Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: rCvOPCpyMslGR8rVT88W+882HyeD/AdHRf5we9fjlgc=
Subject key identifier: 4A:25:23:AD:FB:80:7C:31:C4:49:6D:8B:53:0B:57:1C:77:94:CC:38
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 0199FA69D2794D585597F922EC98C3807EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 0F49
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: fa6l/gQi6G6eWpFxTwA768PANudYLD4HgP7DjS1vKOg=)
2: x6Cel_08OWE19q-AcizBR0ACi2Y.roa (hash: Sht5kyrGhRMA3M4THfiOB/W3LAiYhjT0defWZa2cBtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d2:79:4d:58:55:97:f9:22:ec:98:c3:80:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=4a2523adfb807c31c4496d8b530b571c7794cc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:dc:07:53:53:9d:d2:b2:17:84:a7:e7:de:
09:33:9a:32:7e:15:fd:40:fe:34:9a:49:af:81:5c:
e2:c2:12:86:91:cd:0d:e8:6e:d2:d4:73:db:12:e9:
ec:d1:3e:d5:f1:da:19:ee:34:0e:82:52:75:a5:f8:
ad:eb:1a:1f:c3:da:da:3d:6e:92:ec:40:ba:34:57:
51:76:c5:7c:25:0a:98:2a:da:a0:e7:bc:7f:ff:f7:
18:70:d4:75:3f:f6:68:90:14:9f:0b:d9:65:bf:f1:
7d:cc:ad:73:1d:db:c7:a3:d4:85:fe:9d:20:35:00:
2a:7a:e5:fa:fd:f4:a9:5d:50:4f:b3:b2:50:10:d1:
7e:48:d8:b7:ec:ba:6f:73:af:b7:55:01:61:59:fa:
96:ef:6c:f0:de:f3:b8:30:1c:fa:c0:73:fb:d9:49:
51:55:9f:59:db:94:ce:7c:36:68:da:60:d1:d9:d6:
02:a4:bf:62:c2:33:cc:b3:1e:08:e4:f9:90:ce:71:
d1:f1:30:92:b7:42:51:55:75:90:f5:65:3a:51:fc:
24:dc:16:6b:e5:53:93:de:c0:07:b8:6d:2d:d0:0c:
21:41:57:32:99:75:79:d0:70:af:aa:18:d7:5a:fd:
25:bd:cc:d8:8a:10:01:a9:37:b6:4b:66:72:94:d7:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:25:23:AD:FB:80:7C:31:C4:49:6D:8B:53:0B:57:1C:77:94:CC:38
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:72:73:1f:ba:be:fe:0a:b6:04:8f:54:fd:0f:03:3c:c6:
6b:54:2d:63:df:31:bb:0a:82:33:4b:6d:59:3b:37:22:60:bf:
ce:95:14:ae:33:1a:95:02:40:59:77:8d:d9:4f:5c:6c:09:33:
76:26:66:00:bd:af:ab:30:b6:8a:d1:6b:08:81:25:59:2e:c1:
18:1d:fb:2d:21:86:d2:93:d4:59:a5:52:9e:e9:bd:e6:6a:c3:
32:3c:4b:e6:a7:df:4c:79:70:91:2c:8e:51:3f:60:d4:59:fa:
b0:d1:1f:0a:42:0a:31:f3:03:33:73:21:c4:9e:46:a9:b4:b2:
a4:0d:0e:c7:d0:3b:d6:bc:3d:ab:6e:cd:0b:6f:d0:1b:f9:fa:
da:2c:02:4c:16:57:2e:2a:b7:0a:f4:38:e7:0d:01:90:b8:3b:
ed:f6:05:57:60:0e:74:b6:38:ae:71:59:f7:94:02:fe:aa:74:
b4:39:b9:64:24:60:af:07:4a:62:c5:b1:3a:9f:ee:69:a7:cd:
f6:1c:ac:27:f6:7f:c3:f7:1e:20:f6:b1:e5:cd:4d:c5:4e:41:
4a:6d:f7:7e:55:59:0c:d9:67:cc:ed:76:e2:2d:ed:47:8e:00:
84:79:77:3d:62:7b:61:05:3e:7e:c8:37:c9:a0:5c:6a:7e:9d:
ae:6e:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:12 2025 by rpki-client