Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: zJxv8S2/w4z/BgL8fB7i09bjVy5XCudt7rXQTD8Ed9c=
Subject key identifier: 74:B7:FB:48:B0:C2:94:C3:86:39:F4:67:CA:34:62:74:FE:29:5A:44
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019A02C790BE7A5C8AF639FB5A5D0B864ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0A20
Signing time: Mon 20 Oct 2025 18:00:24 +0000
Manifest this update: Mon 20 Oct 2025 18:00:24 +0000
Manifest next update: Tue 21 Oct 2025 18:00:24 +0000
Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: zpEkcepf9pQWtTGSFHLJxv44Jm5NW+Bf4/EgzxshlF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:90:be:7a:5c:8a:f6:39:fb:5a:5d:0b:86:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Oct 20 18:00:24 2025 GMT
Not After : Oct 21 18:00:24 2025 GMT
Subject: CN=74b7fb48b0c294c38639f467ca346274fe295a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:85:bb:05:88:74:d7:72:5c:74:ff:f5:3d:
68:3e:cd:81:60:e0:04:4a:d6:de:ca:a8:3d:d8:27:
1b:4e:ba:82:e8:0a:23:c2:d7:c4:21:96:0a:5c:73:
29:15:80:6e:46:0d:c4:b2:a1:50:89:6e:5e:30:3c:
4d:18:fe:ef:b0:02:e2:92:5b:5e:f2:f1:51:04:43:
48:ff:a5:a9:34:01:90:52:94:9b:9e:2a:d8:7f:76:
97:68:ec:23:25:00:63:ea:18:f0:89:d5:6b:6f:fa:
ff:be:87:b2:8a:2e:7a:a8:d4:34:27:1f:1b:1c:2f:
8f:dd:fb:d5:0c:fd:01:25:20:f6:6a:10:7a:86:27:
0c:2f:0c:ba:3a:95:21:52:6c:a6:d5:2c:b0:cf:bf:
f8:6f:55:3d:05:e5:cb:46:ae:a7:3a:02:28:27:40:
bb:f7:02:bb:6d:48:5b:1d:58:66:3a:4c:5d:dc:c4:
33:f4:21:de:9a:f1:cd:4d:72:1e:e6:96:f1:35:69:
be:ff:ce:99:70:40:d0:df:1f:bf:41:c0:04:b1:c4:
74:87:8b:79:d7:73:b8:96:46:b6:b1:1b:b9:10:9e:
8b:76:47:9c:51:d3:1a:0e:c4:ce:f8:e1:99:d9:d5:
cb:b4:fe:ea:8e:ef:5d:b7:38:06:63:f2:7e:a6:e2:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:FB:48:B0:C2:94:C3:86:39:F4:67:CA:34:62:74:FE:29:5A:44
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:d6:07:79:9b:4f:21:6a:ec:a8:ee:fe:02:64:71:c4:72:
40:87:99:1d:81:25:2d:25:6e:27:a0:f4:39:4f:1c:bf:59:d1:
6a:f1:b2:c6:b1:b6:2f:0e:10:53:7a:e5:08:dd:6a:70:b0:da:
af:69:58:86:26:43:6a:79:f5:47:2f:a3:39:ef:ce:aa:4d:fb:
21:80:46:33:6a:eb:1d:4a:05:a0:6f:ef:ab:b2:ff:12:2a:ba:
1f:35:45:5f:3a:24:93:f9:6b:46:3a:c5:1f:35:b6:4b:fb:7e:
c0:26:e6:8a:e1:41:06:e0:d7:30:89:15:1a:a7:14:72:c7:ec:
eb:2c:94:ba:64:7e:02:ed:53:5e:c5:35:94:5d:6d:1d:c9:c5:
01:33:64:85:b7:9e:92:1d:78:74:77:d9:67:bb:42:66:8f:e1:
4b:31:97:09:79:2a:55:76:72:ae:0c:6a:b6:d1:63:d0:be:54:
cb:ca:43:00:41:d4:fb:2a:9c:3b:be:81:44:f8:51:20:73:1a:
f7:8b:6b:45:e7:cf:08:27:84:17:6d:62:27:87:11:c7:bb:47:
c6:76:dd:73:b1:93:f7:96:fc:bc:d5:26:fc:2a:f7:e1:17:c5:
79:ab:b7:3d:a3:e4:5d:26:2b:4b:cd:7f:43:90:ba:5e:cf:62:
15:3f:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:53 2025 by rpki-client