Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: BEht2XCq8wUKr3sWbZtVCT87BRvfp7vxZObxLOY1DZE=
Subject key identifier: 10:E6:02:62:08:E5:F3:04:30:B0:F4:AA:CA:DA:32:F9:D8:F0:A6:8D
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019A71EEB22340A2998BBF31AE81F758EC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 047F
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: t34Nx+h3/eJvjiVydhyzWODPI6ZmRPtRRbFhlYPTFNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b2:23:40:a2:99:8b:bf:31:ae:81:f7:58:ec:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=10e6026208e5f30430b0f4aacada32f9d8f0a68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:ab:f8:2f:5e:18:87:11:4d:51:e3:9e:df:
f1:c8:a2:da:33:73:59:87:d5:04:a2:d1:02:80:82:
ed:de:ec:c1:ed:26:9c:61:88:57:8a:bd:be:64:64:
18:d4:cd:0b:69:bf:37:2c:9a:d5:9e:59:8f:2c:2c:
98:d4:24:6f:f7:b1:e3:ca:7f:a1:e9:54:9c:b5:82:
53:6e:d4:bb:b2:c7:61:fb:f8:bd:ad:ac:63:1d:a3:
67:74:ec:7d:ed:ae:c0:42:60:74:3a:92:ea:38:a8:
44:c7:94:c3:34:2f:bb:27:05:3d:e2:7e:18:41:00:
c7:e2:fd:2f:4d:96:fd:46:9b:c5:c0:57:8e:2c:11:
e3:61:16:11:a4:c9:ea:ae:7b:cf:fc:97:4b:4e:79:
8c:e4:12:a2:2b:4a:64:35:34:b9:62:51:6a:37:ba:
33:24:90:55:23:5c:02:52:36:d5:b1:b8:53:37:76:
24:f4:25:0f:2b:a2:ec:f7:5e:f0:dd:23:72:7c:5c:
13:67:6d:16:7f:8f:e3:31:6d:4d:e7:19:af:87:73:
80:23:9c:a0:7c:13:e3:a1:29:fd:df:08:7f:6c:f5:
d6:bb:da:a5:dc:36:57:1d:15:3b:61:10:15:c3:b0:
95:c1:c4:5c:05:a9:a5:1d:92:c3:67:87:f5:91:52:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E6:02:62:08:E5:F3:04:30:B0:F4:AA:CA:DA:32:F9:D8:F0:A6:8D
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c2:45:3c:a5:e6:36:91:94:6e:46:63:b2:c4:9f:d2:79:5b:
5e:c3:ed:e1:e9:92:39:a7:81:01:0f:bb:6e:98:59:20:78:1d:
e7:df:bf:20:c4:b7:12:32:0b:24:9f:2d:15:6b:d2:b1:ef:34:
b3:8c:97:f5:a5:59:45:dd:37:b4:01:2f:3b:ee:4d:f3:b6:b3:
48:e4:c2:a3:f0:f8:41:6f:66:02:7d:62:8b:65:18:8a:ef:e0:
8c:b5:73:04:c8:11:50:c2:ca:9f:48:5e:11:ea:bd:39:06:db:
24:06:fd:d9:e1:6f:4d:1a:a7:aa:87:cb:c5:d5:c2:a0:ea:c3:
b3:25:f4:9f:a5:8f:62:26:0f:15:68:a3:cc:c9:c5:b6:9a:53:
6b:ea:5a:5a:85:85:9c:97:99:6a:7b:a6:d6:77:7c:9a:af:fe:
a8:8d:db:e2:3a:f5:a7:51:4a:75:fb:21:6d:33:c4:10:63:70:
a3:af:22:98:ab:fe:d6:0b:0a:f4:5f:0c:af:3b:35:0e:f2:81:
28:c3:dd:be:85:f9:b0:99:bd:6c:84:a9:68:25:8a:64:c8:6a:
f9:ae:d3:4b:91:c8:13:5f:1f:4f:f2:8d:46:41:0d:e7:2f:73:
d2:e6:e7:f5:c6:f9:2e:0a:a7:46:8a:75:2f:36:24:6d:56:22:
e2:46:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client