
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: Kcj3O7ZWLJkeXGNHlRrRZDVN3v4DOjbuazfYgL+RRDw=
Subject key identifier: 19:AA:4A:9A:A2:6C:3C:8F:21:87:3E:71:BC:9F:54:C8:A1:EF:57:5D
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 0199FBEA995FF1C49209AD98C9A66267D7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: FD
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: 46XzKu3a4fKMXeCuE9jWSnT4sKA.roa (hash: lwL0HgCdLMecbbEuLUkH/UrJUTEh7UkBeV4V3Vskvyw=)
2: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: jGMbSaXwQfa/DOMDcB7BGGMwfYgKK9DRiV1oSoVNZQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:99:5f:f1:c4:92:09:ad:98:c9:a6:62:67:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=19aa4a9aa26c3c8f21873e71bc9f54c8a1ef575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:6e:1b:56:02:de:e0:b7:f3:12:89:49:ac:
aa:38:4a:e0:37:d3:40:5a:e9:62:a8:73:fb:44:5e:
a2:ec:de:fe:26:b7:bf:e3:93:8a:a8:c3:b2:f8:89:
ae:d5:81:66:4f:87:8a:a6:61:52:00:ec:f1:29:5b:
df:6b:2c:07:38:87:e6:3b:91:30:60:ca:de:fc:45:
ef:09:8d:2e:4a:e1:8b:9f:16:5b:2b:23:5a:80:cd:
5d:af:eb:61:3f:7a:89:1b:ad:8c:1a:58:8f:97:1f:
da:b5:56:75:1c:cb:bd:fb:c0:d1:cf:cc:4b:59:70:
c4:43:17:e5:c6:94:98:5e:46:de:d1:eb:7a:01:40:
3a:79:f7:e8:39:d0:70:b6:7d:00:05:52:1b:35:29:
63:7c:48:4c:e2:69:da:6c:35:c7:3e:1c:cc:44:38:
fb:fa:7a:61:12:89:36:cd:3f:32:2c:28:be:de:e9:
fc:c8:c1:b2:a7:db:cd:d1:eb:6b:ac:e2:7f:be:ed:
e3:5b:9a:01:93:32:d5:e6:44:ff:b8:93:43:55:ed:
2a:b1:d4:aa:0d:66:d8:35:70:d5:56:a5:78:ff:18:
90:6a:00:98:76:56:e2:de:1a:94:2d:96:2c:c0:6c:
e9:4e:ad:9a:0e:e2:c0:b2:a1:df:d8:9a:8d:99:e4:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:4A:9A:A2:6C:3C:8F:21:87:3E:71:BC:9F:54:C8:A1:EF:57:5D
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:42:ed:55:b9:90:f7:0b:73:84:62:65:9e:dc:5d:19:f6:7f:
7c:55:c9:07:a7:02:55:fc:6c:04:91:5b:2d:e3:70:02:6a:2b:
e9:5c:9d:fe:95:66:f6:46:2f:61:23:30:cc:45:dc:6e:71:bd:
18:1b:0a:71:be:73:d4:59:ff:25:1c:d5:78:82:3d:41:76:47:
82:b2:44:50:6d:0b:47:a2:63:d7:e8:b3:a4:31:99:dd:79:45:
22:e7:fc:3a:2b:3c:f0:f9:ab:b1:a9:f2:6e:76:c2:07:c6:49:
5d:da:4e:bb:97:95:ce:46:98:04:f1:8a:f2:fb:9f:5e:6f:0b:
8b:92:69:1e:e4:68:43:69:3a:cc:ac:af:e5:9e:f8:de:87:1b:
f7:9e:c5:e8:57:96:f7:cf:cd:6e:da:ae:a0:c4:01:e2:d0:55:
87:ad:db:0d:bf:a7:f1:89:4f:76:34:ab:f5:44:7d:1c:e6:fe:
16:10:9d:48:bd:98:61:16:e0:62:6f:a1:3d:01:89:83:38:82:
5b:6f:04:c5:4e:3d:47:ce:7d:62:b5:75:5c:3b:8a:ab:e0:97:
43:c7:12:75:1b:6e:0f:a3:2d:e7:3c:6b:ca:f7:e9:67:70:7b:
aa:0e:3b:3d:fd:b0:fa:17:3d:ff:3f:ed:fc:5c:8b:ed:89:40:
48:78:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:50 2025 by rpki-client