Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: On6oPTFhB1uF4UCC0pfRZpD1b/Xzr2Z7CX9ydfSPWrE=
Subject key identifier: D7:77:59:6B:F3:AA:1A:EF:42:51:9C:01:D4:55:CB:90:78:68:30:44
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019A4F61F2149E19EB92F8AF1EFA457CF7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0BEC
Signing time: Tue 04 Nov 2025 15:00:10 +0000
Manifest this update: Tue 04 Nov 2025 15:00:10 +0000
Manifest next update: Wed 05 Nov 2025 15:00:10 +0000
Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: xbdJxd3EnGiTsRHZ0DzhqW3RV6lfwS0muCXBuAjxggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f2:14:9e:19:eb:92:f8:af:1e:fa:45:7c:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Nov 4 15:00:10 2025 GMT
Not After : Nov 5 15:00:10 2025 GMT
Subject: CN=d777596bf3aa1aef42519c01d455cb9078683044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:77:3f:98:65:1a:8b:69:af:1b:68:0f:6b:
a8:70:35:3e:4a:ca:e6:cd:b2:48:ff:15:4e:a7:38:
59:87:5b:a1:8d:b9:d0:e4:d5:1d:f5:6d:67:e4:1f:
0b:f1:fa:97:bc:d4:a5:a6:d2:c1:81:6d:98:c7:62:
5a:a6:30:8a:4e:01:2b:9f:7a:fc:ab:80:d2:84:7f:
30:95:1c:d3:4f:10:e7:78:bc:9e:5b:29:7b:5d:45:
fc:eb:e6:cc:74:51:6c:2b:6d:8d:45:5e:c9:1d:99:
fe:ac:fd:18:50:a4:37:c0:c6:1e:1e:f1:43:26:ab:
fa:0f:71:2a:69:fd:90:e9:8a:79:ef:60:ea:a4:5f:
d0:70:b1:73:52:d7:34:9d:22:f2:56:54:7e:ac:46:
dc:d9:62:d1:e8:cf:51:c4:4f:e9:21:cc:bd:39:8a:
cb:5c:84:37:aa:cd:f0:94:0f:7d:ef:4d:3d:17:ba:
b8:64:1d:f3:9f:f9:48:b0:79:50:bf:33:25:27:a7:
d8:65:8f:0a:a4:ff:06:87:6e:c8:88:90:8d:7d:66:
e2:07:51:9c:c6:64:35:26:4c:d0:8f:46:82:88:0d:
5a:e5:6b:d2:1a:d0:04:e5:12:8b:9d:0c:8a:47:c1:
64:4a:0f:02:66:be:74:c0:8b:af:e2:ad:61:63:fc:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:59:6B:F3:AA:1A:EF:42:51:9C:01:D4:55:CB:90:78:68:30:44
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d7:4c:96:f7:3c:04:cd:1f:72:f2:73:38:50:d2:a3:5b:9a:
bc:c0:cd:a9:63:6c:cb:fb:0e:83:ca:36:ee:ad:1a:27:ff:ce:
bf:02:f4:f0:5c:64:eb:51:db:01:e8:ad:c5:e0:20:02:86:ad:
2b:26:3c:96:33:c4:c1:1d:ee:3d:7a:8f:ae:d1:bf:d3:84:1b:
47:ee:a4:71:06:0a:04:df:4f:00:13:95:f4:47:9f:69:42:4e:
84:6f:ee:cb:e2:1e:1a:8d:fb:25:f5:5b:84:74:03:3f:42:ce:
02:f3:45:b2:70:21:84:45:44:3e:af:25:24:ff:3c:d7:1a:ce:
c2:73:db:80:51:fc:7b:0c:61:a0:8a:2d:33:c9:83:9d:15:81:
f1:69:5b:04:36:88:f7:c7:79:42:b4:00:59:89:47:98:e4:d1:
fa:12:c9:e8:4c:f8:b2:b7:6a:12:6b:80:ab:54:25:28:ea:3d:
cf:3b:2c:9f:28:c7:aa:5c:80:9e:b7:fa:3c:58:9d:9f:4d:de:
92:69:26:3b:97:86:63:78:d4:54:1d:3a:6a:c7:23:52:80:78:
aa:3e:aa:4c:d3:38:0c:f3:55:29:63:98:4b:a0:5f:8d:a8:cf:
68:d8:c7:25:d7:02:95:a2:05:ee:91:c9:08:9d:a5:e1:40:22:
17:61:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:48 2025 by rpki-client