Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File: BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier: /7NvIINjkPZGWDAJiZd+bPyJHGvCawmTtmJpU2TyH4Y=
Subject key identifier: 2B:E3:28:24:69:00:95:21:79:27:A5:C9:09:AF:25:F5:46:F6:A9:23
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer: /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial: 019A52D204FDEB354CF18A8DA998E13584FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number: 028E
Signing time: Wed 05 Nov 2025 07:01:26 +0000
Manifest this update: Wed 05 Nov 2025 07:01:26 +0000
Manifest next update: Thu 06 Nov 2025 07:01:26 +0000
Files and hashes: 1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: FNx/csy1z8OpJ2AYcMgxfCsQeUwqMLb6izcbYJV5koU=)
2: pO5jZKPZtKc7LFh2B3gUF2ssV3Y.roa (hash: rDX32rjjFQPeFJLlsJ7HQ9El7VqEOXBlwYtku8n7ZJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:04:fd:eb:35:4c:f1:8a:8d:a9:98:e1:35:84:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
Validity
Not Before: Nov 5 07:01:26 2025 GMT
Not After : Nov 6 07:01:26 2025 GMT
Subject: CN=2be32824690095217927a5c909af25f546f6a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:f9:f8:9f:57:02:9c:f5:47:27:16:5b:32:
0a:db:ef:dc:e7:84:74:19:10:1b:ae:47:15:79:7d:
3b:13:ba:c4:0a:69:03:ef:f8:39:05:fb:4f:cb:01:
58:0f:ea:71:d5:d8:ac:52:68:bb:23:18:f7:32:c2:
f5:33:c9:68:3b:6a:66:b1:30:b9:b8:ba:f1:fc:a0:
02:cb:b2:01:a5:00:f8:51:83:0f:4a:a5:02:6a:c9:
11:51:74:0b:f4:81:e9:bf:6d:32:5f:68:f7:2a:89:
04:88:d9:27:63:61:5e:d6:c8:04:9f:ba:ac:61:6f:
7e:b9:01:8a:25:e1:d7:ed:49:97:54:b8:7d:5e:17:
68:19:0a:26:e5:d8:08:f9:c4:63:33:9a:b0:7d:57:
41:29:6e:2c:9a:36:02:2a:22:5b:88:48:d8:7d:c4:
48:8b:f5:ca:72:12:6e:0d:59:77:f5:2a:9f:ab:a4:
60:59:9a:4d:e3:ca:a6:29:e1:19:73:ec:f7:8d:eb:
41:e3:b6:0b:a1:60:1a:e2:f5:fb:da:3a:61:d3:2a:
31:48:e4:54:cd:44:9a:82:50:5e:c2:84:01:73:df:
04:5e:ea:41:00:a9:dc:11:94:fc:4c:11:6b:82:87:
2e:e0:61:61:cc:da:da:64:87:e6:5c:36:57:c8:9d:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:28:24:69:00:95:21:79:27:A5:C9:09:AF:25:F5:46:F6:A9:23
X509v3 Authority Key Identifier:
keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3c:bd:3f:38:18:f7:29:65:24:f0:10:03:bd:a7:c8:f8:e5:
c9:88:01:9e:9d:19:6c:5f:21:b9:1f:ed:40:c2:23:59:0d:c3:
9f:7b:5b:f5:14:42:67:c2:c8:c6:2f:d6:a5:a4:d9:76:29:14:
e7:cd:27:39:80:b5:03:1e:30:19:d7:78:91:37:59:e2:5f:7c:
4c:91:53:dd:78:e7:29:65:9f:83:db:15:a5:10:f7:fc:f1:20:
f2:05:a4:98:64:3b:e7:73:4b:fa:9f:05:73:4d:e5:0c:49:8f:
18:3a:be:2c:c3:f2:9e:12:b4:96:75:64:4d:49:13:c5:6c:e4:
be:f6:1a:22:32:ba:80:15:c9:73:0f:6e:ec:e1:9c:ad:8b:21:
6f:3b:11:f4:21:7e:c3:7d:99:f4:c5:e7:8b:3d:e8:d9:39:55:
4b:6e:33:57:72:8d:fa:c0:dc:51:36:d8:c5:8e:fe:bd:8c:5a:
f6:70:b6:a0:c3:cf:5a:93:58:24:b8:c2:96:76:5a:37:6c:81:
f0:bb:bf:78:41:2a:88:ef:db:a6:d4:55:65:71:12:14:1d:fb:
ef:87:6f:b1:e5:51:c2:32:c2:17:ad:0a:f4:bc:58:ca:70:df:
c7:e6:c7:5d:4e:d1:84:2e:1e:e1:01:da:98:0f:8e:87:ce:f5:
8f:06:40:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:18 2025 by rpki-client