Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
File: 2boyAk4sthQilREv5h9rG8NFe8s.mft (raw, json)
Hash identifier: XlXw24bx3CqzU9cOLYk3iZzqzh2dCKAx6BTjGCMEBks=
Subject key identifier: BF:EC:86:BD:37:B3:7B:24:14:F8:7B:98:97:B8:B4:F6:9D:D2:06:18
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Certificate issuer: /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial: 019A503DFAA24CB91E953B347578911BCF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
Manifest number: 040F
Signing time: Tue 04 Nov 2025 19:00:30 +0000
Manifest this update: Tue 04 Nov 2025 19:00:30 +0000
Manifest next update: Wed 05 Nov 2025 19:00:30 +0000
Files and hashes: 1: 2boyAk4sthQilREv5h9rG8NFe8s.crl (hash: UYWMftXZhBWmUVjqo4fql11+O1UnjUTECwHus/JkNlo=)
2: AS5xBgzbP5q0xASJOg9vtSBeqlA.roa (hash: 1nXAgs4lTrviV/sBqRN0L9YKe+PpItQfWozhM88z0Os=)
3: _b4C80puZ4QQZiCjVn1A8db2DMM.roa (hash: BTn925eDDhMQbieFlWe3FviXvz8DAA+vgg6fsWjWAFs=)
4: t794Rq3oD5hjUa_fm7_FJ1kTjgY.roa (hash: e8v8ak73SzlgLcU/OgDyl114eL/kRo4XPjTTeE0Y/3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fa:a2:4c:b9:1e:95:3b:34:75:78:91:1b:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Validity
Not Before: Nov 4 19:00:30 2025 GMT
Not After : Nov 5 19:00:30 2025 GMT
Subject: CN=bfec86bd37b37b2414f87b9897b8b4f69dd20618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:48:fe:84:a3:3f:22:b6:d0:3c:bf:4b:e7:
e5:78:cb:61:55:46:65:6f:5a:e2:f8:51:51:db:5c:
04:33:39:24:bf:f8:a5:c0:b2:34:50:fe:88:1a:ee:
63:7e:e0:bf:06:a4:be:a5:db:8c:df:ab:5e:e8:3f:
c2:31:8b:e5:e9:99:e5:40:37:66:7b:df:02:4a:a9:
1c:44:ab:23:92:64:b0:90:57:2c:82:d8:e1:4f:32:
da:d0:48:e3:7d:26:bb:f3:9e:e0:04:3e:76:cd:0c:
e9:8f:51:5c:5a:ae:3c:f2:bf:71:93:39:73:66:97:
e5:b8:5b:ff:f1:15:ec:4d:9b:87:0f:0d:90:58:d5:
f6:de:f5:9b:02:82:48:da:e7:43:5f:f1:92:05:9b:
86:4b:14:f8:aa:94:14:e4:63:99:19:62:f2:4d:bf:
9d:00:bd:e4:92:7e:b7:94:0a:b7:c2:8c:7c:6d:c7:
f3:26:51:9a:d6:dc:5b:97:cf:9b:a6:46:75:46:9a:
04:ea:16:e3:62:d5:c1:e4:da:2c:be:78:e6:ef:eb:
82:f2:76:8e:87:40:da:e4:35:58:65:6c:a9:a5:a4:
89:7d:65:50:7d:4a:95:c5:84:29:35:09:c4:8e:2f:
db:8f:b2:41:e8:77:b2:05:6b:3e:f9:84:88:1d:8f:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:86:BD:37:B3:7B:24:14:F8:7B:98:97:B8:B4:F6:9D:D2:06:18
X509v3 Authority Key Identifier:
keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:bb:6b:7b:7b:dc:61:03:e2:7e:18:3a:84:1d:90:d1:89:
f0:65:b3:62:5c:e3:eb:f6:c8:62:49:36:19:54:fe:65:13:77:
02:68:91:e1:a0:dc:ff:86:76:a7:31:6e:f6:8d:f4:0e:8d:c9:
af:49:d0:91:61:55:e1:df:e1:fa:2e:a2:f0:2a:16:17:32:02:
5b:58:3d:d3:8a:02:56:b9:ba:65:25:ad:ba:1f:dc:7f:54:b2:
9f:e2:0e:c5:38:f0:92:b9:5a:bb:92:db:de:7e:26:e5:65:ac:
50:21:27:eb:d7:2f:61:60:85:b2:ee:0b:ba:44:02:30:9e:ea:
02:de:d2:b9:ec:25:44:1d:fa:7d:2f:63:5a:90:85:7e:5a:c9:
6c:0f:0a:10:d9:81:70:36:90:53:14:f7:3b:7c:ce:9e:a8:46:
d7:ce:e5:27:60:d9:e5:8a:67:23:50:89:6a:ea:ca:01:6b:df:
88:fd:d8:ba:5f:af:3e:5b:5d:03:25:9b:ad:55:ea:c8:dc:b0:
8d:3e:34:59:a0:4d:82:fd:fa:6b:a9:55:09:e6:b3:8b:4a:03:
ed:d6:2d:25:dd:62:43:54:27:30:e2:24:68:b7:56:f1:90:5d:
29:36:5e:91:9a:6f:b4:85:42:f9:2e:ca:62:d8:43:8b:a6:1d:
8a:e7:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:33 2025 by rpki-client