:5b:b7:05:2a:43:
2c:2f:d2:a3:8e:e5:f5:d6:b0:86:2e:90:1e:a8:4c:
f4:d7:20:28:10:c6:6e:f7:80:50:49:0f:72:f8:26:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:C6:E6:42:A1:58:4F:7E:F1:33:03:65:AE:59:A8:E7:9A:61:5F
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:95:26:e9:fe:12:64:ee:33:2e:d0:46:b7:b6:13:0f:31:44:
a9:e9:c8:06:ad:bd:6c:9e:51:5d:7f:32:0d:94:25:57:cc:8a:
f6:8e:42:a6:e0:01:4e:b8:be:4c:9d:92:67:48:d9:8f:e9:21:
5a:c7:86:e1:de:80:e6:44:0d:4b:fc:ca:8b:ec:ee:88:df:7f:
ed:d0:c8:00:ba:07:76:41:f7:ac:41:5c:56:5c:4b:4e:37:b9:
6c:74:0a:64:c4:5d:61:76:24:dd:69:7c:78:43:cc:b4:85:99:
88:61:1b:a9:6a:3d:4a:c2:de:fd:42:cd:3f:29:87:a3:4e:23:
fb:22:73:67:b9:8a:72:8d:c2:e7:5d:f1:93:42:e5:b4:8d:fa:
3d:cf:2e:1e:bf:46:9c:0f:a9:0e:79:47:de:0c:bc:0f:97:f0:
01:b3:63:7a:17:66:8b:3d:c7:14:32:44:f5:a5:18:f6:29:ec:
92:5d:f4:64:f2:3d:7f:5c:87:48:60:1e:32:df:40:f4:51:2c:
13:f4:b9:0e:cb:6c:cc:42:be:de:ec:3a:42:99:64:0f:cd:75:
9c:ab:93:02:f9:9b:66:68:3e:d1:36:9e:5c:a2:99:db:71:68:
0a:5a:e3:a0:10:32:67:91:39:43:58:ea:de:a2:bd:3b:68:ad:
dc:71:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:47 2025 by rpki-client