Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: Grd4gI5ePPYEkc5RCd+P63iWbmA363XQj6epwmFftG8=
Subject key identifier: 71:F9:0F:84:A3:94:26:B5:38:48:B4:2C:3E:A6:4D:F5:C9:DD:64:29
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 0199FBEBBBD6975186DC3F2437077F513311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 0DC5
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: +i6dWTDv4toSGGY5PweTdPDVmjfhNoM7sV9nGwWdbkk=)
2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bb:d6:97:51:86:dc:3f:24:37:07:7f:51:33:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=71f90f84a39426b53848b42c3ea64df5c9dd6429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:94:c7:1a:fe:78:6c:7a:94:fb:ad:ce:a8:
83:68:5a:63:33:2d:8e:bb:b5:59:a5:be:58:3a:84:
94:b6:7d:45:d8:d4:55:33:df:39:2a:45:4d:48:cf:
a5:35:af:53:ec:cf:e3:c3:e0:d0:07:52:66:16:7d:
52:26:6e:f6:89:9e:a7:01:79:4a:2c:9d:4c:3c:4c:
de:fc:b3:92:e2:c1:7e:e4:de:75:3d:cf:da:de:d2:
b3:61:41:f2:08:1c:1b:f9:83:ed:a2:3a:29:2c:23:
cd:db:2f:5d:62:63:d0:28:c5:ae:ea:4b:23:ea:27:
5a:26:16:45:42:1a:10:8e:f4:cc:11:ca:d8:4e:73:
e8:b0:db:42:5e:01:2c:79:47:63:fd:8f:bb:a9:63:
de:17:33:b6:6b:de:1f:79:7a:fd:2f:79:72:cc:e3:
9c:32:39:42:7f:fb:dc:1d:de:b9:48:81:f5:18:1e:
84:20:7b:46:2f:b7:af:80:62:74:2b:5a:64:10:05:
03:ca:bc:1f:38:9e:49:4a:74:b4:4f:23:2a:12:43:
c2:bf:df:fe:fa:c1:41:a3:91:d1:96:79:67:2b:b2:
52:b3:37:88:e2:bf:68:2f:84:00:bd:13:fc:da:0d:
a7:91:f1:56:24:0c:6f:06:88:07:52:15:7a:5b:a8:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F9:0F:84:A3:94:26:B5:38:48:B4:2C:3E:A6:4D:F5:C9:DD:64:29
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b2:dc:1d:88:61:9f:0a:b7:86:f5:3e:bb:cb:f0:6d:19:6b:
bb:73:0c:a9:33:fa:d2:c9:04:85:16:63:a9:1d:23:aa:e4:6a:
4e:45:f1:a7:32:02:5a:83:a0:79:31:b1:a4:dc:58:27:c6:bb:
bc:95:ed:bc:bd:27:dd:85:a8:5a:fc:7b:0a:94:45:f3:85:bd:
d8:77:57:94:bc:70:5a:cb:91:35:fb:81:73:58:bf:d6:91:0a:
e7:f1:24:f7:ad:d0:e4:5f:4d:f4:80:89:ac:f0:7b:e1:ba:7c:
a9:3c:5d:fc:35:93:fb:37:43:b0:e2:ea:92:79:aa:28:a8:6b:
dd:a5:e9:23:5e:09:a0:d3:ae:3a:39:fa:ee:39:27:6a:24:bd:
33:80:d8:c0:ea:e9:7c:6e:d7:cf:50:29:ac:4a:07:03:36:f0:
c2:9e:0f:5f:be:3b:d6:eb:ab:d9:eb:90:19:a3:ec:30:98:02:
05:db:ab:77:0a:d3:41:fb:c5:db:5c:52:25:cb:a4:dc:04:ab:
27:5b:11:dd:c4:2c:da:9c:3e:2c:c6:3c:b6:0f:76:7e:c0:e0:
38:23:43:e4:2c:32:f3:0e:85:6e:66:b2:7e:5c:e4:0d:12:b4:
2b:1a:cf:2a:c5:d6:3f:09:da:3b:71:a9:ae:62:9b:96:38:20:
70:c8:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:06 2025 by rpki-client