Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft (raw, json)
Hash identifier: Hsy0YjrgIm3tCtT0EJJzw0Sg8VjYZIlMRUFsMV8CoN4=
Subject key identifier: FE:A4:D2:6C:14:7B:6C:EA:2A:6F:ED:27:E5:8B:4B:7E:E9:B7:C8:9F
Authority key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
Certificate issuer: /CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Certificate serial: 019A71EEC0500894BDEA66193D0FAC4C6E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 08:01:03 +0000
Manifest this update: Tue 11 Nov 2025 08:01:03 +0000
Manifest next update: Wed 12 Nov 2025 08:01:03 +0000
Files and hashes: 1: CfbCB0PQx5l8WTJ2S7ENdm7RZdM.roa (hash: 875hfwYq5vhAYX7OIsUoPo8qm1rzCuQ03Pj7tkWPWtU=)
2: RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl (hash: zkZjUzswtFUZsYZ+azJp2+7vtnLVYW2xJCkh8OKa3cQ=)
3: TjHy4ulEjJA8xpiOl0d0n0t-qZM.roa (hash: guL/zUqcF8RpE1MCIVixAjYcS9Inm0bcZt3sQXZZ4XA=)
4: hfyAz_QYTue5Wbe5vJxSavU_6HY.roa (hash: 4N/5nYpUdCpyKpn/U/R7SrWZ90U5qc3XnEimDy5XhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c0:50:08:94:bd:ea:66:19:3d:0f:ac:4c:6e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4413bdf4dc7435faf51ba934d65570f71c21731a
Validity
Not Before: Nov 11 08:01:03 2025 GMT
Not After : Nov 12 08:01:03 2025 GMT
Subject: CN=fea4d26c147b6cea2a6fed27e58b4b7ee9b7c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:3c:95:a7:c2:1d:2f:4a:c6:27:f9:14:6e:
ca:9a:4e:49:6d:b5:e6:65:f3:38:25:33:6b:ea:82:
9b:fe:54:11:05:e4:f8:f2:4b:ef:ae:a1:2d:e7:84:
24:f7:f2:6d:1b:ee:eb:4d:dc:d1:6e:ab:61:4d:d6:
03:ad:16:ed:39:c9:77:69:f3:20:11:7f:e1:bb:43:
98:3b:af:86:86:58:02:b6:56:6a:31:cd:44:21:7d:
8e:0f:6d:06:77:9d:b6:ef:03:a8:af:a1:98:5c:c1:
2a:9d:10:fa:98:9d:ca:f3:7f:c3:83:36:61:b0:a8:
29:d5:0b:2d:ab:b6:7a:bc:7b:11:79:e4:89:48:8f:
b2:8d:fc:a2:9a:fc:67:8e:6f:6e:2a:b9:06:64:fc:
74:58:32:35:37:75:02:93:f2:fe:f8:c2:ab:df:4f:
ea:a9:9c:43:f9:e1:5a:e6:50:1f:54:e3:f6:63:5c:
19:96:e9:b8:9a:73:d9:87:8f:79:6b:8d:d9:2a:1d:
3b:81:9c:f9:48:3a:ca:0a:20:81:7c:60:7f:34:e4:
4f:b5:e2:d6:c6:90:cd:db:85:35:c7:06:c5:06:0d:
1a:a8:ea:95:d6:6e:ff:a7:1b:9d:fc:61:f4:28:78:
1a:b9:03:b9:d1:ad:8d:01:8e:82:d4:10:38:b7:f6:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A4:D2:6C:14:7B:6C:EA:2A:6F:ED:27:E5:8B:4B:7E:E9:B7:C8:9F
X509v3 Authority Key Identifier:
keyid:44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:ec:c1:3a:36:c3:99:36:61:a4:f4:99:cd:ee:4a:a1:c7:
71:75:60:db:1c:98:5c:ad:a3:69:8b:c4:f1:73:69:c8:8e:e7:
0f:c5:2e:7d:78:28:8b:3c:67:47:4c:9d:83:80:13:e3:67:98:
46:ef:e4:8b:a6:c8:4d:0d:32:e2:46:d8:86:6a:5e:d9:6e:b3:
93:0c:32:ca:f8:95:b3:4e:f8:d7:a7:bf:61:b1:7d:b8:24:d6:
81:4c:d6:30:fc:1e:1e:9d:15:6c:7f:50:fe:87:33:82:63:73:
9b:8b:d6:be:a5:b2:1e:a2:6b:67:dd:30:92:60:c7:62:61:36:
e3:ea:5b:83:5b:3a:fc:a2:91:27:9c:15:0a:aa:2d:00:0b:dd:
93:6d:57:1f:0e:a1:dc:86:3f:bb:60:68:f7:8f:d7:64:08:d9:
f0:4f:ca:07:b2:ff:08:78:4a:fa:d0:f0:77:9b:ce:1d:d4:66:
8e:d0:15:3b:36:8c:8a:da:f1:9c:91:3f:f0:7d:a1:93:ff:be:
83:a9:bd:6f:d8:0c:e5:ea:09:5c:9b:4f:80:6a:47:a2:3b:99:
b1:d7:12:55:19:06:98:03:5c:7f:fb:db:a6:e3:01:e1:37:d8:
fd:af:3c:fe:3a:28:71:7f:66:da:07:dd:8e:74:c4:b7:f6:fd:
b7:83:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:30 2025 by rpki-client