Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: FpoXF1HeT5kJOPYWmcqX82irAFKudRVaxJYlviOmVFU=
Subject key identifier: 1A:D2:40:16:B9:55:48:00:51:1F:7B:0E:A2:FB:26:D6:A2:61:FE:A5
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019A4F2B723FF5BA42570D64D25525880A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (hash: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=)
2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: C34KhBRRLF8+AzEDWBMNebET2nbWl0CiMzkWHX5GGVQ=)
3: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (hash: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=)
4: hfyAz_QYTue5Wbe5vJxSavU_6HY.roa (hash: 4N/5nYpUdCpyKpn/U/R7SrWZ90U5qc3XnEimDy5XhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:72:3f:f5:ba:42:57:0d:64:d2:55:25:88:0a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=1ad24016b9554800511f7b0ea2fb26d6a261fea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:5c:74:3c:e2:42:0b:07:fb:b1:9d:97:23:
de:82:e9:0e:4f:6c:97:0b:6b:9c:11:98:29:4f:fa:
6f:2a:b0:db:44:76:7d:70:c0:e3:0e:7a:78:d5:ea:
90:30:b6:e2:b4:12:a0:46:a6:83:6c:11:54:33:ee:
cb:1b:0d:68:4b:78:f3:a7:ab:1a:77:2f:02:ce:68:
ba:37:2c:d8:a5:50:32:16:cd:48:1d:dc:37:ab:22:
23:ba:4e:b3:62:f7:5c:dd:99:fb:f6:79:bf:fd:71:
0c:7b:d5:c8:93:48:de:92:11:23:99:b7:ca:0d:8e:
b9:cc:0d:7e:1a:2f:6a:1a:2e:41:c0:fa:7e:66:a4:
7f:2c:28:fe:cc:33:6c:e1:38:10:5a:ec:c9:56:20:
3c:91:73:42:6e:5d:17:b3:4a:d7:7a:ca:d3:76:ac:
35:6c:70:ac:80:86:d3:72:76:16:00:97:7f:e6:b2:
70:a7:a3:58:53:5d:3f:24:89:93:62:9b:6f:bf:a9:
29:ab:9d:28:56:1f:e2:04:5d:37:ee:66:da:67:ba:
a2:47:eb:07:f2:c8:d6:fe:ac:a6:ed:8c:b8:10:99:
85:14:e5:e9:4a:d3:5a:b4:71:e8:4d:d3:9d:aa:5b:
7d:4d:00:96:92:b1:c1:54:8e:40:72:06:4a:45:81:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:40:16:B9:55:48:00:51:1F:7B:0E:A2:FB:26:D6:A2:61:FE:A5
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9c:2d:fc:8b:4f:f9:dc:b7:8c:05:e1:3f:70:07:48:bb:44:
b5:76:6a:a8:36:25:68:2e:ef:30:b7:c7:4d:72:24:b0:c6:8f:
05:9b:9a:8d:40:32:e2:ac:4e:00:c4:47:91:28:a0:7b:db:a7:
33:da:11:c7:34:eb:ac:6e:d2:00:a8:ec:57:b3:8a:da:69:a8:
ca:f3:20:a5:2e:b0:b3:3d:44:09:75:4f:1d:7f:c2:ee:2f:c6:
90:db:4f:0b:d3:7d:d9:99:29:f5:15:bc:bd:2c:2a:b9:ec:49:
9d:22:d1:ed:bf:ed:d0:f4:cc:85:2d:b8:4f:c6:00:02:44:fe:
d1:ff:5c:cc:5f:94:46:5e:2d:98:9c:43:83:8f:b9:65:90:dd:
3c:d2:18:53:d4:48:47:e8:5f:47:2e:3b:51:c9:64:c8:14:f9:
a9:44:f0:fd:d8:c3:f5:bb:55:43:b1:a4:e6:8d:83:0e:66:c3:
da:fb:0b:17:65:a6:77:50:d6:4c:7f:2b:1a:c5:88:5a:33:30:
cb:d7:fe:5d:23:c9:42:40:86:74:6e:63:1c:7d:4d:07:91:25:
cb:36:57:47:1b:fc:0f:a8:2f:14:a6:cf:76:9e:5f:ff:89:61:
aa:53:6c:1c:12:d4:8c:62:a6:60:4e:dc:37:8c:49:bc:f9:cf:
6d:e1:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:49 2025 by rpki-client