Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: +QEV7hmoZlcvxBcy7yR8BAZTVOH/59UDG/spzKoSQ9A=
Subject key identifier: B7:4C:93:82:81:90:44:0B:C4:70:2F:E6:14:A4:73:5A:FB:4A:35:7F
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 019923D5DA8AF4BF092576212A2A21F1A9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 03D2
Signing time: Sun 07 Sep 2025 11:00:41 +0000
Manifest this update: Sun 07 Sep 2025 11:00:41 +0000
Manifest next update: Mon 08 Sep 2025 11:00:41 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: v7mK8WUBp+r7dovJdmqEtNIW4YMwkraWlDagJgxPKpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:da:8a:f4:bf:09:25:76:21:2a:2a:21:f1:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Sep 7 11:00:41 2025 GMT
Not After : Sep 8 11:00:41 2025 GMT
Subject: CN=b74c93828190440bc4702fe614a4735afb4a357f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:d3:84:75:3e:6b:9c:d0:d5:e5:5c:01:f6:
06:b8:f1:d5:1f:60:7a:b1:13:c2:0e:5b:97:0f:09:
b1:8e:6f:bb:56:1c:39:33:03:8a:ee:9c:3c:d9:86:
4e:c7:52:b7:e3:78:23:bb:32:d8:15:ca:31:44:0b:
f2:cc:57:7c:7b:fa:06:35:78:7e:7e:eb:38:7e:df:
74:c3:0d:9d:c5:01:f3:e2:f0:65:24:d3:79:b0:f4:
07:7c:6d:5d:91:9d:be:32:35:b4:91:6c:45:72:3d:
7d:58:c0:ff:40:25:2c:c0:dd:32:1c:a3:6a:e2:42:
8c:49:87:a7:ca:d1:ed:83:4a:0d:6b:d6:e8:68:47:
5b:b6:9f:aa:ff:dc:b9:68:8e:d4:b9:5a:15:5b:2e:
32:0e:8c:69:24:d7:84:05:1a:49:a5:88:90:5f:57:
3e:49:76:e8:54:82:49:66:a2:e4:02:9b:3e:b2:ab:
60:18:31:40:b9:d7:b2:8f:d5:c9:a8:45:58:c9:b4:
39:25:75:60:c4:a0:10:dd:a1:6d:03:5b:d6:bd:37:
22:85:4d:b6:09:b5:50:96:97:5a:99:b9:ed:25:ac:
4d:90:01:a7:e2:45:9b:35:b5:ff:30:76:57:0b:ec:
bd:3c:7a:65:1d:79:4b:b7:53:0f:a3:43:5e:d8:01:
40:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4C:93:82:81:90:44:0B:C4:70:2F:E6:14:A4:73:5A:FB:4A:35:7F
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:cf:7c:e0:0a:47:e6:4d:29:53:18:0a:e5:88:b7:87:5c:
eb:e8:a4:6d:40:ab:0d:6b:7a:fc:93:55:3a:e9:be:fc:44:e2:
1d:39:bc:86:ea:eb:58:97:1c:6c:80:c3:36:8f:9c:76:ae:42:
09:aa:1e:02:e3:d8:59:ac:47:9d:48:12:56:a9:4f:6f:27:08:
34:ec:14:74:52:1e:7e:c5:b2:28:14:e6:b4:96:66:18:b4:54:
b0:f6:44:43:57:e9:76:91:fe:78:8e:f7:35:e7:9f:03:91:b5:
4d:99:04:b1:8c:c5:8b:f9:2f:19:c8:d3:0f:16:ab:00:f7:87:
a7:a3:6b:74:3d:53:ae:f8:c7:18:68:b2:8d:ad:6a:ce:4c:fc:
aa:5c:d0:7a:bb:cc:9e:a9:28:fb:94:13:d0:ba:a2:e7:94:ad:
d7:5b:fd:99:9c:ff:6d:09:1e:eb:98:bb:e3:20:0f:3c:54:d8:
0d:de:c7:49:ac:87:12:e1:62:47:28:63:ca:28:eb:e2:a3:fe:
15:f3:85:ed:ae:27:97:d7:ef:2c:02:ad:ff:fa:67:9c:48:f9:
f5:f3:00:18:b7:7a:d2:2d:1a:3d:61:de:04:d2:b1:06:a5:64:
69:28:77:91:1d:30:44:67:f2:a2:8d:f2:50:f7:63:da:bb:fd:
4f:f7:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:45 2025 by rpki-client